From d633883ee0d2879cf167630a984f0a1e9e0159c9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 7 Mar 2026 02:56:44 +0000
Subject: [PATCH] chore(deps): bump shescape from 2.0.2 to 2.1.9

Bumps [shescape](https://github.com/ericcornelissen/shescape) from 2.0.2 to 2.1.9.
- [Release notes](https://github.com/ericcornelissen/shescape/releases)
- [Changelog](https://github.com/ericcornelissen/shescape/blob/main/CHANGELOG.md)
- [Commits](https://github.com/ericcornelissen/shescape/compare/v2.0.2...v2.1.9)

---
updated-dependencies:
- dependency-name: shescape
  dependency-version: 2.1.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 37 +++++++++++++++++++++++++++++++------
 package.json      |  2 +-
 2 files changed, 32 insertions(+), 7 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c98934a..be6925d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "@actions/core": "^1.9.1",
-        "shescape": "^2.0.2"
+        "shescape": "^2.1.9"
       }
     },
     "node_modules/@actions/core": {
@@ -30,20 +30,45 @@
         "tunnel": "^0.0.6"
       }
     },
+    "node_modules/@ericcornelissen/lregexp": {
+      "version": "1.0.8",
+      "resolved": "https://registry.npmjs.org/@ericcornelissen/lregexp/-/lregexp-1.0.8.tgz",
+      "integrity": "sha512-asaQOkMr8CzYVpmCnBvEe8zejcv8Q1+f3Q1qssOF85njH1VTJfSQUYwwClE41SRdvZmN26uL08GuQk04VN2myA==",
+      "license": "MIT",
+      "dependencies": {
+        "is-supported-regexp-flag": "^2.0.0"
+      },
+      "engines": {
+        "bun": "^1.2.0",
+        "deno": "^2.0.0",
+        "node": "^12.20.0 || ^14.13.0 || ^15 || ^16 || ^17 || ^18 || ^19 || ^20 || ^21 || ^22 || ^23 || ^24 || ^25"
+      }
+    },
+    "node_modules/is-supported-regexp-flag": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/is-supported-regexp-flag/-/is-supported-regexp-flag-2.0.0.tgz",
+      "integrity": "sha512-8i4+OYUjdUaJ88KAs1WojIThDFjIpeYNrSlYy1g/At2p9YjQ7HEmB1yn60un0jRFjM3TQbKPMAluTPEPncZfqA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=12.20"
+      }
+    },
     "node_modules/isexe": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
       "integrity": "sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw=="
     },
     "node_modules/shescape": {
-      "version": "2.0.2",
-      "resolved": "https://registry.npmjs.org/shescape/-/shescape-2.0.2.tgz",
-      "integrity": "sha512-nyoggeqkwUfzMzAcc4BHDcEWe53Mbq6rHoofuCJV7DCUeJc/mMhz0CbhGPLXhs0cTJzdtFkAiS5YX7hlIFwKaw==",
+      "version": "2.1.9",
+      "resolved": "https://registry.npmjs.org/shescape/-/shescape-2.1.9.tgz",
+      "integrity": "sha512-QyJU5qjn8tvDSVQRLv98xsywk2tmx8enMB7Y8GoYRI8zYCCy5xJpa+S2hdkeiTA3pROgBy6KQJwQHvealjewuA==",
+      "license": "MPL-2.0",
       "dependencies": {
-        "which": "^3.0.0"
+        "@ericcornelissen/lregexp": "^1.0.3",
+        "which": "^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0"
       },
       "engines": {
-        "node": "^14.18.0 || ^16.13.0 || ^18 || ^19 || ^20"
+        "node": "^14.18.0 || ^16.13.0 || ^18 || ^19 || ^20 || ^22 || ^24 || ^25"
       }
     },
     "node_modules/tunnel": {
diff --git a/package.json b/package.json
index c8c8b37..660294e 100644
--- a/package.json
+++ b/package.json
@@ -24,6 +24,6 @@
   "homepage": "https://github.com/kceb/git-message-action#readme",
   "dependencies": {
     "@actions/core": "^1.9.1",
-    "shescape": "^2.0.2"
+    "shescape": "^2.1.9"
   }
 }