[dependabot]

Removes tar. It's no longer used after updating ancestor dependency surge. These dependencies need to be updated together.

Removes tar

Updates surge from 0.27.4 to 0.46.0

Changelog

Sourced from surge's changelog.

surge 0.40

The command line interface has been reorganized around a single idea: you name the thing you are working on, then say what to do with it.

surge <project> <command>

Everything else in this release follows from that. Your existing commands still work — skip to Migrating if that is all you need.

Projects now remember their domain

When you publish a directory for the first time, surge writes the domain into a CNAME file inside it. From then on that directory knows where it belongs, and you never have to repeat the domain.

Start a new project by naming the directory and the domain you want:

surge ./my-proj example.com

That is the only time you need to say both. To publish again, run the same command, or just name the project:

surge ./my-proj publish

The domain came from ./my-proj/CNAME. Surge writes that file on the first publish and never overwrites it, so the directory carries its own identity. If you keep your CNAME in source control (or in the directory your build copies into its output), every machine and every CI job publishes to the right place with no configuration.

The same shape for every command

Because the project knows its domain, every other command works the same way:

surge ./my-proj rollback
surge ./my-proj revs
surge ./my-proj teardown

You are welcome to name the domain directly instead. It means the same thing:

surge example.com rollback

And when you are already inside the project directory, surge assumes you mean the directory you are standing in:

surge . publish
surge rollback
surge revs
surge stats traffic

... (truncated)

Commits

• 654a5a2 0.46.0
• 17719b5 version bump sdk v0.24.0 - publish uploads only the files the domain doesn't ...
• f2b550f 0.45.0
• 60cca97 version bump sdk v0.23.0 - surge-stream publishes a single html page as index...
• f0183b9 surge page.html publishes the page - the sdk sends a single html file as inde...
• 000a333 0.44.7
• edaaaef version bump sdk v0.22.0 - surge-stream packs with its own tar writer, node-t...
• 0fdd129 0.44.6
• a3fc7ff version bump sdk v0.21.1
• 26c3810 publish prints what the stream skipped - broken links, loops and fifos are le...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.