Fix shell injection via `shell=True` in subprocess calls by vladapostol1 · Pull Request #23894 · astral-sh/ruff

Performance Gate Passed

✅ 30 untouched benchmarks
⏩ 26 skipped benchmarks¹

_{Comparing vladapostol1:fix/subprocess-shell-injection (012f8cb) with main (a923421)}

26 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩