From 9b031fc7ca63f287f8cc1c866e2111c1eb63ca97 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 1 Aug 2026 20:42:31 +0000
Subject: [PATCH] chore(deps): bump shlex from 1.3.0 to 2.0.1

Bumps [shlex](https://github.com/comex/rust-shlex) from 1.3.0 to 2.0.1.
- [Changelog](https://github.com/comex/rust-shlex/blob/master/CHANGELOG.md)
- [Commits](https://github.com/comex/rust-shlex/commits)

---
updated-dependencies:
- dependency-name: shlex
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 Cargo.lock | 10 ++--------
 Cargo.toml |  2 +-
 2 files changed, 3 insertions(+), 9 deletions(-)

diff --git a/Cargo.lock b/Cargo.lock
index 4351a54..4cc72d8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -722,7 +722,7 @@ dependencies = [
  "find-msvc-tools",
  "jobserver",
  "libc",
- "shlex 2.0.1",
+ "shlex",
 ]
 
 [[package]]
@@ -936,7 +936,7 @@ dependencies = [
  "serde_yaml_ng",
  "serial_test",
  "sha2 0.11.0",
- "shlex 1.3.0",
+ "shlex",
  "sqlite-vec",
  "tempfile",
  "thiserror 1.0.69",
@@ -5464,12 +5464,6 @@ dependencies = [
  "lazy_static",
 ]
 
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
 [[package]]
 name = "shlex"
 version = "2.0.1"
diff --git a/Cargo.toml b/Cargo.toml
index ea33d30..bba2d35 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -91,7 +91,7 @@ regex = "1"
 
 # Shell-aware tokenizer for read-only command classification. We use ONLY
 # `shlex::split` (RUSTSEC-2024-0006 affects `quote`/`join`, fixed at 1.3.0).
-shlex = "1.3"
+shlex = "2.0"
 
 # Password input
 rpassword = "7"