Update Rust crate tokio-tar to v0.6.3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
tokio-tar	workspace.dependencies	patch	0.6.2 → 0.6.3	0.6.4

---

Release Notes

astral-sh/tokio-tar (tokio-tar)

v0.6.3

Compare Source

What's Changed

• Remove filetime dependency
• Reject mixed PAX and GNU path metadata
• Reject unterminated PAX records
• Reject mixed PAX and GNU link targets
• Trim GNU long names and links at NUL
• Add a restricted local-PAX input mode
• Parse PAX records by declared length
• Apply PAX owner names to entries
• Apply PAX size overrides to entry headers
• Apply Solaris X metadata only on USTAR carriers
• Report truncated TAR payloads during entry reads
• Reject partial GNU sparse map entries
• Preserve payload access for unknown TAR typeflags
• Reject dangling one-shot TAR extensions
• Reject orphaned GNU sparse PAX metadata
• Reject ambiguous NUL-version USTAR headers
• Require valid carrier classes for TAR extensions
• Require decimal PAX numeric overrides
• Use the last repeated PAX pathname
• Test last-record precedence for PAX owner metadata
• Reject empty local PAX values
• Report sparse data positions after continuation headers

Full Changelog: astral-sh/tokio-tar@v0.6.2...v0.6.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.26%. Comparing base (ec15d68) to head (225b50c).

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2342      +/-   ##
==========================================
- Coverage   93.27%   93.26%   -0.01%     
==========================================
  Files         128      128              
  Lines       26842    26842              
==========================================
- Hits        25036    25035       -1     
- Misses       1806     1807       +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[prek-ci-bot]

📦 Cargo Bloat Comparison

Binary size change: +0.00% (28.8 MiB → 28.8 MiB)

Expand for cargo-bloat output

Head Branch Results

 File  .text     Size             Crate Name
 1.1%   2.4% 332.0KiB        aws_lc_sys aws_lc_0_42_0_aes_gcm_encrypt_avx512
 1.1%   2.4% 332.0KiB        aws_lc_sys aws_lc_0_42_0_aes_gcm_decrypt_avx512
 0.3%   0.6%  80.7KiB              prek <prek::cli::Command as clap_builder::derive::Subcommand>::augment_subcommands
 0.2%   0.4%  50.1KiB              prek <<prek::config::Config as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.2%   0.4%  49.4KiB annotate_snippets annotate_snippets::renderer::render::render
 0.2%   0.3%  47.6KiB              prek prek::run::{closure#0}
 0.1%   0.3%  42.3KiB              prek prek::cli::run::run::run::{closure#0}
 0.1%   0.2%  32.1KiB              prek <prek::cli::RunOptions as clap_builder::derive::Args>::augment_args
 0.1%   0.2%  29.5KiB     granit_parser <granit_parser::scanner::Scanner<granit_parser::input::str::StrInput>>::fetch_more_tokens
 0.1%   0.2%  28.6KiB    cargo_metadata <&mut serde_json::de::Deserializer<serde_json::read::StrRead> as serde_core::de::Deserializer>::deserialize_struct::<<cargo_metadata::Package as serde_core::de::Deserialize>::deserialize::__Visitor>
 0.1%   0.2%  28.2KiB              prek <<prek::config::RemoteHook as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.1%   0.2%  28.0KiB        aws_lc_sys aws_lc_0_42_0_edwards25519_scalarmuldouble_alt
 0.1%   0.2%  27.5KiB        aws_lc_sys aws_lc_0_42_0_edwards25519_scalarmuldouble
 0.1%   0.2%  25.7KiB              prek prek::cli::try_repo::try_repo::{closure#0}
 0.1%   0.2%  25.6KiB              prek <<prek::config::LocalHook as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.1%   0.2%  24.9KiB               xml <xml::reader::parser::PullParser>::dispatch_token
 0.1%   0.2%  24.2KiB              prek <prek::languages::node::installer::NodeInstaller>::install::{closure#0}
 0.1%   0.2%  22.8KiB              prek <prek::languages::golang::installer::GoInstaller>::install::{closure#0}
 0.1%   0.2%  22.7KiB              prek <prek::cli::Command as clap_builder::derive::FromArgMatches>::from_arg_matches_mut
 0.1%   0.2%  22.3KiB         [Unknown] Lp384_montjscalarmul_alt_p384_montjadd
41.9%  88.0%  12.1MiB                   And 25454 smaller methods. Use -n N to show more.
47.6% 100.0%  13.7MiB                   .text section size, the file size is 28.8MiB

Base Branch Results

 File  .text     Size             Crate Name
 1.1%   2.4% 332.0KiB        aws_lc_sys aws_lc_0_42_0_aes_gcm_encrypt_avx512
 1.1%   2.4% 332.0KiB        aws_lc_sys aws_lc_0_42_0_aes_gcm_decrypt_avx512
 0.2%   0.5%  66.0KiB              prek <prek::cli::Command as clap_builder::derive::Subcommand>::augment_subcommands
 0.2%   0.4%  50.4KiB              prek <<prek::config::Config as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.2%   0.4%  49.4KiB annotate_snippets annotate_snippets::renderer::render::render
 0.1%   0.3%  41.8KiB              prek prek::cli::run::run::run::{closure#0}
 0.1%   0.3%  39.3KiB              prek prek::run::{closure#0}
 0.1%   0.2%  32.1KiB              prek <prek::cli::RunOptions as clap_builder::derive::Args>::augment_args
 0.1%   0.2%  30.7KiB              prek prek::cli::update::update::{closure#0}
 0.1%   0.2%  29.5KiB     granit_parser <granit_parser::scanner::Scanner<granit_parser::input::str::StrInput>>::fetch_more_tokens
 0.1%   0.2%  28.6KiB    cargo_metadata <&mut serde_json::de::Deserializer<serde_json::read::StrRead> as serde_core::de::Deserializer>::deserialize_struct::<<cargo_metadata::Package as serde_core::de::Deserialize>::deserialize::__Visitor>
 0.1%   0.2%  28.0KiB              prek <<prek::config::RemoteHook as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.1%   0.2%  28.0KiB        aws_lc_sys aws_lc_0_42_0_edwards25519_scalarmuldouble_alt
 0.1%   0.2%  27.5KiB        aws_lc_sys aws_lc_0_42_0_edwards25519_scalarmuldouble
 0.1%   0.2%  25.5KiB              prek <<prek::config::LocalHook as serde_core::de::Deserialize>::deserialize::__Visitor as serde_core::de::Visitor>::visit_map::<<serde_saphyr::de::deserializer::YamlDeserializer as serde_core::de::Deserializer>::deserialize_map::MA>
 0.1%   0.2%  25.0KiB              prek prek::cli::try_repo::try_repo::{closure#0}
 0.1%   0.2%  24.9KiB               xml <xml::reader::parser::PullParser>::dispatch_token
 0.1%   0.2%  23.7KiB              prek <prek::languages::node::installer::NodeInstaller>::install::{closure#0}
 0.1%   0.2%  23.2KiB              prek <prek::languages::golang::installer::GoInstaller>::install::{closure#0}
 0.1%   0.2%  22.3KiB         [Unknown] Lp384_montjscalarmul_alt_p384_montjadd
42.0%  88.1%  12.1MiB                   And 25499 smaller methods. Use -n N to show more.
47.6% 100.0%  13.7MiB                   .text section size, the file size is 28.8MiB

[prek-ci-bot]

⚡️ Hyperfine Benchmarks

Summary: 1 regressions, 1 improvements above the 10% threshold.

Environment

• OS: Linux 6.17.0-1018-azure
• CPU: 4 cores
• prek version: prek 0.4.9+28 (825e2fe 2026-07-14)
• Rust version: rustc 1.97.0 (2d8144b78 2026-07-07)
• Hyperfine version: hyperfine 1.20.0

CLI Commands

Benchmarking basic commands in the main repo:

prek --version

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base --version	2.4 ± 0.1	2.2	3.3	1.02 ± 0.06
prek-head --version	2.3 ± 0.0	2.2	2.5	1.00

prek list

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base list	9.6 ± 0.4	9.3	11.3	1.00
prek-head list	9.7 ± 0.3	9.4	11.1	1.00 ± 0.05

prek validate-config .pre-commit-config.yaml

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base validate-config .pre-commit-config.yaml	3.4 ± 0.1	3.2	3.5	1.00
prek-head validate-config .pre-commit-config.yaml	3.4 ± 0.1	3.2	3.9	1.00 ± 0.04

prek sample-config

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base sample-config	2.6 ± 0.0	2.5	2.7	1.00 ± 0.02
prek-head sample-config	2.6 ± 0.0	2.5	2.7	1.00

Cold vs Warm Runs

Comparing first run (cold) vs subsequent runs (warm cache):

prek run --all-files (cold - no cache)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run --all-files	76.9 ± 2.1	74.1	80.6	1.02 ± 0.05
prek-head run --all-files	75.1 ± 3.2	72.1	80.5	1.00

prek run --all-files (warm - with cache)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run --all-files	75.4 ± 2.8	71.1	82.1	1.00
prek-head run --all-files	76.2 ± 2.3	71.3	80.2	1.01 ± 0.05

Full Hook Suite

Running the builtin hook suite on the benchmark workspace:

prek run --all-files (full builtin hook suite)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run --all-files	75.9 ± 2.9	70.7	82.0	1.02 ± 0.05
prek-head run --all-files	74.7 ± 2.4	70.3	80.6	1.00

Individual Hook Performance

Benchmarking each hook individually on the test repo:

prek run trailing-whitespace --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run trailing-whitespace --all-files	20.4 ± 0.3	19.8	21.1	1.02 ± 0.03
prek-head run trailing-whitespace --all-files	19.9 ± 0.4	19.2	20.7	1.00

prek run end-of-file-fixer --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run end-of-file-fixer --all-files	26.9 ± 2.4	23.4	30.4	1.03 ± 0.12
prek-head run end-of-file-fixer --all-files	26.2 ± 2.0	23.8	31.0	1.00

prek run check-json --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-json --all-files	7.9 ± 0.1	7.7	8.2	1.00
prek-head run check-json --all-files	8.0 ± 0.2	7.6	8.4	1.01 ± 0.03

prek run check-yaml --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-yaml --all-files	7.8 ± 0.2	7.5	8.5	1.00
prek-head run check-yaml --all-files	7.8 ± 0.1	7.6	8.3	1.00 ± 0.03

prek run check-toml --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-toml --all-files	7.9 ± 0.3	7.6	8.5	1.00 ± 0.05
prek-head run check-toml --all-files	7.9 ± 0.2	7.5	8.5	1.00

prek run check-xml --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-xml --all-files	7.7 ± 0.2	7.4	8.1	1.01 ± 0.04
prek-head run check-xml --all-files	7.7 ± 0.3	7.4	8.3	1.00

prek run detect-private-key --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run detect-private-key --all-files	13.3 ± 1.1	11.5	16.1	1.01 ± 0.10
prek-head run detect-private-key --all-files	13.1 ± 0.8	11.8	14.6	1.00

prek run fix-byte-order-marker --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run fix-byte-order-marker --all-files	18.0 ± 0.9	17.0	19.6	1.01 ± 0.08
prek-head run fix-byte-order-marker --all-files	17.9 ± 1.0	16.8	22.2	1.00

Installation Performance

Benchmarking hook installation (fast path hooks skip Python setup):

prek install-hooks (cold - no cache)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base install-hooks	4.7 ± 0.1	4.6	4.8	1.01 ± 0.02
prek-head install-hooks	4.7 ± 0.0	4.6	4.7	1.00

prek install-hooks (warm - with cache)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base install-hooks	4.7 ± 0.0	4.6	4.7	1.00
prek-head install-hooks	4.8 ± 0.1	4.6	4.9	1.03 ± 0.02

File Filtering/Scoping Performance

Testing different file selection modes:

prek run (staged files only)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run	38.8 ± 0.9	37.8	40.5	1.00
prek-head run	39.4 ± 1.1	37.9	41.5	1.02 ± 0.04

prek run --files '*.json' (specific file type)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run --files '*.json'	8.3 ± 0.1	8.1	8.4	1.00
prek-head run --files '*.json'	8.3 ± 0.1	8.2	8.7	1.00 ± 0.02

Workspace Discovery & Initialization

Benchmarking hook discovery and initialization overhead:

prek run --dry-run --all-files (measures init overhead)

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run --dry-run --all-files	7.2 ± 0.1	7.1	7.3	1.00
prek-head run --dry-run --all-files	27.0 ± 59.9	7.0	240.6	3.78 ± 8.37

⚠️ Warning: Performance regression for prek run --dry-run --all-files (measures init overhead): 277.5500% slower

Meta Hooks Performance

Benchmarking meta hooks separately:

prek run check-hooks-apply --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-hooks-apply --all-files	12.9 ± 0.8	12.3	15.3	1.16 ± 0.07
prek-head run check-hooks-apply --all-files	11.2 ± 0.1	11.0	11.3	1.00

✅ Performance improvement for prek run check-hooks-apply --all-files: 13.6900% faster

prek run check-useless-excludes --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run check-useless-excludes --all-files	11.2 ± 0.1	11.0	11.3	1.00 ± 0.01
prek-head run check-useless-excludes --all-files	11.1 ± 0.0	11.1	11.2	1.00

prek run identity --all-files

Command	Mean [ms]	Min [ms]	Max [ms]	Relative
prek-base run identity --all-files	10.5 ± 0.1	10.4	10.6	1.00
prek-head run identity --all-files	10.6 ± 0.1	10.4	10.9	1.01 ± 0.01