Skip to content

Bump tar from 0.4.44 to 0.4.45#82

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tar-0.4.45
Open

Bump tar from 0.4.44 to 0.4.45#82
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tar-0.4.45

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 20, 2026

Bumps tar from 0.4.44 to 0.4.45.

Commits
  • 096e3d1 Bump to 0.4.45 (#443)
  • 17b1fd8 archive: Prevent symlink-directory collision chmod attack (#442)
  • de1a587 archive: Unconditionally honor PAX size (#441)
  • 6071cbe ci: Consolidate workflows (#439)
  • ad1fde9 build-sys: Promote unused_code to an error
  • c8cb250 tests: Squash a warning
  • 638c495 ci: Add xtask infra + reverse dependency testing (#435)
  • 32a9bbb tests: Add RandomReader to exercise partial-read resilience (#436)
  • 9c5df0b Fix GNU long-name extension stream corruption on validation error (#434)
  • 88b1e3b Fix docs typo in header.rs (#431)
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Mar 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/tar-0.4.45 branch 3 times, most recently from d502ef7 to 232e2f7 Compare March 21, 2026 16:11
@dependabot dependabot Bot requested review from foreman-vk and rhymiz as code owners March 21, 2026 16:11
@dependabot dependabot Bot force-pushed the dependabot/cargo/tar-0.4.45 branch from 232e2f7 to db9d73a Compare March 25, 2026 14:59
@dependabot dependabot Bot changed the title chore(deps): bump tar from 0.4.44 to 0.4.45 Bump tar from 0.4.44 to 0.4.45 Apr 3, 2026
@dependabot dependabot Bot force-pushed the dependabot/cargo/tar-0.4.45 branch from db9d73a to 4193fe2 Compare April 3, 2026 10:37
Bumps [tar](https://github.com/alexcrichton/tar-rs) from 0.4.44 to 0.4.45.
- [Commits](alexcrichton/tar-rs@0.4.44...0.4.45)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 0.4.45
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/tar-0.4.45 branch from 4193fe2 to 9d4c4b2 Compare April 3, 2026 23:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants