Skip to content

Commit c8e1e75

Browse files
chargomeclaude
andauthored
fix(deps): bump tar to 7.5.10 to fix hardlink path traversal (#19650)
Fixes Dependabot alert #1134. Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 9d3f62a commit c8e1e75

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28332,9 +28332,9 @@ tar@^6.1.11, tar@^6.1.2:
2833228332
yallist "^4.0.0"
2833328333

2833428334
tar@^7.4.0:
28335-
version "7.5.9"
28336-
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.9.tgz#817ac12a54bc4362c51340875b8985d7dc9724b8"
28337-
integrity sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==
28335+
version "7.5.10"
28336+
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.10.tgz#2281541123f5507db38bc6eb22619f4bbaef73ad"
28337+
integrity sha512-8mOPs1//5q/rlkNSPcCegA6hiHJYDmSLEI8aMH/CdSQJNWztHC9WHNam5zdQlfpTwB9Xp7IBEsHfV5LKMJGVAw==
2833828338
dependencies:
2833928339
"@isaacs/fs-minipass" "^4.0.0"
2834028340
chownr "^3.0.0"

0 commit comments

Comments
 (0)