Skip to content

build(deps): bump tar, @electron/rebuild and electron-builder#6

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a533b59039
Closed

build(deps): bump tar, @electron/rebuild and electron-builder#6
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-a533b59039

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 22, 2026

Copy link
Copy Markdown
Contributor

Bumps tar to 7.5.15 and updates ancestor dependencies tar, @electron/rebuild and electron-builder. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.15

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @electron/rebuild from 3.7.2 to 4.0.4

Release notes

Sourced from @​electron/rebuild's releases.

v4.0.4

4.0.4 (2026-04-21)

Bug Fixes

v4.0.3

4.0.3 (2026-01-27)

Bug Fixes

v4.0.2

4.0.2 (2025-12-09)

Bug Fixes

v4.0.1

4.0.1 (2025-04-30)

Bug Fixes

v4.0.0

4.0.0 (2025-04-30)

BREAKING CHANGES

  • bumps required Node.js version to >=22.12.0. ESM-only.

  • update to follow latest recommendations

  • remove unused nodeGypPath field from Rebuilder

  • fix tests

... (truncated)

Commits
  • 21ceb5b fix: minimize production dependency tree (#1244)
  • 7dd7e0e chore(deps): bump vite from 8.0.3 to 8.0.5 (#1263)
  • b887fae chore(deps): bump minimatch from 3.1.2 to 3.1.5 (#1262)
  • e3d2323 chore(deps-dev): bump electron from 35.7.5 to 39.8.5 (#1254)
  • 2ed0cf7 chore: migrate test suite from Mocha/Chai to Vitest (#1257)
  • b182f39 chore: resolve dependabot alerts in test fixture lockfiles (#1258)
  • 8abcd5e chore: resolve dependabot security alerts (#1256)
  • 551b5e0 chore(deps): bump picomatch from 2.3.0 to 2.3.2 (#1255)
  • d5e48a3 ci: fix zizmor audit findings (#1252)
  • 608120c chore(deps): bump azure/login from 2.3.0 to 3.0.0 (#1249)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​electron/rebuild since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates electron-builder from 25.1.8 to 26.8.1

Release notes

Sourced from electron-builder's releases.

electron-builder@26.8.1

What's Changed

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.8.0...electron-builder@26.8.1

electron-builder@26.8.0

What's Changed

New Contributors

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.7.0...electron-builder@26.8.0

electron-builder@26.7.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from electron-builder's changelog.

26.8.1

Patch Changes

4edd695 8940ec6 4edd695 dde4309

  • app-builder-lib@26.8.1
  • builder-util@26.8.1
  • dmg-builder@26.8.1

26.8.0

Minor Changes

Patch Changes

cd7c0d9 c18f0eb 769b608 9ba36f9 1b113b7 1b39a8e

  • app-builder-lib@26.8.0
  • builder-util@26.8.0
  • dmg-builder@26.8.0

26.7.0

Patch Changes

bfee115 3fa2d89 ec9e2db aec9157 64b40fe

... (truncated)

Commits
  • 9418d2c chore(deploy): Release v26.8.1 (#9585)
  • 3a3f439 chore(deploy): Release v26.8.0 (electron-updater@6.8.3) (#9556)
  • 1b39a8e feat: adding additional toolsets support for win-codesign/windows-kits (#9430)
  • f1c2ec3 chore(deploy): Release v26.7.0 (electron-updater@6.8.2) (#9549)
  • e394e0c chore(deploy): Release v26.6.0 (#9531)
  • 7b5901b chore(deploy): Release v26.5.0 (electron-updater@6.8.1) (#9503)
  • 06de969 chore(deploy): Release v26.4.1 (electron-updater@6.8.0) (#9458)
  • caf2cb2 chore(deploy): Release v26.4.0 (#9447)
  • 85437a7 chore(deploy): Release v26.3.6 (#9433)
  • 5f9c143 chore(deploy): Release v26.3.5 (electron-updater@6.7.3) (#9422)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for electron-builder since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 22, 2026
Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.15 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@electron/rebuild](https://github.com/electron/rebuild) and [electron-builder](https://github.com/electron-userland/electron-builder/tree/HEAD/packages/electron-builder). These dependencies need to be updated together.


Updates `tar` from 6.2.1 to 7.5.15
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.15)

Updates `@electron/rebuild` from 3.7.2 to 4.0.4
- [Release notes](https://github.com/electron/rebuild/releases)
- [Commits](electron/rebuild@v3.7.2...v4.0.4)

Updates `electron-builder` from 25.1.8 to 26.8.1
- [Release notes](https://github.com/electron-userland/electron-builder/releases)
- [Changelog](https://github.com/electron-userland/electron-builder/blob/master/packages/electron-builder/CHANGELOG.md)
- [Commits](https://github.com/electron-userland/electron-builder/commits/electron-builder@26.8.1/packages/electron-builder)

---
updated-dependencies:
- dependency-name: "@electron/rebuild"
  dependency-version: 4.0.4
  dependency-type: direct:development
- dependency-name: electron-builder
  dependency-version: 26.8.1
  dependency-type: direct:development
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-a533b59039 branch from cb18caa to 56529d6 Compare May 13, 2026 19:50
@dependabot @github

dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #32.

@dependabot dependabot Bot closed this Jun 19, 2026
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-a533b59039 branch June 19, 2026 02:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants