Bump tar to 6.1.9, fix security issue

This commit is contained in:
Convly 2021-09-01 12:01:44 +02:00
parent 8972d78e8d
commit 4b340e20df
2 changed files with 13 additions and 1 deletions

View File

@ -23,7 +23,7 @@
"node-fetch": "^2.6.1",
"node-machine-id": "^1.1.10",
"ora": "^5.4.0",
"tar": "6.1.4",
"tar": "6.1.9",
"uuid": "^3.3.2"
},
"scripts": {

View File

@ -19569,6 +19569,18 @@ tar@6.1.4:
mkdirp "^1.0.3"
yallist "^4.0.0"
tar@6.1.9:
version "6.1.9"
resolved "https://registry.yarnpkg.com/tar/-/tar-6.1.9.tgz#5646ef51342ac55456b2466e44da810439978db1"
integrity sha512-XjLaMNl76o07zqZC/aW4lwegdY07baOH1T8w3AEfrHAdyg/oYO4ctjzEBq9Gy9fEP9oHqLIgvx6zuGDGe+bc8Q==
dependencies:
chownr "^2.0.0"
fs-minipass "^2.0.0"
minipass "^3.0.0"
minizlib "^2.1.1"
mkdirp "^1.0.3"
yallist "^4.0.0"
tar@^2.0.0:
version "2.2.2"
resolved "https://registry.yarnpkg.com/tar/-/tar-2.2.2.tgz#0ca8848562c7299b8b446ff6a4d60cdbb23edc40"