Skip to content

chore(deps-dev): bump tar from 7.5.16 to 7.5.22 - #1039

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.21
Closed

chore(deps-dev): bump tar from 7.5.16 to 7.5.22#1039
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tar-7.5.21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps tar from 7.5.16 to 7.5.22.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 23, 2026
@vercel

vercel Bot commented Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
connection-docs Ready Ready Preview Aug 3, 2026 12:18pm

Request Review

@dependabot
chore(deps-dev): bump tar from 7.5.16 to 7.5.22
597a4f3 
Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.16 to 7.5.22.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.16...v7.5.22)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.21
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump tar from 7.5.16 to 7.5.21 chore(deps-dev): bump tar from 7.5.16 to 7.5.22 Aug 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tar-7.5.21 branch from b31d0f7 to 597a4f3 Compare August 3, 2026 12:17
@Iamfle4ka Iamfle4ka mentioned this pull request Aug 3, 2026
Merged
@Iamfle4ka

Iamfle4ka commented Aug 3, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #1066, which batches the safe (patch/minor) security bumps into a single reviewable PR.

tar on that branch resolves to 7.5.22 — verified against package-lock.json on chore/dependabot-safe-bumps, not inferred from the PR title. #1066 is a lockfile-only diff regenerated locally; none of Dependabot's lock diffs were pulled in.

Closing to keep the review surface small. If #1066 is rejected, reopen this one.

@Iamfle4ka Iamfle4ka closed this Aug 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tar-7.5.21 branch August 3, 2026 15:03

This branch was successfully deployed

1 active deployment
Preview — 597a4f37 Deployed Aug 3, 2026 by vercel[bot]
View deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Iamfle4ka