Skip to content

build(deps): bump tar from 7.5.16 to 7.5.20 - #1984

Merged
erikian merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.20
Jul 21, 2026
Merged

build(deps): bump tar from 7.5.16 to 7.5.20#1984
erikian merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps tar from 7.5.16 to 7.5.20.

Commits
  • ebbb720 7.5.20
  • 2f27196 fix: fully disable and dispose of unzip when aborting parser
  • be440da 7.5.19
  • 2812e93 add maxDecompressionRatio guard against explosive decompression
  • 9ecd4d2 7.5.18
  • 9e78bf0 refuse to let header size be less than 0
  • e02a4e9 pax: parse values according to known types
  • 9cbdb31 7.5.17
  • 7a635c2 terminate pax strings on nul bytes
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 21, 2026
@dependabot
dependabot Bot requested review from a team and codebytere as code owners July 21, 2026 11:47
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 21, 2026
@coveralls

coveralls commented Jul 21, 2026

Copy link
Copy Markdown

Coverage Status

coverage: 87.352%. remained the same — dependabot/npm_and_yarn/tar-7.5.20 into main

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.20.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.20)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.20 branch from 6b35d5b to 6c83a3f Compare July 21, 2026 12:02
@erikian
erikian merged commit 75831f7 into main Jul 21, 2026
17 checks passed
@erikian
erikian deleted the dependabot/npm_and_yarn/tar-7.5.20 branch July 21, 2026 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants