Skip to content

build(deps): bump tar from 7.5.16 to 7.5.21 - #475

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.21
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps tar from 7.5.16 to 7.5.21.

Commits

@dependabot dependabot Bot added dependencies Dependency updates javascript Pull requests that update javascript code labels Jul 26, 2026
@socket-security

socket-security Bot commented Jul 26, 2026 •

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addednpm/​tar@​7.5.21961009994100

View full report

@github-actions

github-actions Bot commented Jul 26, 2026 •

Copy link
Copy Markdown
Contributor

E2E Test Pass · ❌ FAIL

Tag: e2e-ci-pr · Branch: dependabot/npm_and_yarn/tar-7.5.21 · Commit: c59c1c0 · Run logs

Cell Result Time
pr-mod ❌ FAIL 0m32s
pr-deploy-foundry ❌ FAIL 0m29s
pr-login-session ❌ FAIL 0m31s
pr-deploy-frontend ❌ FAIL 0m32s
pr-preflight ❌ FAIL 0m33s
pr-install ❌ FAIL 0m30s
pr-deploy-cdm ❌ FAIL 0m39s
${{ matrix.cell }} ⏭️ SKIP 0m-1s
${{ matrix.cell }} ⏭️ SKIP 0m00s

Sentry traces: view spans for this run

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.21 branch from bfcbfc3 to 9127a10 Compare August 1, 2026 14:13
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.21 branch from 9127a10 to 10ba4fe Compare August 10, 2026 15:38
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.21.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.21)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.21
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.21 branch from 10ba4fe to 7b86d18 Compare August 20, 2026 17:29
@ReinhardHatko

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like tar is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tar-7.5.21 branch October 1, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant