Merge 0975063ed3 into 962b721a24

Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/substack/node-shell-quote/releases)
- [Changelog](https://github.com/substack/node-shell-quote/blob/master/CHANGELOG.md)
- [Commits](https://github.com/substack/node-shell-quote/compare/v1.7.2...1.7.3)

---
updated-dependencies:
- dependency-name: shell-quote
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/update-empty-branch.yml

@@ -0,0 +1,18 @@
+name: update-empty-branch
+on:
+  workflow_dispatch:
+jobs:
+  main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - run: |
+          git worktree add --track -b empty empty origin/empty
+          rm -rf empty/*
+          git config user.name bot
+          git config user.email '<>'
+          git -C empty add --all
+          git -C empty commit --allow-empty --message "based on $(git rev-parse @)"
+          git -C empty push origin empty

.github/workflows/update-latest-release.yml

@@ -0,0 +1,29 @@
+name: update-latest-release
+on:
+  workflow_dispatch:
+jobs:
+  main:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - run: echo ok > hello.txt
+      # - uses: actions/github-script@v6
+      #   with:
+      #     script: |
+      #       const { data: release } = await github.rest.repos.getLatestRelease(context.repo);
+
+      #       const name = "hello.txt";
+      #       const data = await require("node:fs").promises.readFile(name);
+
+      #       await github.rest.repos.uploadReleaseAsset({
+      #         ...context.repo,
+      #         release_id: release.id,
+      #         name,
+      #         data,
+      #       });
+      - run: |
+          latest=$(gh release view --json tagName --jq .tagName)
+          gh release delete-asset "${latest}" hello.txt || :
+          gh release upload "${latest}" hello.txt
+        env:
+          GH_TOKEN: ${{ github.token }}

npm-run-script/package-lock.json

@@ -630,9 +630,9 @@
       }
     },
     "node_modules/shell-quote": {
-      "version": "1.7.2",
+      "version": "1.7.3",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.7.2.tgz",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.7.3.tgz",
-      "integrity": "sha512-mRz/m/JVscCrkMyPqHc/bczi3OQHkLTqXHEFu0zDhK/qfv3UcOA4SVmRCLmos4bhjr9ekVQubj/R7waKapmiQg==",
+      "integrity": "sha512-Vpfqwm4EnqGdlsBFNmHhxhElJYrdfcxPThu+ryKS5J8L/fhAwLazFZtq+S+TWZ9ANj2piSQLGj6NQg+lKPmxrw==",
       "dev": true
     },
     "node_modules/spdx-correct": {
@@ -1241,9 +1241,9 @@
       "dev": true
     },
     "shell-quote": {
-      "version": "1.7.2",
+      "version": "1.7.3",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.7.2.tgz",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.7.3.tgz",
-      "integrity": "sha512-mRz/m/JVscCrkMyPqHc/bczi3OQHkLTqXHEFu0zDhK/qfv3UcOA4SVmRCLmos4bhjr9ekVQubj/R7waKapmiQg==",
+      "integrity": "sha512-Vpfqwm4EnqGdlsBFNmHhxhElJYrdfcxPThu+ryKS5J8L/fhAwLazFZtq+S+TWZ9ANj2piSQLGj6NQg+lKPmxrw==",
       "dev": true
     },
     "spdx-correct": {