refactor: Bump tar and npm - #3461
dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
8096bbd to
0ad131b
Compare
Bumps [tar](https://github.com/isaacs/node-tar) and [npm](https://github.com/npm/cli). These dependencies needed to be updated together. Updates `tar` from 7.5.11 to 7.5.22 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v7.5.11...v7.5.22) Updates `npm` from 10.9.8 to 10.9.9 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/v10.9.9/CHANGELOG.md) - [Commits](npm/cli@v10.9.8...v10.9.9) Updates `npm` from 11.12.1 to 11.20.0 - [Release notes](https://github.com/npm/cli/releases) - [Changelog](https://github.com/npm/cli/blob/v10.9.9/CHANGELOG.md) - [Commits](npm/cli@v10.9.8...v10.9.9) --- updated-dependencies: - dependency-name: npm dependency-version: 10.9.9 dependency-type: indirect - dependency-name: npm dependency-version: 11.20.0 dependency-type: indirect - dependency-name: tar dependency-version: 7.5.22 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
0ad131b to
bff6fa7
Compare
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
Bumps tar and npm. These dependencies needed to be updated together.
Updates
tarfrom 7.5.11 to 7.5.22Commits
2a22bfc7.5.22df1cd8dAllow transform to be falsey0cd9cc37.5.21631ae59list: prevent unbounded recursionebbb7207.5.202f27196fix: fully disable and dispose of unzip when aborting parserbe440da7.5.192812e93add maxDecompressionRatio guard against explosive decompression9ecd4d27.5.189e78bf0refuse to let header size be less than 0Updates
npmfrom 10.9.8 to 10.9.9Release notes
Sourced from npm's releases.
Changelog
Sourced from npm's changelog.
... (truncated)
Commits
65d5827chore: release 10.9.95e9f451deps: tar@7.5.22 (#9814)189ba13chore: add cli-triage team as codeowner (#9319)Updates
npmfrom 11.12.1 to 11.20.0Release notes
Sourced from npm's releases.
Changelog
Sourced from npm's changelog.
... (truncated)
Commits
65d5827chore: release 10.9.95e9f451deps: tar@7.5.22 (#9814)189ba13chore: add cli-triage team as codeowner (#9319)