Skip to content

Commit 7b7fece

Browse files
chargomeclaude
andcommitted
fix(deps): bump tar to 7.5.10 to fix hardlink path traversal
Fixes Dependabot alert #1134. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 9d3f62a commit 7b7fece

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

yarn.lock

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -28332,9 +28332,9 @@ tar@^6.1.11, tar@^6.1.2:
2833228332
yallist "^4.0.0"
2833328333

2833428334
tar@^7.4.0:
28335-
version "7.5.9"
28336-
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.9.tgz#817ac12a54bc4362c51340875b8985d7dc9724b8"
28337-
integrity sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==
28335+
version "7.5.10"
28336+
resolved "https://registry.yarnpkg.com/tar/-/tar-7.5.10.tgz#2281541123f5507db38bc6eb22619f4bbaef73ad"
28337+
integrity sha512-8mOPs1//5q/rlkNSPcCegA6hiHJYDmSLEI8aMH/CdSQJNWztHC9WHNam5zdQlfpTwB9Xp7IBEsHfV5LKMJGVAw==
2833828338
dependencies:
2833928339
"@isaacs/fs-minipass" "^4.0.0"
2834028340
chownr "^3.0.0"

0 commit comments

Comments
 (0)