search

ipfs / ipfs-webui

A frontend for an IPFS Kubo and IPFS Desktop
https://webui.ipfs.io
MIT License
1.57k stars 490 forks source link

chore(deps): bump tar, semantic-release, @semantic-release/npm and npm #2219

Open dependabot[bot] opened 7 months ago

dependabot[bot] commented 7 months ago

Bumps tar to 6.2.1 and updates ancestor dependencies tar, semantic-release, @semantic-release/npm and npm. These dependencies need to be updated together.

Updates tar from 6.1.15 to 6.2.1

Changelog

Sourced from tar's changelog.

Changelog

6.2

  • Add support for brotli compression

6.1.13 (2022-12-07)

Dependencies

6.1.12 (2022-10-31)

Bug Fixes

Documentation

6.0

  • Drop support for node 6 and 8
  • fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

  • Address unpack race conditions using path reservations
  • Change large-numbers errors from TypeError to Error
  • Add TAR_* error codes
  • Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive
  • do not treat ignored entries as an invalid archive
  • drop support for node v4
  • unpack: conditionally use a file mapping to write files on Windows
  • Set more portable 'mode' value in portable mode
  • Set portable gzip option in portable mode

4.4

  • Add 'mtime' option to tar creation to force mtime
  • unpack: only reuse file fs entries if nlink = 1
  • unpack: rename before unlinking files on Windows
  • Fix encoding/decoding of base-256 numbers
  • Use stat instead of lstat when checking CWD

... (truncated)

Commits


Updates tar from 4.4.8 to 6.2.1

Changelog

Sourced from tar's changelog.

Changelog

6.2

  • Add support for brotli compression

6.1.13 (2022-12-07)

Dependencies

6.1.12 (2022-10-31)

Bug Fixes

Documentation

6.0

  • Drop support for node 6 and 8
  • fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

  • Address unpack race conditions using path reservations
  • Change large-numbers errors from TypeError to Error
  • Add TAR_* error codes
  • Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive
  • do not treat ignored entries as an invalid archive
  • drop support for node v4
  • unpack: conditionally use a file mapping to write files on Windows
  • Set more portable 'mode' value in portable mode
  • Set portable gzip option in portable mode

4.4

  • Add 'mtime' option to tar creation to force mtime
  • unpack: only reuse file fs entries if nlink = 1
  • unpack: rename before unlinking files on Windows
  • Fix encoding/decoding of base-256 numbers
  • Use stat instead of lstat when checking CWD

... (truncated)

Commits


Updates semantic-release from 19.0.5 to 23.0.7

Release notes

Sourced from semantic-release's releases.

v23.0.7

23.0.7 (2024-04-03)

Bug Fixes

  • deps: update dependency find-versions to v6 (6a2b6bb)

v23.0.6

23.0.6 (2024-03-24)

Bug Fixes

  • deps: update dependency @​semantic-release/release-notes-generator to v13 (#3237) (b7e08fc)

v23.0.5

23.0.5 (2024-03-18)

Bug Fixes

  • deps: update dependency @​semantic-release/commit-analyzer to v12 (#3226) (29458a0)

v23.0.4

23.0.4 (2024-03-16)

Bug Fixes

  • deps: update dependency @​semantic-release/npm to v12 (#3224) (7a50c8a)

v23.0.3

23.0.3 (2024-03-15)

Bug Fixes

  • deps: update dependency @​semantic-release/github to v10 (#3222) (96d5aeb)

v23.0.2

23.0.2 (2024-02-07)

Bug Fixes

v23.0.1

23.0.1 (2024-02-06)

... (truncated)

Commits
  • 6a2b6bb fix(deps): update dependency find-versions to v6
  • 4c94b64 chore(deps): update npm to v10.5.1
  • 9fababa docs: add community plugin semantic-release-pull-request-analyzer (#3242)
  • 0b0cf4c chore(deps): lock file maintenance (#3243)
  • b3ebeb8 chore(deps): lock file maintenance (#3239)
  • c87c351 ci(action): update github/codeql-action action to v3.24.9 (#3235)
  • b7e08fc fix(deps): update dependency @​semantic-release/release-notes-generator to v13...
  • 60d5106 chore(deps): update dependency testdouble to v3.20.2 (#3233)
  • 55a8299 docs: add community plugin semantic-release-hackage (#3232)
  • 0f2eff8 ci(action): update github/codeql-action action to v3.24.8 (#3228)
  • Additional commits viewable in compare view


Updates @semantic-release/npm from 9.0.2 to 12.0.0

Release notes

Sourced from @​semantic-release/npm's releases.

v12.0.0

12.0.0 (2024-03-16)

Features

  • exports: defined exports to point at ./index.js (9e193c2)
  • node-versions: dropped support for node v18 and v19 (2df962b)

BREAKING CHANGES

  • exports: exports has been defined, which prevents access to private apis (which arent intended for consumption anyway)
  • node-versions: node v18 and v19 are no longer supported

v11.0.3

11.0.3 (2024-03-01)

Bug Fixes

even though our existing range allowed anyone to update as soon as the new npm version was available, this will encourage being on a version that does not report the ip vulnerability a bit more forcefully

v11.0.2

11.0.2 (2023-12-07)

Bug Fixes

  • deps: update dependency npm to v10.2.5 (42b5dec)

v11.0.1

11.0.1 (2023-11-02)

Bug Fixes

  • deps: update dependency read-pkg to v9 (#703) (6e84013)

v11.0.0

11.0.0 (2023-09-15)

Bug Fixes

... (truncated)

Commits
  • 702c68a Merge pull request #766 from semantic-release/next-major
  • adb1ded ci(verify): updated to follow modern conventions
  • 9e193c2 feat(exports): defined exports to point at ./index.js
  • 2df962b feat(node-versions): dropped support for node v18 and v19
  • c7f9b0a chore(deps): update dependency got to v14.2.1 (#762)
  • a0313f8 fix(deps): raised the minimum accepted range of npm to v10.5.0 (#759)
  • 6752218 chore(deps): update dependency ava to v6.1.2 (#758)
  • c5fdc71 chore(deps): lock file maintenance (#757)
  • ba9b443 chore(deps): lock file maintenance (#755)
  • f6be374 chore(deps): lock file maintenance
  • Additional commits viewable in compare view


Updates npm from 10.4.0 to 10.5.1

Changelog

Sourced from npm's changelog.

10.5.1 (2024-04-03)

Bug Fixes

Documentation

Dependencies

Chores

... (truncated)

Commits


You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/ipfs/ipfs-webui/network/alerts).

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.