From 86a0d17ca702475720e25ea481305fe3fdc4dc45 Mon Sep 17 00:00:00 2001
From: Callum Reid <callum@coval.dev>
Date: Thu, 6 Aug 2026 08:52:48 -0700
Subject: [PATCH] [COVAL-4538] Remediate critical npm dependencies

---
 package-lock.json | 12 ++++++------
 package.json      |  4 ++++
 2 files changed, 10 insertions(+), 6 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e938305..5b2276f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -5455,9 +5455,9 @@
       "license": "MIT"
     },
     "node_modules/handlebars": {
-      "version": "4.7.8",
-      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz",
-      "integrity": "sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==",
+      "version": "4.7.9",
+      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.9.tgz",
+      "integrity": "sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -7927,9 +7927,9 @@
       }
     },
     "node_modules/shell-quote": {
-      "version": "1.8.3",
-      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.3.tgz",
-      "integrity": "sha512-ObmnIF4hXNg1BqhnHmgbDETF8dLPCggZWBjkQfhZpbszZnYur5DUljTcCHii5LC3J5E0yeO/1LIMyH+UvHQgyw==",
+      "version": "1.9.0",
+      "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz",
+      "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==",
       "dev": true,
       "license": "MIT",
       "engines": {
diff --git a/package.json b/package.json
index 9f740f6..bc5adec 100644
--- a/package.json
+++ b/package.json
@@ -72,6 +72,10 @@
     "tsx": "^4.19.3",
     "typescript": "^5.8.3"
   },
+  "overrides": {
+    "handlebars": "4.7.9",
+    "shell-quote": "1.9.0"
+  },
   "engines": {
     "node": ">=20.0.0"
   },