Merge d2154214ba into 0d46089f9a

fix(deps): update dependency tar to v7.5.7 [security] (#17104 )
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-01-29 09:18:39 +00:00 · 2026-01-29 18:18:34 +09:00 · 2025-12-22 05:30:45 +00:00 · 2025-12-14 07:27:09 +00:00 · 2025-12-06 12:22:58 +00:00 · 2025-11-28 10:04:09 +00:00
2 changed files with 7 additions and 7 deletions
--- a/package.json
+++ b/package.json
@ -59,7 +59,7 @@
 		"ignore-walk": "8.0.0",
 		"js-yaml": "4.1.1",
 		"postcss": "8.5.6",
-		"tar": "7.5.6",
+		"tar": "7.5.7",
 		"terser": "5.46.0"
 	},
 	"devDependencies": {
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@ -32,8 +32,8 @@ importers:
        specifier: 8.5.6
        version: 8.5.6
      tar:
-        specifier: 7.5.6
-        version: 7.5.6
+        specifier: 7.5.7
+        version: 7.5.7
      terser:
        specifier: 5.46.0
        version: 5.46.0
@ -10178,8 +10178,8 @@ packages:
    engines: {node: '>=10'}
    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me

-  tar@7.5.6:
-    resolution: {integrity: sha512-xqUeu2JAIJpXyvskvU3uvQW8PAmHrtXp2KDuMJwQqW8Sqq0CaZBAQ+dKS3RBXVhU4wC5NjAdKrmh84241gO9cA==}
+  tar@7.5.7:
+    resolution: {integrity: sha512-fov56fJiRuThVFXD6o6/Q354S7pnWMJIVlDBYijsTNx6jKSE4pvrDTs6lUnmGvNyfJwFQQwWy3owKz1ucIhveQ==}
    engines: {node: '>=18'}
    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me

@ -20126,7 +20126,7 @@ snapshots:
      nopt: 9.0.0
      proc-log: 6.1.0
      semver: 7.7.3
-      tar: 7.5.6
+      tar: 7.5.7
      tinyglobby: 0.2.15
      which: 6.0.0
    transitivePeerDependencies:
@ -21992,7 +21992,7 @@ snapshots:
      yallist: 4.0.0
    optional: true

-  tar@7.5.6:
+  tar@7.5.7:
    dependencies:
      '@isaacs/fs-minipass': 4.0.1
      chownr: 3.0.0
Author	SHA1	Message	Date
github-actions[bot]	78b112a4b5	Merge `d2154214ba` into `0d46089f9a`	2026-01-29 09:18:39 +00:00
renovate[bot]	d2154214ba	fix(deps): update dependency tar to v7.5.7 [security] (#17104 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-01-29 18:18:34 +09:00
misskey-release-bot[bot]	0d46089f9a	Merge pull request #16998 from misskey-dev/develop Release: 2025.12.2	2025-12-22 05:30:45 +00:00
misskey-release-bot[bot]	7420c10a58	Merge pull request #16972 from misskey-dev/develop Release: 2025.12.1	2025-12-14 07:27:09 +00:00
misskey-release-bot[bot]	e40c84f31d	Merge pull request #16916 from misskey-dev/develop Release: 2025.12.0	2025-12-06 12:22:58 +00:00
misskey-release-bot[bot]	994fc062cf	Merge pull request #16840 from misskey-dev/develop Release: 2025.11.1	2025-11-28 10:04:09 +00:00
misskey-release-bot[bot]	e7681f6c79	Merge pull request #16759 from misskey-dev/develop Release: 2025.11.0	2025-11-16 08:23:46 +00:00
misskey-release-bot[bot]	19053339d9	Merge pull request #16709 from misskey-dev/develop Release: 2025.10.2	2025-10-27 04:19:45 +00:00
misskey-release-bot[bot]	b4e16c83e2	Merge pull request #16629 from misskey-dev/develop Release: 2025.10.1	2025-10-24 06:31:35 +00:00
misskey-release-bot[bot]	56cc89b521	Merge pull request #16591 from misskey-dev/develop Release: 2025.10.0	2025-10-08 13:18:08 +00:00
misskey-release-bot[bot]	1eab314b17	Merge pull request #16521 from misskey-dev/develop Release: 2025.9.0	2025-09-08 12:29:29 +00:00
misskey-release-bot[bot]	ec21336d45	Merge pull request #16335 from misskey-dev/develop Release: 2025.8.0	2025-08-31 08:42:43 +00:00
misskey-release-bot[bot]	e86e9b46b3	Merge pull request #16244 from misskey-dev/develop Release: 2025.7.0	2025-07-18 00:28:01 +00:00
misskey-release-bot[bot]	9b729b3d25	Merge pull request #16197 from misskey-dev/develop Release: 2025.6.3	2025-06-16 11:13:26 +00:00
misskey-release-bot[bot]	3c973e21f2	Merge pull request #16195 from misskey-dev/develop Release: 2025.6.2	2025-06-16 08:58:35 +00:00
misskey-release-bot[bot]	830e2f0a5b	Merge pull request #16152 from misskey-dev/develop Release: 2025.6.1	2025-06-16 02:33:18 +00:00
misskey-release-bot[bot]	1620477a1c	Merge pull request #16134 from misskey-dev/develop Release: 2025.6.0	2025-06-02 00:58:34 +00:00
misskey-release-bot[bot]	92b9a5218d	Merge pull request #16005 from misskey-dev/develop Release: 2025.5.1	2025-05-31 12:37:06 +00:00
misskey-release-bot[bot]	9ed0d5ccec	Merge pull request #15933 from misskey-dev/develop Release: 2025.5.0	2025-05-07 02:46:42 +00:00
misskey-release-bot[bot]	a6d1727205	Merge pull request #15842 from misskey-dev/develop Release: 2025.4.1	2025-04-30 09:01:47 +00:00
misskey-release-bot[bot]	3c3982464f	Merge pull request #15735 from misskey-dev/develop Release: 2025.4.0	2025-04-09 02:17:31 +00:00
misskey-release-bot[bot]	bef73ff530	Merge pull request #15615 from misskey-dev/develop Release: 2025.3.1	2025-03-09 03:29:58 +00:00
misskey-release-bot[bot]	4d31c0b1de	Merge pull request #15585 from misskey-dev/develop Release: 2025.3.0	2025-03-06 10:31:34 +00:00
misskey-release-bot[bot]	a5f28c21e4	Merge pull request #15507 from misskey-dev/develop Release: 2025.2.1	2025-02-27 08:58:43 +00:00
misskey-release-bot[bot]	c93ead7474	Merge pull request #15378 from misskey-dev/develop Release: 2025.2.0	2025-02-05 08:58:45 +00:00
misskey-release-bot[bot]	36880493cb	Merge pull request #15279 from misskey-dev/develop Release: 2025.1.0	2025-01-28 12:29:14 +00:00
misskey-release-bot[bot]	e8518de054	Merge pull request #14924 from misskey-dev/develop Release: 2024.11.0	2024-11-22 09:15:34 +00:00
misskey-release-bot[bot]	b99e13e667	Merge pull request #14741 from misskey-dev/develop Release: 2024.10.1	2024-10-15 04:53:46 +00:00
misskey-release-bot[bot]	2518cf36d0	Merge pull request #14675 from misskey-dev/develop Release: 2024.10.0	2024-10-09 05:17:29 +00:00