[Snyk] Upgrade tar from 6.1.11 to 6.1.15

[seansund]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade tar from 6.1.11 to 6.1.15.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

- The recommended version is **4 versions** ahead of your current version. - The recommended version was released **a month ago**, on 2023-05-17.

Release notes

Package name: tar

• 6.1.15 - 2023-05-17
  

  6.1.15

    </li>
    <li>
      <b>6.1.14</b> - <a href="https://snyk.io/redirect/github/isaacs/node-tar/releases/tag/v6.1.14">2023-05-02</a></br><p>6.1.14</p>
    </li>
    <li>
      <b>6.1.13</b> - <a href="https://snyk.io/redirect/github/isaacs/node-tar/releases/tag/v6.1.13">2022-12-07</a></br><h2><a href="https://snyk.io/redirect/github/npm/node-tar/compare/v6.1.12...v6.1.13">6.1.13</a> (2022-12-07)</h2>

  Dependencies

  • cc4e0dd #343 bump minipass from 3.3.6 to 4.0.0

    </li>
    <li>
      <b>6.1.12</b> - <a href="https://snyk.io/redirect/github/isaacs/node-tar/releases/tag/v6.1.12">2022-11-01</a></br><h2><a href="https://snyk.io/redirect/github/npm/node-tar/compare/v6.1.11...v6.1.12">6.1.12</a> (2022-10-31)</h2>

  Bug Fixes

  • 57493ee #332 ensuring close event is emited after stream has ended (@ webark)
  • b003c64 #314 replace deprecated String.prototype.substr() (#314) (@ CommanderRoot, @ lukekarrys)

  Documentation

  • f129929 #313 remove dead link to benchmarks (#313) (@ yetzt)
  • c1faa9f add examples/explanation of using tar.t (@ isaacs)

    </li>
    <li>
      <b>6.1.11</b> - <a href="https://snyk.io/redirect/github/isaacs/node-tar/releases/tag/v6.1.11">2021-08-26</a></br><p>6.1.11</p>
    </li>
  </ul>
  from <a href="https://snyk.io/redirect/github/isaacs/node-tar/releases">tar GitHub release notes</a>

Commit messages

Package name: tar

• 3302cf7 6.1.15
• 4501bdb Normalize unicode internally using NFD
• 24efc74 remove parallelism causing test/pack.js to be flaky
• 8cd8139 move mutateFS reset out of t.teardown
• 4aaffc8 6.1.14
• 4cbdd67 deps: minipass@5.0.0
• 75d3081 fix: update repository url in package.json
• 82bb328 chore: postinstall for dependabot template-oss PR
• 5f31636 chore: bump @ npmcli/template-oss from 4.10.0 to 4.11.0
• a044a87 chore: release 6.1.13 (#344)
• cc4e0dd deps: bump minipass from 3.3.6 to 4.0.0
• 5dcfcb3 chore: bump events-to-array from 1.1.2 to 2.0.3
• 329caed chore: postinstall for dependabot template-oss PR
• 72f6e39 chore: bump @ npmcli/template-oss from 4.8.0 to 4.10.0
• 001eafb chore: release 6.1.12
• ac1026a chore: dry up template-oss config
• 2e45b11 chore: use a local instead of remote file for test
• 79378ef chore: postinstall for dependabot template-oss PR
• eaea26d chore: bump @ npmcli/template-oss from 4.7.1 to 4.8.0
• 57493ee fix: ensuring close event is emited after stream has ended
• 1e3fadf chore: postinstall for dependabot template-oss PR
• 24045dc chore: bump @ npmcli/template-oss from 4.6.2 to 4.7.1
• b003c64 fix: replace deprecated String.prototype.substr() (#314)
• d9edb34 chore: postinstall for dependabot template-oss PR

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs