diff --git a/RELEASE-NOTES-1.38 b/RELEASE-NOTES-1.38
index 17463b45742..5250d7a6247 100644
--- a/RELEASE-NOTES-1.38
+++ b/RELEASE-NOTES-1.38
@@ -52,6 +52,7 @@ of automatic detection of possible phone numbers in a webpage in Safari on iOS.
 
 ==== Changed external libraries ====
 * Updated wikimedia/purtle from 1.0.7 to 1.0.8
+* Updated wikimedia/shellbox from 2.0.0 to 2.1.0
 * …
 
 ===== Changed development-only external libraries =====
diff --git a/composer.json b/composer.json
index 2bd857a0c48..b71d49e24dc 100644
--- a/composer.json
+++ b/composer.json
@@ -68,7 +68,7 @@
 		"wikimedia/running-stat": "1.2.1",
 		"wikimedia/scoped-callback": "3.0.0",
 		"wikimedia/services": "2.0.1",
-		"wikimedia/shellbox": "2.0.0",
+		"wikimedia/shellbox": "2.1.0",
 		"wikimedia/utfnormal": "3.0.2",
 		"wikimedia/timestamp": "3.0.0",
 		"wikimedia/wait-condition-loop": "2.0.2",