From be453bc07538fb9811d37d633830d4920038e4d6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 00:44:07 +0000 Subject: [PATCH 1/2] Bump tar from 7.5.11 to 7.5.21 Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.11 to 7.5.21. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.21) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.21 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- foreign/package.json | 2 +- package-lock.json | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/foreign/package.json b/foreign/package.json index a221fc4a..b177204f 100644 --- a/foreign/package.json +++ b/foreign/package.json @@ -15,7 +15,7 @@ "jsonrepair": "^3.13.3", "registry-lib": "file:../lib", "semver": "^7.7.4", - "tar": "^7.5.11", + "tar": "^7.5.21", "tmp": "^0.2.5", "yaml": "^2.8.2" } diff --git a/package-lock.json b/package-lock.json index f0ff93e4..2ca82956 100644 --- a/package-lock.json +++ b/package-lock.json @@ -37,7 +37,7 @@ "jsonrepair": "^3.13.3", "registry-lib": "file:../lib", "semver": "^7.7.4", - "tar": "^7.5.11", + "tar": "^7.5.21", "tmp": "^0.2.5", "yaml": "^2.8.2" } @@ -2728,9 +2728,9 @@ "license": "MIT" }, "node_modules/tar": { - "version": "7.5.11", - "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz", - "integrity": "sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==", + "version": "7.5.21", + "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.21.tgz", + "integrity": "sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==", "license": "BlueOak-1.0.0", "dependencies": { "@isaacs/fs-minipass": "^4.0.0", From d21f67d34bb2e84f164224217406ea16b4c7c998 Mon Sep 17 00:00:00 2001 From: Thomas Honeyman <10245104+thomashoneyman@users.noreply.github.com> Date: Wed, 22 Jul 2026 01:00:54 +0000 Subject: [PATCH 2/2] Update npm dependency hash Amp-Thread-ID: https://ampcode.com/threads/T-019f874c-aa0c-7368-9af7-a11c30dcfc7f Co-authored-by: Thomas Honeyman Amp-Thread-ID: https://ampcode.com/threads/T-019f874c-aa0c-7368-9af7-a11c30dcfc7f --- nix/overlay.nix | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/nix/overlay.nix b/nix/overlay.nix index beb799a6..54fa965e 100644 --- a/nix/overlay.nix +++ b/nix/overlay.nix @@ -176,7 +176,7 @@ in ++ prev.lib.optionals prev.stdenv.isDarwin [ prev.darwin.cctools ]; # To update: run `nix build .#server` and copy the hash from the error - npmDepsHash = "sha256-MLW5lGkK/7UutxmJ/GigygU3egRuQjX4dJlvNtGk5lY="; + npmDepsHash = "sha256-qlHO3I/kb5/PDQA2aoVbSpvSnjS0CcJoEdGuCkAd+hA="; installPhase = '' mkdir -p $out