[pull] main from cloudflare:main

.gitignore

@@ -230,3 +230,5 @@ dist/**
 .env*
 !.env.example
 .node-cache/
+
+AGENTS.local.md

packages/eslint-config-shared/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @cloudflare/eslint-config-shared
 
+## 1.2.0
+
+### Minor Changes
+
+- [#11902](https://github.com/cloudflare/workers-sdk/pull/11902) [`2aa769c`](https://github.com/cloudflare/workers-sdk/commit/2aa769c8730a0ef99f315f9a1dd5d25d52c51974) Thanks [@emily-shen](https://github.com/emily-shen)! - Add a custom eslint rule that checks for unsafe command execution
+
 ## 1.1.0
 
 ### Minor Changes

packages/eslint-config-shared/index.js

@@ -6,6 +6,7 @@ import turbo from "eslint-plugin-turbo";
 import unusedImports from "eslint-plugin-unused-imports";
 import { defineConfig, globalIgnores } from "eslint/config";
 import tseslint from "typescript-eslint";
+import noUnsafeCommandExecution from "./rules/no-unsafe-command-execution.mjs";
 
 export default defineConfig(
 	globalIgnores([
@@ -30,6 +31,11 @@ export default defineConfig(
 		plugins: {
 			"unused-imports": unusedImports,
 			"no-only-tests": noOnlyTests,
+			"workers-sdk": {
+				rules: {
+					"no-unsafe-command-execution": noUnsafeCommandExecution,
+				},
+			},
 		},
 	},
 
@@ -79,6 +85,25 @@ export default defineConfig(
 					argsIgnorePattern: "^_",
 				},
 			],
+			"workers-sdk/no-unsafe-command-execution": "error",
+		},
+	},
+	{
+		files: [
+			"**/*.test.ts",
+			"**/*.test.mts",
+			"**/*.test.tsx",
+			"**/test/**/*.ts",
+			"**/__tests__/**/*.ts",
+			"**/__tests__/**/*.mts",
+			"**/__tests__/**/*.tsx",
+			"**/e2e/**/*.ts",
+			"**/e2e/**/*.mts",
+			"**/fixtures/**/*.ts",
+			"**/fixtures/**/*.mts",
+		],
+		rules: {
+			"workers-sdk/no-unsafe-command-execution": "off",
 		},
 	}
 );

packages/eslint-config-shared/package.json

@@ -1,13 +1,18 @@
 {
 	"name": "@cloudflare/eslint-config-shared",
-	"version": "1.1.0",
+	"version": "1.2.0",
 	"private": true,
 	"description": "ESLint config for workers-sdk",
 	"type": "module",
 	"exports": {
 		".": "./index.js",
 		"./react": "./react.js"
 	},
+	"scripts": {
+		"deploy": "echo 'no deploy'",
+		"test": "node rules/__tests__/no-unsafe-command-execution.test.mjs",
+		"test:ci": "node rules/__tests__/no-unsafe-command-execution.test.mjs"
+	},
 	"devDependencies": {
 		"@cloudflare/workers-tsconfig": "workspace:*",
 		"@eslint/js": "^9.39.1",