Skip to content

chore(deps): Bump tar from 7.5.20 to 7.5.22 - #472

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.22
Closed

chore(deps): Bump tar from 7.5.20 to 7.5.22#472
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.22

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps tar from 7.5.20 to 7.5.22.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.20 to 7.5.22.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.20...v7.5.22)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.22 branch from d167c2c to 50795bd Compare August 4, 2026 13:36
kubo6472 added a commit that referenced this pull request Aug 4, 2026
…sort (#474)

* chore(deps): bump npm minor/patch deps, redis 6, tar, eslint-plugin-simple-import-sort

Consolidate Dependabot updates from #469#472 and most of #471:
- Root tooling: eslint 10.8, globals, knip, nuxt 4.5.1, prettier 3.9.6,
  typescript-eslint 8.65+, vue-language-core/vue-tsc 3.3.8+, simple-import-sort 14
- API/web: sentry 10.69, wrangler 4.115+, workers-types, @types/node 26.1.2
- Storage/api-node: aws-sdk 3.1098+, sentry
- Web: stripe-js, tiptap 3.29.2 (incl. pm), nuxt 4.5.1
- media-pipeline: redis ^6.1.0
- Override tar >=7.5.22 (transitive via @mapbox/node-pre-gyp)

Deferred:
- typescript 7.0.2 — typescript-eslint peer still requires <6.1.0 (#468)
- @moq/net/@moq/watch — MultiBackend removed in 0.4.x; needs a migration PR (#471)

Co-authored-by: Jakub Doboš <[email protected]>

* fix(media-pipeline): adapt redis client typing for v6 RESP3 defaults

ReturnType<typeof createClient> is overloaded across RESP versions; pin a
concrete PackagingRedisClient from createClient({ url }) so tsc accepts the
redis@6 default RESP3 client.

Co-authored-by: Jakub Doboš <[email protected]>

* chore(deps): bound tar override to ^7.5.22

Keep the security floor at 7.5.22 while preventing automatic adoption of a
future major via the previous unbounded >= range.

Co-authored-by: Jakub Doboš <[email protected]>

---------

Co-authored-by: Cursor Agent <[email protected]>
Co-authored-by: Jakub Doboš <[email protected]>
@dependabot @github

dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor Author

Looks like tar is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tar-7.5.22 branch August 4, 2026 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants