chore(deps): update dependency shellcheck to v0.11.0

[renovate]

This PR contains the following updates:

Package	Update	New value	References	Sourcegraph
shellcheck	minor	0.11.0	source

Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.

---

Release Notes

koalaman/shellcheck (shellcheck)

v0.11.0

Compare Source

Added

• SC2327/SC2328: Warn about capturing the output of redirected commands.
• SC2329: Warn when (non-escaping) functions are never invoked.
• SC2330: Warn about unsupported glob matches with [[ .. ]] in BusyBox.
• SC2331: Suggest using standard -e instead of unary -a in tests.
• SC2332: Warn about [ ! -o opt ] being unconditionally true in Bash.
• SC3062: Warn about bashism [ -o opt ].
• Optional avoid-negated-conditions: suggest replacing [ ! a -eq b ]
  with [ a -ne b ], and similar for -ge/-lt/=/!=/etc (SC2335).
• Precompiled binaries for Linux riscv64 (linux.riscv64)

Changed

• SC2002 about Useless Use Of Cat is now disabled by default. It can be
  re-enabled with --enable=useless-use-of-cat or equivalent directive.
• SC2236/SC2237 about replacing [ ! -n .. ] with [ -z ] and vice versa
  is now optional under avoid-negated-conditions.
• SC2015 about A && B || C no longer triggers when B is a test command.
• SC3012: Do not warn about \< and \> in test/[] as specified in POSIX.1-2024
• Diff output now uses / as path separator on Windows

Fixed

• SC2218 about function use-before-define is now more accurate.
• SC2317 about unreachable commands is now less spammy for nested ones.
• SC2292, optional suggestion for [[ ]], now triggers for Busybox.
• Updates for Bash 5.3, including ${| cmd; } and source -p

Removed

• SC3013: removed since the operators -ot/-nt/-ef are specified in POSIX.1-2024

v0.10.0

Compare Source

Added

• Precompiled binaries for macOS ARM64 (darwin.aarch64)
• Added support for busybox sh
• Added flag --rcfile to specify an rc file by name.
• Added extended-analysis=true directive to enable/disable dataflow analysis
  (with a corresponding --extended-analysis flag).
• SC2324: Warn when x+=1 appends instead of increments
• SC2325: Warn about multiple !s in dash/sh.
• SC2326: Warn about foo | ! bar in bash/dash/sh.
• SC3012: Warn about lexicographic-compare bashism in test like in [ ]
• SC3013: Warn bashism test _ -op/-nt/-ef _ like in [ ]
• SC3014: Warn bashism test _ == _ like in [ ]
• SC3015: Warn bashism test _ =~ _ like in [ ]
• SC3016: Warn bashism test -v _ like in [ ]
• SC3017: Warn bashism test -a _ like in [ ]

Fixed

• source statements with here docs now work correctly
• "(Array.!): undefined array element" error should no longer occur

v0.9.0

Compare Source

Added

• SC2316: Warn about 'local readonly foo' and similar (thanks, patrickxia!)
• SC2317: Warn about unreachable commands
• SC2318: Warn about backreferences in 'declare x=1 y=$x'
• SC2319/SC2320: Warn when $? refers to echo/printf/[ ]/[[ ]]/test
• SC2321: Suggest removing $((..)) in array[$((idx))]=val
• SC2322: Suggest collapsing double parentheses in arithmetic contexts
• SC2323: Suggest removing wrapping parentheses in a[(x+1)]=val

Fixed

• SC2086: Now uses DFA to make more accurate predictions about values
• SC2086: No longer warns about values declared as integer with declare -i

Changed

• ShellCheck now has a Data Flow Analysis engine to make smarter decisions
  based on control flow rather than just syntax. Existing checks will
  gradually start using it, which may cause them to trigger differently
  (but more accurately).
• Values in directives/shellcheckrc can now be quoted with '' or ""

v0.8.0

Compare Source

Added

• disable=all now conveniently disables all warnings
• external-sources=true directive can be added to .shellcheckrc to make
  shellcheck behave as if -x was specified.
• Optional check-extra-masked-returns for pointing out commands with
  suppressed exit codes (SC2312).
• Optional require-double-brackets for recommending [[ ]] (SC2292).
• SC2286-SC2288: Warn when command name ends in a symbol like /.)'"
• SC2289: Warn when command name contains tabs or linefeeds
• SC2291: Warn about repeated unquoted spaces between words in echo
• SC2292: Suggest [[ over [ in Bash/Ksh scripts (optional)
• SC2293/SC2294: Warn when calling eval with arrays
• SC2295: Warn about "${x#$y}" treating $y as a pattern when not quoted
• SC2296-SC2301: Improved warnings for bad parameter expansions
• SC2302/SC2303: Warn about loops over array values when using them as keys
• SC2304-SC2306: Warn about unquoted globs in expr arguments
• SC2307: Warn about insufficient number of arguments to expr
• SC2308: Suggest other approaches for non-standard expr extensions
• SC2313: Warn about read with unquoted, array indexed variable

Fixed

• SC2102 about repetitions in ranges no longer triggers on [[ -v arr[xx] ]]
• SC2155 now recognizes typeset and local read-only declare statements
• SC2181 now tries to avoid triggering for error handling functions
• SC2290: Warn about misused = in declare & co, which were not caught by SC2270+
• The flag --color=auto no longer outputs color when TERM is "dumb" or unset

Changed

• SC2048: Warning about $* now also applies to ${array[*]}
• SC2181 now only triggers on single condition tests like [ $? = 0 ].
• Quote warnings are now emitted for declaration utilities in sh
• Leading _ can now be used to suppress warnings about unused variables
• TTY output now includes warning level in text as well as color

Removed

• SC1004: Literal backslash+linefeed in '' was found to be usually correct

v0.7.2

Compare Source

Added

• disable directives can now be a range, e.g. disable=SC3000-SC4000
• SC1143: Warn about line continuations in comments
• SC2259/SC2260: Warn when redirections override pipes
• SC2261: Warn about multiple competing redirections
• SC2262/SC2263: Warn about aliases declared and used in the same parsing unit
• SC2264: Warn about wrapper functions that blatantly recurse
• SC2265/SC2266: Warn when using & or | with test statements
• SC2267: Warn when using xargs -i instead of -I
• SC2268: Warn about unnecessary x-comparisons like [ x$var = xval ]

Fixed

• SC1072/SC1073 now respond to disable annotations, though ignoring parse errors
  is still purely cosmetic and does not allow ShellCheck to continue.
• Improved error reporting for trailing tokens after ]/]] and compound commands
• #!/usr/bin/env -S shell is now handled correctly
• Here docs with \r are now parsed correctly and give better warnings

Changed

• Assignments are now parsed to spec, without leniency for leading $ or spaces
• POSIX/dash unsupported feature warnings now have individual SC3xxx codes
• SC1090: A leading $x/ or $(x)/ is now treated as ./ when locating files
• SC2154: Variables appearing in -z/-n tests are no longer considered unassigned
• SC2270-SC2285: Improved warnings about misused =, e.g. ${var}=42

---

Configuration

📅 Schedule: Branch creation - "on the 1st through 7th day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.