search

o2team / o2team.github.io

Site of Aotu.io
https://aotu.io
MIT License
307 stars 91 forks source link

build(deps): bump tar #307

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps tar and tar. These dependencies needed to be updated together. Updates tar from 4.4.8 to 5.0.11

Changelog

Sourced from tar's changelog.

Changelog

6.1.12 (2022-10-31)

Bug Fixes

Documentation

6.0

  • Drop support for node 6 and 8
  • fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

  • Address unpack race conditions using path reservations
  • Change large-numbers errors from TypeError to Error
  • Add TAR_* error codes
  • Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive
  • do not treat ignored entries as an invalid archive
  • drop support for node v4
  • unpack: conditionally use a file mapping to write files on Windows
  • Set more portable 'mode' value in portable mode
  • Set portable gzip option in portable mode

4.4

  • Add 'mtime' option to tar creation to force mtime
  • unpack: only reuse file fs entries if nlink = 1
  • unpack: rename before unlinking files on Windows
  • Fix encoding/decoding of base-256 numbers
  • Use stat instead of lstat when checking CWD
  • Always provide a callback to fs.close()

4.3

  • Add 'transform' unpack option

4.2

  • Fail when zlib fails

... (truncated)

Commits
  • c013549 5.0.11
  • c249106 drop dirCache for symlink on all platforms
  • df64c4d 5.0.10
  • 82eac95 fix: prevent path escape using drive-relative paths
  • 1739408 fix: reserve paths properly for unicode, windows
  • d56f790 fix: prune dirCache properly for unicode, windows
  • 173800d 5.0.9
  • 21f3e9b fix: skip extract if linkpath is stripped entirely
  • 32027d6 fix: reserve paths case-insensitively
  • 8d2a316 5.0.8
  • Additional commits viewable in compare view


Updates tar from 5.0.5 to 5.0.11

Changelog

Sourced from tar's changelog.

Changelog

6.1.12 (2022-10-31)

Bug Fixes

Documentation

6.0

  • Drop support for node 6 and 8
  • fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

  • Address unpack race conditions using path reservations
  • Change large-numbers errors from TypeError to Error
  • Add TAR_* error codes
  • Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive
  • do not treat ignored entries as an invalid archive
  • drop support for node v4
  • unpack: conditionally use a file mapping to write files on Windows
  • Set more portable 'mode' value in portable mode
  • Set portable gzip option in portable mode

4.4

  • Add 'mtime' option to tar creation to force mtime
  • unpack: only reuse file fs entries if nlink = 1
  • unpack: rename before unlinking files on Windows
  • Fix encoding/decoding of base-256 numbers
  • Use stat instead of lstat when checking CWD
  • Always provide a callback to fs.close()

4.3

  • Add 'transform' unpack option

4.2

  • Fail when zlib fails

... (truncated)

Commits
  • c013549 5.0.11
  • c249106 drop dirCache for symlink on all platforms
  • df64c4d 5.0.10
  • 82eac95 fix: prevent path escape using drive-relative paths
  • 1739408 fix: reserve paths properly for unicode, windows
  • d56f790 fix: prune dirCache properly for unicode, windows
  • 173800d 5.0.9
  • 21f3e9b fix: skip extract if linkpath is stripped entirely
  • 32027d6 fix: reserve paths case-insensitively
  • 8d2a316 5.0.8
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/o2team/o2team.github.io/network/alerts).