Skip to content

chore(deps): bump tar and supabase#63

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8aa571b45f
Open

chore(deps): bump tar and supabase#63
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-8aa571b45f

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Apr 23, 2024

Bumps tar to 7.0.1 and updates ancestor dependency supabase. These dependencies need to be updated together.

Updates tar from 6.2.0 to 7.0.1

Changelog

Sourced from tar's changelog.

Changelog

7.0

  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

6.2

  • Add support for brotli compression
  • Add maxDepth option to prevent extraction into excessively deep folders.

6.1

6.0

  • Drop support for node 6 and 8
  • fix symlinks and hardlinks on windows being packed with \-style path targets

5.0

  • Address unpack race conditions using path reservations
  • Change large-numbers errors from TypeError to Error
  • Add TAR_* error codes
  • Raise TAR_BAD_ARCHIVE warning/error when there are no valid entries found in an archive
  • do not treat ignored entries as an invalid archive
  • drop support for node v4
  • unpack: conditionally use a file mapping to write files on Windows
  • Set more portable 'mode' value in portable mode
  • Set portable gzip option in portable mode

... (truncated)

Commits
  • d99fce3 7.0.1
  • af04392 Do not apply linkpath,global from global pax header
  • b0fbdea 7.0.0
  • 957da75 remove old lib folder
  • 9a260c2 test verifying #398 is fixed
  • 2d89a4e Properly handle long linkpath in PaxHeader
  • 314ec7e list: close file even if no error thrown
  • b3afdbb unpack test: use modern tap features
  • 2330416 test: code style, prefer () to _ for empty fns
  • ae9ce7e test: fix normalize-unicode coverage on linux
  • Additional commits viewable in compare view

Updates supabase from 1.110.1 to 1.163.2

Release notes

Sourced from supabase's releases.

v1.163.2

Changelog

Bug fixes

  • 54a632428abd34c61e51c5f4ad1cc695aa164165: fix(studio): bump studio to the latest version (#2196) (@​ivasilov)

v1.163.1

Changelog

Bug fixes

  • 6aaafb487b429cb01cc3eef5dc63ef8ac3fca4eb: fix: bump edge-runtime to 1.45.2 (@​laktek)
  • 682f99a1b953a4f54d13330f6609e94c312ac5af: fix: bump edge-runtime to 1.45.2 (#2195) (@​laktek)

Others

  • be47ecd5104e123bea5819b1d8cf7cbe71c2c7cd: Merge branch 'develop' into bump-er-1-45-2 (@​laktek)

v1.163.0

Changelog

Features

  • d441c38b57d52450f76899fa88d9cab90797dd6d: feat(branch): add persistent flag for project ref (@​sweatybridge)

Bug fixes

  • 2953becc7e9c79f1f28e937f27ba770a6f5a2090: fix(branch): prompt project ref if not linked (@​sweatybridge)
  • 86bf4fdd3210b07f74f37a2ecebd6b3ee778c4a6: fix(branch): prompt for branch id or default to git branch (@​sweatybridge)
  • 8a29e7205c532505b8516ee2b7cb6f0654302c16: fix(branch): confirm branch name when creating (@​sweatybridge)

v1.162.7

Changelog

Bug fixes

  • 3f3baf111a69af7d69661d3355fceb54a68699e4: fix: defaults to no when confirming delete operations (@​sweatybridge)
  • 770164adc38fc16c8f611a6446a7b3b691fad3cc: fix: reset remote should also truncate auth tables (@​sweatybridge)

Others

  • 094dd544554a7a8822e6f38424ae565c76634e19: chore(deps): bump github.com/docker/docker from 26.0.1+incompatible to 26.0.2+incompatible (#2188) (@​dependabot[bot])
  • aa2a26317def410948a20d66f8cbdb1741d53aab: chore(deps): bump github.com/docker/cli from 26.0.1+incompatible to 26.0.2+incompatible (#2189) (@​dependabot[bot])
  • 4f83327b92768dc691a849ff0b5c75570a218ff7: chore(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 (#2193) (@​dependabot[bot])

v1.162.6

Changelog

Bug fixes

  • 16390671cb27f885319917d93e9ece2d9f72ebc8: fix(functions): duplicate mount point when passing fallback as flag (@​sweatybridge)
  • f2624240a1758f501afaa53b0a2b44be0eaf6d1a: fix(functions): always resolve absolute path in container (@​sweatybridge)

v1.162.5

Changelog

Bug fixes

  • 29c087cca735890b377c70764be26978b6951285: fix: parse prompt answer from non-interactive stdin (@​sweatybridge)
  • 561975214b997761b8bfdb3debda0a900066a726: fix: dry run should not push roles (@​sweatybridge)
  • 82b3892cb0f859276c87fb09b1673a2acb9d0e15: fix: prompt text should handle piped input (@​sweatybridge)

Others

  • 1c46a57b415a0afe0ec442d547e88e685134aade: chore: refactor stdin mock (@​sweatybridge)
  • 10c686993ffcfd039583b994a6a6299b0377526b: chore: add unit tests for repair all (@​sweatybridge)
  • 2de08712f2ef2b3744bed34fc44873416d957cbc: chore: mock stdin for logout tests (@​sweatybridge)

v1.162.4

... (truncated)

Commits
  • 54a6324 fix(studio): bump studio to the latest version (#2196)
  • 682f99a fix: bump edge-runtime to 1.45.2 (#2195)
  • be47ecd Merge branch 'develop' into bump-er-1-45-2
  • 6aaafb4 fix: bump edge-runtime to 1.45.2
  • 8a29e72 fix(branch): confirm branch name when creating
  • 86bf4fd fix(branch): prompt for branch id or default to git branch
  • d441c38 feat(branch): add persistent flag for project ref
  • 2953bec fix(branch): prompt project ref if not linked
  • 770164a fix: reset remote should also truncate auth tables
  • 3f3baf1 fix: defaults to no when confirming delete operations
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.0.1 and updates ancestor dependency [supabase](https://github.com/supabase/cli). These dependencies need to be updated together.


Updates `tar` from 6.2.0 to 7.0.1
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v7.0.1)

Updates `supabase` from 1.110.1 to 1.163.2
- [Release notes](https://github.com/supabase/cli/releases)
- [Changelog](https://github.com/supabase/cli/blob/develop/.goreleaser.yml)
- [Commits](supabase/cli@v1.110.1...v1.163.2)

---
updated-dependencies:
- dependency-name: tar
  dependency-type: indirect
- dependency-name: supabase
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 23, 2024
@Molnes Molnes requested review from nokacper24 and z-rayc April 23, 2024 12:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants