pnpm
diff --git a/‎.changeset/tired-points-brake.md‎
Lines changed: 8 additions & 0 deletions b/‎.changeset/tired-points-brake.md‎
Lines changed: 8 additions & 0 deletions
diff --git a/‎cspell.json‎
Lines changed: 1 addition & 0 deletions b/‎cspell.json‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎exec/lifecycle/package.json‎
Lines changed: 1 addition & 2 deletions b/‎exec/lifecycle/package.json‎
Lines changed: 1 addition & 2 deletions
diff --git a/‎exec/lifecycle/src/runLifecycleHook.ts‎
Lines changed: 1 addition & 1 deletion b/‎exec/lifecycle/src/runLifecycleHook.ts‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎exec/lifecycle/test/index.ts‎
Lines changed: 2 additions & 2 deletions b/‎exec/lifecycle/test/index.ts‎
Lines changed: 2 additions & 2 deletions
@@ -0,0 +1,8 @@
+---
+"@pnpm/lifecycle": patch
+"@pnpm/worker": patch
+pnpm: patch
+---
+
+Replaced `shell-quote` with `shlex` for quoting command arguments [#9381](https://github.com/pnpm/pnpm/issues/9381).
+
@@ -236,6 +236,7 @@
     "semistrict",
     "serverjs",
     "sheetjs",
+    "shlex",
     "sindresorhus",
     "sirv",
     "soporan",
 
@@ -44,7 +44,7 @@
     "is-windows": "catalog:",
     "path-exists": "catalog:",
     "run-groups": "catalog:",
-    "shell-quote": "catalog:"
+    "shlex": "catalog:"
   },
   "peerDependencies": {
     "@pnpm/logger": "catalog:"
@@ -57,7 +57,6 @@
     "@pnpm/test-ipc-server": "workspace:*",
     "@types/is-windows": "catalog:",
     "@types/rimraf": "catalog:",
-    "@types/shell-quote": "catalog:",
     "@zkochan/rimraf": "catalog:",
     "load-json-file": "catalog:"
   },
 
@@ -6,7 +6,7 @@ import { type DependencyManifest, type ProjectManifest, type PrepareExecutionEnv
 import { PnpmError } from '@pnpm/error'
 import { existsSync } from 'fs'
 import isWindows from 'is-windows'
-import { quote as shellQuote } from 'shell-quote'
+import { join as shellQuote } from 'shlex'
 
 function noop () {} // eslint-disable-line:no-empty
 
 
@@ -55,11 +55,11 @@ test('runLifecycleHook() passes newline correctly', async () => {
     rawConfig: {},
     rootModulesDir,
     unsafePerm: true,
-    args: ['a\nb'],
+    args: ['a\nb != \'A\\nB\''],
   })
 
   expect((await import(path.join(pkgRoot, 'output.json'))).default).toStrictEqual([
-    process.platform === 'win32' ? 'a\\nb' : 'a\nb',
+    process.platform === 'win32' ? 'a\\nb != \'A\\\\nB\'' : 'a\nb != \'A\\nB\'',
   ])
 })