agent-sh/agnix v0.41.1 on GitHub

CC-HK-008 false positive on script paths containing spaces. The script-path patterns matched [^\s"']+, so a hook command pointing at /Applications/My App.app/Contents/hook.js matched only the tail after the space and was reported missing as App.app/Contents/hook.js. Quoting did not help — double quotes, single quotes, and backslash escapes all failed identically. command strings are now split into shell words that honor all three forms before script paths are matched, so a quoted or escaped path is taken whole. An unquoted space stays split, since it is genuinely ambiguous without a shell. Nested fragments such as bash -c "python script.py" still have the path picked out of them, and the URL, glob, and regex exclusions are unchanged (closes #1259).

Dependency refresh. Updated serde_json to 1.0.151 and thiserror to 2.0.19. thiserror-impl 2.0.19 moved to syn 3.x, so syn joins the [bans.skip] duplicate allowlist in deny.toml alongside the other proc-macro crates that span two majors.
CI action refresh. Advanced all four github/codeql-action pins to v4.37.3 and actions/setup-python to v7.0.0. The CodeQL pins must move together: init and analyze reject a split, failing with Loaded a configuration file for version '4.37.1', but running version '4.37.3', so upload-sarif in test-action.yml is bumped alongside them.

Cleared all open high-severity npm advisories in both lockfiles. website/: fast-uri to 3.1.4 (GHSA-v2hh-gcrm-f6hx, GHSA-4c8g-83qw-93j6), brace-expansion to 5.0.8 (GHSA-3jxr-9vmj-r5cp), js-yaml to 4.3.0 (GHSA-52cp-r559-cp3m), shell-quote to 1.10.0 (GHSA-395f-4hp3-45gv), and svgo to 3.3.4 (GHSA-2p49-hgcm-8545). editors/vscode/: fast-uri to 3.1.4, brace-expansion to 5.0.8, js-yaml to 4.3.0, and linkify-it to 5.0.2 (GHSA-v245-v573-v5vm). Lockfile-only; no manifest ranges changed and no major upgrades pulled in.