Bumps the dependency-updates group with 8 updates: | Package | From | To | | --- | --- | --- | | [@primer/octicons-react](https://github.com/primer/octicons) | `19.21.2` | `19.22.0` | | [@primer/react](https://github.com/primer/react) | `38.10.0` | `38.11.0` | | [downshift](https://github.com/downshift-js/downshift) | `9.2.0` | `9.3.1` | | [framer-motion](https://github.com/motiondivision/motion) | `12.33.0` | `12.34.0` | | [postcss-loader](https://github.com/webpack/postcss-loader) | `8.2.0` | `8.2.1` | | [minimatch](https://github.com/isaacs/minimatch) | `10.1.2` | `10.2.0` | | [pacote](https://github.com/npm/pacote) | `21.2.0` | `21.3.1` | | [tar](https://github.com/isaacs/node-tar) | `7.5.7` | `7.5.9` | Updates `@primer/octicons-react` from 19.21.2 to 19.22.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/primer/octicons/releases"><code>@primer/octicons-react</code>'s releases</a>.</em></p> <blockquote> <h2>v19.22.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/primer/octicons/pull/1157">#1157</a> <a href="https://github.com/primer/octicons/commit/18e3b9fd74c4bc85b1add3624a082fc0f6fd36c2"><code>18e3b9fd</code></a> Thanks <a href="https://github.com/janmaarten-a11y"><code>@janmaarten-a11y</code></a>! <ul> <li>Add book-locked icon</li> <li>Add comment-locked icon</li> <li>Add issue-locked icon</li> <li>Add git-pull-request-locked icon</li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/primer/octicons/blob/main/CHANGELOG.md"><code>@primer/octicons-react</code>'s changelog</a>.</em></p> <blockquote> <h2>19.22.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/primer/octicons/pull/1157">#1157</a> <a href="https://github.com/primer/octicons/commit/18e3b9fd74c4bc85b1add3624a082fc0f6fd36c2"><code>18e3b9fd</code></a> Thanks <a href="https://github.com/janmaarten-a11y"><code>@janmaarten-a11y</code></a>! - Add book-locked icon Add comment-locked icon Add issue-locked icon Add git-pull-request-locked icon</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/primer/octicons/commit/bd5ef88bf51a08728aab249a9477b45251814e22"><code>bd5ef88</code></a> Version Packages (<a href="https://redirect.github.com/primer/octicons/issues/1159">#1159</a>)</li> <li><a href="https://github.com/primer/octicons/commit/18e3b9fd74c4bc85b1add3624a082fc0f6fd36c2"><code>18e3b9f</code></a> Locked icons (<a href="https://redirect.github.com/primer/octicons/issues/1157">#1157</a>)</li> <li><a href="https://github.com/primer/octicons/commit/2668c5f97b0f5d7c4a90917884bb1e3fdd5d2ad5"><code>2668c5f</code></a> Bump lodash from 4.17.21 to 4.17.23 in /lib/octicons_react (<a href="https://redirect.github.com/primer/octicons/issues/1153">#1153</a>)</li> <li><a href="https://github.com/primer/octicons/commit/6ae26dde832df24eaf2eb220010d7508242c2e72"><code>6ae26dd</code></a> Refactor dependencies to devDependencies (<a href="https://redirect.github.com/primer/octicons/issues/1145">#1145</a>)</li> <li><a href="https://github.com/primer/octicons/commit/98018266ca01eab98482e6d7d51a383d803490dc"><code>9801826</code></a> Bump lodash from 4.17.21 to 4.17.23 in /lib/octicons_styled (<a href="https://redirect.github.com/primer/octicons/issues/1152">#1152</a>)</li> <li><a href="https://github.com/primer/octicons/commit/279abe1c9361f156f5ddd4449d5de688efe4441d"><code>279abe1</code></a> Bump lodash from 4.17.21 to 4.17.23 (<a href="https://redirect.github.com/primer/octicons/issues/1150">#1150</a>)</li> <li><a href="https://github.com/primer/octicons/commit/9ebca00ad895788108bbdcd7a1b7610969bdd812"><code>9ebca00</code></a> Bump lodash from 4.17.21 to 4.17.23 in /lib/octicons_node (<a href="https://redirect.github.com/primer/octicons/issues/1151">#1151</a>)</li> <li><a href="https://github.com/primer/octicons/commit/72213e03382de744ecd0c6b20d7e82da8c4df1be"><code>72213e0</code></a> Bump js-yaml from 3.14.1 to 3.14.2 in /lib/octicons_react (<a href="https://redirect.github.com/primer/octicons/issues/1149">#1149</a>)</li> <li><a href="https://github.com/primer/octicons/commit/5c27fd068956761a762f17fc451819e5af4872b7"><code>5c27fd0</code></a> Bump js-yaml from 3.14.1 to 3.14.2 in /lib/octicons_styled (<a href="https://redirect.github.com/primer/octicons/issues/1148">#1148</a>)</li> <li>See full diff in <a href="https://github.com/primer/octicons/compare/v19.21.2...v19.22.0">compare view</a></li> </ul> </details> <br /> Updates `@primer/react` from 38.10.0 to 38.11.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/primer/react/releases"><code>@primer/react</code>'s releases</a>.</em></p> <blockquote> <h2><code>@primer/react</code><a href="https://github.com/38"><code>@38</code></a>.11.0</h2> <h3>Minor Changes</h3> <ul> <li><a href="https://redirect.github.com/primer/react/pull/7509">#7509</a> <a href="https://github.com/primer/react/commit/2e563b44ac9e671f3f7fbf4f51a9612deb019db9"><code>2e563b4</code></a> Thanks <a href="https://github.com/francinelucca"><code>@francinelucca</code></a>! - feat: implement displayInViewport for ActionMenu and AnchoredOverlay</li> </ul> <h3>Patch Changes</h3> <ul> <li> <p><a href="https://redirect.github.com/primer/react/pull/7501">#7501</a> <a href="https://github.com/primer/react/commit/81ab065b734a7d919fd9ce42cee1ced648160d12"><code>81ab065</code></a> Thanks <a href="https://github.com/apps/copilot-swe-agent"><code>@copilot-swe-agent</code></a>! - Fix PageLayout horizontal overflow by adding width constraint to ContentWrapper</p> </li> <li> <p><a href="https://redirect.github.com/primer/react/pull/7483">#7483</a> <a href="https://github.com/primer/react/commit/fe999ca362d21447506798a024ac8e1b8709399a"><code>fe999ca</code></a> Thanks <a href="https://github.com/francinelucca"><code>@francinelucca</code></a>! - remove primer_react_overlay_overflow FF from the codebase</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/primer/react/commit/eb0979b54f8c33cb795a86e83b848c07ee842973"><code>eb0979b</code></a> Release tracking (<a href="https://redirect.github.com/primer/react/issues/7503">#7503</a>)</li> <li><a href="https://github.com/primer/react/commit/2e563b44ac9e671f3f7fbf4f51a9612deb019db9"><code>2e563b4</code></a> chore: add changeset (<a href="https://redirect.github.com/primer/react/issues/7509">#7509</a>)</li> <li><a href="https://github.com/primer/react/commit/dd7bb1b0052e4afe87f395946ea48d7b3d921fe5"><code>dd7bb1b</code></a> implement <code>@primer/behaviors</code> displayInViewport for ActionMenu (<a href="https://redirect.github.com/primer/react/issues/7500">#7500</a>)</li> <li><a href="https://github.com/primer/react/commit/fe999ca362d21447506798a024ac8e1b8709399a"><code>fe999ca</code></a> remove primer_react_overlay_overflow FF from the codebase (<a href="https://redirect.github.com/primer/react/issues/7483">#7483</a>)</li> <li><a href="https://github.com/primer/react/commit/0189bbad737c69332b6c485ee0ed23e527b3fcd6"><code>0189bba</code></a> chore(deps): bump the babel group across 1 directory with 8 updates (<a href="https://redirect.github.com/primer/react/issues/7490">#7490</a>)</li> <li><a href="https://github.com/primer/react/commit/81ab065b734a7d919fd9ce42cee1ced648160d12"><code>81ab065</code></a> Fix PageLayout horizontal overflow by constraining ContentWrapper width (<a href="https://redirect.github.com/primer/react/issues/7501">#7501</a>)</li> <li>See full diff in <a href="https://github.com/primer/react/compare/@primer/react@38.10.0...@primer/react@38.11.0">compare view</a></li> </ul> </details> <br /> Updates `downshift` from 9.2.0 to 9.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/downshift-js/downshift/releases">downshift's releases</a>.</em></p> <blockquote> <h2>v9.3.1</h2> <h2><a href="https://github.com/downshift-js/downshift/compare/v9.3.0...v9.3.1">9.3.1</a> (2026-02-13)</h2> <h3>Bug Fixes</h3> <ul> <li><strong>useElementIds:</strong> prevent Webpack static analysis issue with useId (<a href="https://redirect.github.com/downshift-js/downshift/issues/1676">#1676</a>) (<a href="https://github.com/downshift-js/downshift/commit/9e79c4e5ce6b66bb8699f4ded4e979cb7da14aa2">9e79c4e</a>)</li> </ul> <h2>v9.3.0</h2> <h1><a href="https://github.com/downshift-js/downshift/compare/v9.2.0...v9.3.0">9.3.0</a> (2026-02-09)</h1> <h3>Features</h3> <ul> <li>support cjs and esm extensions (<a href="https://redirect.github.com/downshift-js/downshift/issues/1675">#1675</a>) (<a href="https://github.com/downshift-js/downshift/commit/52ec2308cab6fee4ace1a41952520a95e7857270">52ec230</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/downshift-js/downshift/commit/9e79c4e5ce6b66bb8699f4ded4e979cb7da14aa2"><code>9e79c4e</code></a> fix(useElementIds): prevent Webpack static analysis issue with useId (<a href="https://redirect.github.com/downshift-js/downshift/issues/1676">#1676</a>)</li> <li><a href="https://github.com/downshift-js/downshift/commit/52ec2308cab6fee4ace1a41952520a95e7857270"><code>52ec230</code></a> feat: support cjs and esm extensions (<a href="https://redirect.github.com/downshift-js/downshift/issues/1675">#1675</a>)</li> <li><a href="https://github.com/downshift-js/downshift/commit/f242a9a966875c14c3ddb0fb6cfff18bc1b33507"><code>f242a9a</code></a> dev: update dependencies and pipeline node versions (<a href="https://redirect.github.com/downshift-js/downshift/issues/1667">#1667</a>)</li> <li><a href="https://github.com/downshift-js/downshift/commit/f3ef96ae7540435ffa06e45f423377ccfa4d7853"><code>f3ef96a</code></a> docs: fix link title (<a href="https://redirect.github.com/downshift-js/downshift/issues/1673">#1673</a>)</li> <li><a href="https://github.com/downshift-js/downshift/commit/47949cd50a8619ed80839e2b6d52e0098f9e944e"><code>47949cd</code></a> docs: update useTagGroup links (<a href="https://redirect.github.com/downshift-js/downshift/issues/1672">#1672</a>)</li> <li>See full diff in <a href="https://github.com/downshift-js/downshift/compare/v9.2.0...v9.3.1">compare view</a></li> </ul> </details> <br /> Updates `framer-motion` from 12.33.0 to 12.34.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/motiondivision/motion/blob/main/CHANGELOG.md">framer-motion's changelog</a>.</em></p> <blockquote> <h2>[12.34.0] 2026-02-09</h2> <h3>Fixed</h3> <ul> <li><code>useScroll</code>: Hardware accelerated animations.</li> </ul> <h2>[12.33.2] 2026-02-06</h2> <h3>Fixed</h3> <ul> <li>Improve detection of detached elements with vanilla layout animations.</li> </ul> <h2>[12.33.1] 2026-02-06</h2> <h3>Fixed</h3> <ul> <li><code>AnimatePresence</code>: Ensure exiting nodes are correctly removed when rapidly switching children.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/motiondivision/motion/commit/5adbf49c451ba1b8e91e6e17847cad520cafdc45"><code>5adbf49</code></a> v12.34.0</li> <li><a href="https://github.com/motiondivision/motion/commit/5f57695592707192f3c15af02127232d08c92d80"><code>5f57695</code></a> Updating changelog</li> <li><a href="https://github.com/motiondivision/motion/commit/deb5717ee893e547ed8bc540f525851c60c7d7b4"><code>deb5717</code></a> Merge pull request <a href="https://redirect.github.com/motiondivision/motion/issues/3549">#3549</a> from motiondivision/use-spring-waapi</li> <li><a href="https://github.com/motiondivision/motion/commit/b24d9ff2748c1df939181e8c1120c01b2aa15421"><code>b24d9ff</code></a> latest</li> <li><a href="https://github.com/motiondivision/motion/commit/ec0446a7123973aa9897def82023ae6bd22b7618"><code>ec0446a</code></a> Scroll acceleration</li> <li><a href="https://github.com/motiondivision/motion/commit/365b0ad6758188abed5c7fa37f6149fb0c806e1e"><code>365b0ad</code></a> v12.33.2</li> <li><a href="https://github.com/motiondivision/motion/commit/9ebe1cf2ba6c65146e10e3450a9ae718d8100787"><code>9ebe1cf</code></a> Updating changelog</li> <li><a href="https://github.com/motiondivision/motion/commit/836da2304c83f4cf28004f083dd424bb10ad7d8a"><code>836da23</code></a> Fixing</li> <li><a href="https://github.com/motiondivision/motion/commit/76d07750e6cc2e4aeea684dc34facd437a1925fa"><code>76d0775</code></a> Fixing</li> <li><a href="https://github.com/motiondivision/motion/commit/6e4c2248f2ff30bc6ad66b8a5f946a8b9a0241ae"><code>6e4c224</code></a> Fix scroll-accelerate Cypress tests to check getAnimations() directly</li> <li>Additional commits viewable in <a href="https://github.com/motiondivision/motion/compare/v12.33.0...v12.34.0">compare view</a></li> </ul> </details> <br /> Updates `postcss-loader` from 8.2.0 to 8.2.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/postcss-loader/releases">postcss-loader's releases</a>.</em></p> <blockquote> <h2>v8.2.1</h2> <h3><a href="https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1">8.2.1</a> (2026-02-15)</h3> <h3>Bug Fixes</h3> <ul> <li>update peer dependency for <code>@rspack/core</code> v2 (<a href="https://redirect.github.com/webpack/postcss-loader/issues/717">#717</a>) (<a href="https://github.com/webpack/postcss-loader/commit/a3ed7e236b6414efdb89084fb90861a16db84b6a">a3ed7e2</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/postcss-loader/blob/main/CHANGELOG.md">postcss-loader's changelog</a>.</em></p> <blockquote> <h3><a href="https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1">8.2.1</a> (2026-02-15)</h3> <h3>Bug Fixes</h3> <ul> <li>update peer dependency for <code>@rspack/core</code> v2 (<a href="https://redirect.github.com/webpack/postcss-loader/issues/717">#717</a>) (<a href="https://github.com/webpack/postcss-loader/commit/a3ed7e236b6414efdb89084fb90861a16db84b6a">a3ed7e2</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/postcss-loader/commit/583677e2500b33ed273e1562c89daf07a188eb94"><code>583677e</code></a> chore(release): 8.2.1</li> <li><a href="https://github.com/webpack/postcss-loader/commit/a3ed7e236b6414efdb89084fb90861a16db84b6a"><code>a3ed7e2</code></a> fix: update peer dependency for <code>@rspack/core</code> v2 (<a href="https://redirect.github.com/webpack/postcss-loader/issues/717">#717</a>)</li> <li><a href="https://github.com/webpack/postcss-loader/commit/c984ff482d35874a3aecb0bbf1bf5fe0d92fffda"><code>c984ff4</code></a> test: fix (<a href="https://redirect.github.com/webpack/postcss-loader/issues/715">#715</a>)</li> <li><a href="https://github.com/webpack/postcss-loader/commit/cc01d2b544d94b57e7e8c2a65c8855188b782035"><code>cc01d2b</code></a> ci: fix</li> <li><a href="https://github.com/webpack/postcss-loader/commit/d4faa346d101f8698df9081407ff4808cb129d12"><code>d4faa34</code></a> docs: update contributing</li> <li><a href="https://github.com/webpack/postcss-loader/commit/b1e4fa591bbc665938d876bdd061794b44df1912"><code>b1e4fa5</code></a> chore: correct link (<a href="https://redirect.github.com/webpack/postcss-loader/issues/713">#713</a>)</li> <li><a href="https://github.com/webpack/postcss-loader/commit/d99016849d0120e5ef5704fb169c862442ee841a"><code>d990168</code></a> chore: migration to main org and branch (<a href="https://redirect.github.com/webpack/postcss-loader/issues/712">#712</a>)</li> <li>See full diff in <a href="https://github.com/webpack/postcss-loader/compare/v8.2.0...v8.2.1">compare view</a></li> </ul> </details> <br /> Updates `minimatch` from 10.1.2 to 10.2.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/minimatch/blob/main/changelog.md">minimatch's changelog</a>.</em></p> <blockquote> <h1>change log</h1> <h2>10.2</h2> <ul> <li>Add <code>braceExpandMax</code> option</li> </ul> <h2>10.1</h2> <ul> <li>Add <code>magicalBraces</code> option for <code>escape</code></li> <li>Fix <code>makeRe</code> when <code>partial: true</code> is set.</li> <li>Fix <code>makeRe</code> when pattern ends in a final <code>**</code> path part.</li> </ul> <h2>10.0</h2> <ul> <li>Require node 20 or 22 and higher</li> </ul> <h2>9.0</h2> <ul> <li>No default export, only named exports.</li> </ul> <h2>8.0</h2> <ul> <li>Recursive descent parser for extglob, allowing correct support for arbitrarily nested extglob expressions</li> <li>Bump required Node.js version</li> </ul> <h2>7.4</h2> <ul> <li>Add <code>escape()</code> method</li> <li>Add <code>unescape()</code> method</li> <li>Add <code>Minimatch.hasMagic()</code> method</li> </ul> <h2>7.3</h2> <ul> <li>Add support for posix character classes in a unicode-aware way.</li> </ul> <h2>7.2</h2> <ul> <li>Add <code>windowsNoMagicRoot</code> option</li> </ul> <h2>7.1</h2> <ul> <li>Add <code>optimizationLevel</code> configuration option, and revert the default back to the 6.2 style minimal optimizations, making the advanced transforms introduced in 7.0 opt-in. Also, process provided file paths in the same way in optimizationLevel:2 mode, so <em>most</em> things that matched with optimizationLevel 1 or 0 <em>should</em> match with level 2 as well. However, level 1 is the default, out of an abundance of caution.</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/minimatch/commit/1a62a2a667db92078811f2b7fc345737deded17a"><code>1a62a2a</code></a> 10.2.0</li> <li><a href="https://github.com/isaacs/minimatch/commit/758b5a3089af0b178b31bd40eb2189343d82121b"><code>758b5a3</code></a> changelog 10.2</li> <li><a href="https://github.com/isaacs/minimatch/commit/903e50ba7895f51cf3290541cd2cfe2b8e59167e"><code>903e50b</code></a> add braceExpandMax option, format</li> <li><a href="https://github.com/isaacs/minimatch/commit/a50a11077dc1c2c93191fbdf6ebf6012862db540"><code>a50a110</code></a> 10.1.3</li> <li><a href="https://github.com/isaacs/minimatch/commit/a08c04628411d8f9d3eea4ccb4fd84a1a48a9fc5"><code>a08c046</code></a> move back to og brace-expansion</li> <li>See full diff in <a href="https://github.com/isaacs/minimatch/compare/v10.1.2...v10.2.0">compare view</a></li> </ul> </details> <br /> Updates `pacote` from 21.2.0 to 21.3.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/pacote/releases">pacote's releases</a>.</em></p> <blockquote> <h2>v21.3.1</h2> <h2><a href="https://github.com/npm/pacote/compare/v21.3.0...v21.3.1">21.3.1</a> (2026-02-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/96e571a4c2f1eaab1932ba40eb495cc6b9798c9b"><code>96e571a</code></a> <a href="https://redirect.github.com/npm/pacote/pull/439">#439</a> ensure that resolved git ref matches expected sha (<a href="https://redirect.github.com/npm/pacote/issues/439">#439</a>) (<a href="https://github.com/klassiker"><code>@klassiker</code></a>, pacotedev)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/91847c43637a5308119076371300be497cfcff74"><code>91847c4</code></a> <a href="https://redirect.github.com/npm/pacote/pull/447">#447</a> fix test for ssri ignoring invalid hashes (<a href="https://redirect.github.com/npm/pacote/issues/447">#447</a>) (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> </ul> <h2>v21.3.0</h2> <h2><a href="https://github.com/npm/pacote/compare/v21.2.0...v21.3.0">21.3.0</a> (2026-02-09)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/8f5091d0a7fc356756707241f8b52dc8a036c34e"><code>8f5091d</code></a> <a href="https://redirect.github.com/npm/pacote/pull/445">#445</a> add support for git-256 sha lengths (<a href="https://redirect.github.com/npm/pacote/issues/445">#445</a>) (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/pacote/blob/main/CHANGELOG.md">pacote's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/pacote/compare/v21.3.0...v21.3.1">21.3.1</a> (2026-02-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/96e571a4c2f1eaab1932ba40eb495cc6b9798c9b"><code>96e571a</code></a> <a href="https://redirect.github.com/npm/pacote/pull/439">#439</a> ensure that resolved git ref matches expected sha (<a href="https://redirect.github.com/npm/pacote/issues/439">#439</a>) (<a href="https://github.com/klassiker"><code>@klassiker</code></a>, pacotedev)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/91847c43637a5308119076371300be497cfcff74"><code>91847c4</code></a> <a href="https://redirect.github.com/npm/pacote/pull/447">#447</a> fix test for ssri ignoring invalid hashes (<a href="https://redirect.github.com/npm/pacote/issues/447">#447</a>) (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> </ul> <h2><a href="https://github.com/npm/pacote/compare/v21.2.0...v21.3.0">21.3.0</a> (2026-02-09)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/pacote/commit/8f5091d0a7fc356756707241f8b52dc8a036c34e"><code>8f5091d</code></a> <a href="https://redirect.github.com/npm/pacote/pull/445">#445</a> add support for git-256 sha lengths (<a href="https://redirect.github.com/npm/pacote/issues/445">#445</a>) (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/pacote/commit/18d36e64a6cc44ac28b7ed2b45e6d2dda4dcf317"><code>18d36e6</code></a> chore: release 21.3.1 (<a href="https://redirect.github.com/npm/pacote/issues/448">#448</a>)</li> <li><a href="https://github.com/npm/pacote/commit/96e571a4c2f1eaab1932ba40eb495cc6b9798c9b"><code>96e571a</code></a> fix: ensure that resolved git ref matches expected sha (<a href="https://redirect.github.com/npm/pacote/issues/439">#439</a>)</li> <li><a href="https://github.com/npm/pacote/commit/91847c43637a5308119076371300be497cfcff74"><code>91847c4</code></a> chore: fix test for ssri ignoring invalid hashes (<a href="https://redirect.github.com/npm/pacote/issues/447">#447</a>)</li> <li><a href="https://github.com/npm/pacote/commit/411ceb6ea4326d7cfa70325068821bf8f98c8531"><code>411ceb6</code></a> chore: release 21.3.0 (<a href="https://redirect.github.com/npm/pacote/issues/446">#446</a>)</li> <li><a href="https://github.com/npm/pacote/commit/8f5091d0a7fc356756707241f8b52dc8a036c34e"><code>8f5091d</code></a> feat: add support for git-256 sha lengths (<a href="https://redirect.github.com/npm/pacote/issues/445">#445</a>)</li> <li>See full diff in <a href="https://github.com/npm/pacote/compare/v21.2.0...v21.3.1">compare view</a></li> </ul> </details> <br /> Updates `tar` from 7.5.7 to 7.5.9 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-tar/commit/1f0c2c9006b10199cf2686f8ef43e79a1773e1aa"><code>1f0c2c9</code></a> 7.5.9</li> <li><a href="https://github.com/isaacs/node-tar/commit/fbb08518bf290733b68ca4d4135f75becf73fd75"><code>fbb0851</code></a> build minified version as default export</li> <li><a href="https://github.com/isaacs/node-tar/commit/6b8eba0ef367ac937e703238daa6df94ae6f823f"><code>6b8eba0</code></a> 7.5.8</li> <li><a href="https://github.com/isaacs/node-tar/commit/2cb1120bcefe28d7ecc719b41441ade59c52e384"><code>2cb1120</code></a> fix(unpack): improve UnpackSync symlink error "into" path accuracy</li> <li><a href="https://github.com/isaacs/node-tar/commit/d18e4e1f846f4ddddc153b0f536a19c050e7499f"><code>d18e4e1</code></a> fix: do not write linkpaths through symlinks</li> <li>See full diff in <a href="https://github.com/isaacs/node-tar/compare/v7.5.7...v7.5.9">compare view</a></li> </ul> </details> <details> <summary>Maintainer changes</summary> <p>This version was pushed to npm by <a href="https://www.npmjs.com/~isaacs">isaacs</a>, a new releaser for tar since your current version.</p> </details> <details> <summary>Install script changes</summary> <p>This version adds <code>prepare</code> script that runs during installation. Review the package contents before updating.</p> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

File tree

1 file changed

1 file changed

0 commit comments