diff --git a/changelogs/fragments/31-sh.yml b/changelogs/fragments/31-sh.yml
new file mode 100644
index 0000000..4c6583a
--- /dev/null
+++ b/changelogs/fragments/31-sh.yml
@@ -0,0 +1,2 @@
+bugfixes:
+  - "Restrict the ``sh`` dependency to versions before 2.0.0 (https://github.com/ansible-community/antsibull-core/pull/31)."
diff --git a/pyproject.toml b/pyproject.toml
index 737fbe6..5da5d8f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -38,7 +38,7 @@ perky = "*"
 pydantic = "*"
 PyYAML = "*"
 semantic_version = "*"
-sh = "*"
+sh = ">= 1.0.0 < 2.0.0"
 # 0.5.0 introduces dict_config
 twiggy = ">= 0.5.0"