Skip to content

chore(deps): bump tar from 0.4.44 to 0.4.46 in /linting/rspack_collection_hasher - #13

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/cargo/linting/rspack_collection_hasher/tar-0.4.46
Open

dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/cargo/linting/rspack_collection_hasher/tar-0.4.46

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 19, 2026 •

Copy link
Copy Markdown

Bumps tar from 0.4.44 to 0.4.46.

Release notes

Sourced from tar's releases.

0.4.46

Security

See also GHSA-3cv2-h65g-fgmm

Other changes

New Contributors

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits
  • fc459c1 Release 0.4.46
  • 43e05a8 ci: Add crates.io trusted publishing workflow
  • bba5666 Update repo links
  • cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
  • 1b4997c builder: Expand docs for follow_symlinks and append_dir_all
  • bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
  • 2349b49 Add support of absolute paths
  • 39d0311 Update some links
  • 59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
  • 8296b9a ci: Fix and re-enable reverse dependency testing (#444)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels May 19, 2026
@github-actions

github-actions Bot commented May 19, 2026 •

Copy link
Copy Markdown

Rsdoctor Bundle Diff Analysis

Found 6 projects in monorepo, 0 projects with changes.

📊 Quick Summary
Project Total Size Change
popular-libs 1.7 MB 0
react-10k 5.7 MB 0
react-1k 826.3 KB 0
react-5k 2.7 MB 0
rome 1.6 MB 0
ui-components 4.8 MB 0

Generated by Rsdoctor GitHub Action

Triggered on v*-deterministic tags. Builds linux-x64-gnu with the
release profile (fat LTO, strip) in the upstream napi-rs Docker image,
packages as an npm-compatible tarball, and creates a GitHub Release.
The reusable-build-build.yml from main is incompatible with the v1.7.5
codebase (cargo codegen differences). Replace with a self-contained
workflow that builds directly in Docker, matching the local build
approach. Adds glibc compatibility verification step.
Bumps [tar](https://github.com/composefs/tar-rs) from 0.4.44 to 0.4.46.
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.44...0.4.46)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump tar from 0.4.44 to 0.4.46 in /linting/rspack_collection_hasher chore(deps): bump tar from 0.4.44 to 0.4.46 in /linting/rspack_collection_hasher May 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/linting/rspack_collection_hasher/tar-0.4.46 branch from 2a4e04a to 0f6c5f0 Compare May 21, 2026 13:22
@cellison-figma
cellison-figma force-pushed the main branch 2 times, most recently from 9459e34 to 378bffb Compare September 9, 2026 16:23

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant