[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
string-argv	0.3.2 → 0.4.0

---

Release Notes

mccormicka/string-argv (string-argv)

v0.4.0

Compare Source

Parsing Behavior Changes (thanks to @​TooTallNate via PR #​24)

• Rewrote the parser as a character-by-character state machine instead of the previous regex, so adjacent quoted and unquoted segments are treated as a single argument, matching bash word-splitting
• Quote characters are now always stripped, including word-internal and key=value positions:
  • --foo="bar"'baz' -> --foo=barbaz
  • a" b" -> a b
  • "a"b -> ab
  • run:silent["echo 1"]["echo 2"] -> run:silent[echo 1][echo 2]
  • --name='Phil Taylor' -> --name=Phil Taylor
• Fixes #​20 (word-internal quotes were not stripped)
• Fixes #​23 (unquoted tail after a quoted section was split into a separate argument)
• Known differences from bash, unchanged by this release: backslash escapes are not processed, $variables/globs are left literal, and an unclosed quote consumes the rest of the input instead of raising an error
• Security dependency bumps: minimatch 3.1.5 via #​25, brace-expansion 1.1.16 via #​27
  Build / Breaking Changes
• Update TypeScript to 7.0.2 (requires Node.js >=16.20)
• Drop CommonJS support: the package is now ESM-only (import only). The commonjs/ build, the require export condition, and the module/main CJS entry points have been removed — main and exports now point to the single ESM build (./index.js)
• Consolidate to a single build: removed tsconfig.base.json and tsconfig.commonjs.json; tsconfig.json is now self-contained (target ES2022, module ESNext, strict, declaration) and npm run build runs a single tsc -p .. Note: TypeScript 7 no longer accepts the old target ES3 (hence the ES2022 baseline)
• Minimum Node.js version is now >=16.20.0 (engines updated accordingly)
• Tests: removed the CJS require() spec (test/Index.spec.cjs); test/config.json now runs *[sS]pec.js only

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Package Changes Through 27730b8

There are 1 changes which include action with patch

Planned Package Versions

The following package releases are the planned based on the context of changes in this pull request.

package	current	next
action	1.0.0	1.0.1

Add another change file through the GitHub UI by following this link.

---

Read about change files or the docs at github.com/jbolda/covector

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​string-argv@​0.3.2 ⏵ 0.4.0			+14	-2

View full report