Skip to content

Bump tar-fs and sol2uml#362

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-b494c17cab
Open

Bump tar-fs and sol2uml#362
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-b494c17cab

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 7, 2026

Bumps tar-fs to 3.1.2 and updates ancestor dependency sol2uml. These dependencies need to be updated together.

Updates tar-fs from 2.1.1 to 3.1.2

Commits

Updates sol2uml from 2.5.22 to 2.5.26

Release notes

Sourced from sol2uml's releases.

v2.5.26

What's New

Enhancement

  • Added function names as labels on dependency arrows to contracts and interfaces called via storage variables

CrossChainMasterStrategyInteractions

Bug Fixes

  • Added more tests for associations

Dependency Updates

  • Fixed critical security vulnerability in basic-ftp via npm audit fix
  • Updated puppeteer to 24.37.5
  • Updated axios to 1.13.6
  • Updated typescript-eslint to 8.56.1

Release v2.5.25

New Features

  • Function names on dependency: Class diagrams now show which functions are called on dependency between contracts, libraries, and interfaces. For example, if a contract calls Library.convert(), the function name convert appears on the dependency line. This works for both explicit calls (Library.functionName()) and using...for library calls. Use -hd, --hideDepFunctions to disable this.

  • Hide types option (-hy, --hideTypes): Hide types of variables, function arguments and return types in class diagrams. This applies to contract variables, struct fields, enum values, constants, function parameters and return types.

Improvements

  • Added retry logic with exponential backoff (2s, 4s, 6s) in getSourceCode() when Etherscan returns a rate limit error.

CI

  • Serialized GitHub Actions workflows so Unit Tests run on push, Platform tests run after Unit Tests complete, and Installation tests run after Platform tests complete.
  • Fixed flatten test in installation tests to use Base network.

Examples

Hide variables, functions, file names. Squash inheritance. Limit depth to 1

sol2uml 0xC0297a0E39031F09406F0987C9D9D41c5dfbc3df -v -hv -hf -hs -hn -d 1 -s

LidoARM

Hide variables, functions, enums, structs, constants and file names. Limit depth to 1

sol2uml 0x5F81a5a22375ebCC2075b162D23a5b16a1e7A92d -v --network base -hv -hf -he -hs -hc -hn -d 1

CrossChainRemoteStrategy

Same as before, but squash inheritance

... (truncated)

Commits
  • 78a0c6e Fix security issues with the packages
  • 8b95064 Improved association tests
  • d8a2612 Bump version to 2.5.26
  • 07865f9 Fix function names on dependency when called from storage variables
  • 1cf9faa Added more tests
  • 3d7f5bb Bump version to 2.5.25
  • c04d663 Added linter hook to Claude
  • 6123671 Update explorerUrl option example
  • 29bed31 Update Claude settings
  • f1e47d7 Added --hideTypes -hy option
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar-fs](https://github.com/mafintosh/tar-fs) to 3.1.2 and updates ancestor dependency [sol2uml](https://github.com/naddison36/sol2uml). These dependencies need to be updated together.


Updates `tar-fs` from 2.1.1 to 3.1.2
- [Commits](mafintosh/tar-fs@v2.1.1...v3.1.2)

Updates `sol2uml` from 2.5.22 to 2.5.26
- [Release notes](https://github.com/naddison36/sol2uml/releases)
- [Commits](naddison36/sol2uml@v2.5.22...v2.5.26)

---
updated-dependencies:
- dependency-name: tar-fs
  dependency-version: 3.1.2
  dependency-type: indirect
- dependency-name: sol2uml
  dependency-version: 2.5.26
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants