diff --git a/RELEASE-NOTES-1.43 b/RELEASE-NOTES-1.43
index 369e4754981..3203d0a58c2 100644
--- a/RELEASE-NOTES-1.43
+++ b/RELEASE-NOTES-1.43
@@ -219,7 +219,7 @@ For notes on 1.42.x and older releases, see HISTORY.
 * Updated wikimedia/less.php from 4.2.1 to 5.1.1.
 * Updated wikimedia/minify from 2.7.0 to 2.8.0.
 * Updated wikimedia/php-session-serializer from 2.0.1 to 3.0.0.
-* Updated wikimedia/shellbox from 4.0.2 to 4.1.0.
+* Updated wikimedia/shellbox from 4.0.2 to 4.1.1.
 * Updated wikimedia/xmp-reader from 0.9.1 to 0.9.2.
 * Updated vue from 3.3.9 to 3.4.27.
 * Updated symfony/polyfill-php80 from 1.29.0 to 1.30.0.
diff --git a/composer.json b/composer.json
index 11169bd2e6b..06922f39c7a 100644
--- a/composer.json
+++ b/composer.json
@@ -78,7 +78,7 @@
 		"wikimedia/running-stat": "2.1.0",
 		"wikimedia/scoped-callback": "4.0.0",
 		"wikimedia/services": "3.0.0",
-		"wikimedia/shellbox": "4.1.0",
+		"wikimedia/shellbox": "4.1.1",
 		"wikimedia/utfnormal": "4.0.0",
 		"wikimedia/timestamp": "4.1.1",
 		"wikimedia/wait-condition-loop": "2.0.2",