Bumps the npm_and_yarn group with 3 updates in the / directory: @isaacs/brace-expansion, mdast-util-to-hast and tar.
Updates @isaacs/brace-expansion from 5.0.0 to 5.0.1
Updates mdast-util-to-hast from 13.2.0 to 13.2.1
Release notes
Sourced from mdast-util-to-hast's releases.
13.2.1
Fix
- ab3a795 Fix support for spaces in class names
Types
- efb5312 Refactor to use
@imports- a5bc210 Add declaration maps
Full Changelog: https://github.com/syntax-tree/mdast-util-to-hast/compare/13.2.0...13.2.1
Commits
Updates tar from 7.4.3 to 7.5.9
Changelog
Sourced from tar's changelog.
Changelog
7.5
- Added
zstdcompression support.- Consistent TOCTOU behavior in sync t.list
- Only read from ustar block if not specified in Pax
- Fix sync tar.list when file size reduces while reading
- Sanitize absolute linkpaths properly
- Prevent writing hardlink entries to the archive ahead of their file target
7.4
- Deprecate
onentryin favor ofonReadEntryfor clarity.7.3
- Add
onWriteEntryoption7.2
- DRY the command definitions into a single
makeCommandmethod, and update the type signatures to more appropriately infer the return type from the options and arguments provided.7.1
- Update minipass to v7.1.0
- Update the type definitions of
write()andend()methods onUnpackandParserclasses to be compatible with the NodeJS.WritableStream type in the latest versions of@types/node.7.0
- Drop support for node <18
- Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
- Add tree-shake friendly exports, like
import('tar/create')andimport('tar/read-entry')to get individual functions or classes.- Add
chmodoption that defaults to false, and deprecatenoChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.- Add
processUmaskoption to avoid having to callprocess.umask()whenchmod: true(ornoChmod: false) is set.
... (truncated)
Commits
1f0c2c97.5.9fbb0851build minified version as default export6b8eba07.5.82cb1120fix(unpack): improve UnpackSync symlink error "into" path accuracyd18e4e1fix: do not write linkpaths through symlinks4a37eb97.5.7f4a7aa9fix: properly sanitize hard links containing ..394ece67.5.67d4cc17fix race puting a Link ahead of its target File26ab9047.5.5- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by isaacs, a new releaser for tar since your current version.
Install script changes
This version adds prepare script that runs during installation. Review the package contents before updating.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the Security Alerts page.