Skip to content

chore(deps): bump tar and npm#1131

Merged
zobo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-717bed3e05
Jun 9, 2026
Merged

chore(deps): bump tar and npm#1131
zobo merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-717bed3e05

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 9, 2026

Copy link
Copy Markdown
Contributor

Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together.

Removes tar

Updates npm from 10.9.4 to 10.9.8

Release notes

Sourced from npm's releases.

v10.9.8

Dependencies

v10.9.7

10.9.7 (2026-03-18)

Bug Fixes

Dependencies

Chores

v10.9.6

10.9.6 (2026-03-10)

Bug Fixes

Dependencies

v10.9.5

10.9.5 (2026-03-04)

Bug Fixes

Dependencies

... (truncated)

Commits
  • dd3c80e chore: release 10.9.8
  • 8aa9c82 fix: eagerly require promise-retry to survive self-upgrade
  • 58c302d chore: release 10.9.7
  • e5c1309 chore: dev dependency updates
  • cc9a4de deps: hoist production @​sigstore dependencies
  • bbcd455 fix(arborist): v10 - backport store, lock-only, and override sibling fixes (#...
  • 49a764e chore: release 10.9.6
  • d6fe671 fix(arborist): v10 - backport multiple fixes for linked install (#9098)
  • ebd09c3 fix(arborist): backport linked strategy hoisting fixes to v10 (#9084)
  • a5dadad deps: tar@7.5.11
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 9, 2026
@zobo

zobo commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [npm](https://github.com/npm/cli). These dependencies need to be updated together.


Removes `tar`

Updates `npm` from 10.9.4 to 10.9.8
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v10.9.4...v10.9.8)

---
updated-dependencies:
- dependency-name: npm
  dependency-version: 10.9.8
  dependency-type: indirect
- dependency-name: tar
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-717bed3e05 branch from 22692df to 2a94dc9 Compare June 9, 2026 04:22
@zobo zobo merged commit 983884e into main Jun 9, 2026
9 checks passed
@zobo zobo deleted the dependabot/npm_and_yarn/multi-717bed3e05 branch June 9, 2026 04:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant