Bump the npm_and_yarn group across 14 directories with 5 updates by dependabot[bot] · Pull Request #3 · NethermindEth/boundless

dependabot · 2026-02-21T17:12:46Z

Bumps the npm_and_yarn group with 5 updates in the /infra/bootstrap directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/builder directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/distributor directory:

Package	From	To
@smithy/config-resolver	`4.1.4`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/indexer directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 1 update in the /infra/indexer/backfill-trigger-lambda directory: fast-xml-parser.
Bumps the npm_and_yarn group with 5 updates in the /infra/order-generator directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/order-stream directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/pipelines directory:

Package	From	To
@smithy/config-resolver	`4.0.1`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 2 updates in the /infra/pipelines/log-lambda directory: fast-xml-parser and js-yaml.
Bumps the npm_and_yarn group with 5 updates in the /infra/prover directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/prover-cluster directory:

Package	From	To
@smithy/config-resolver	`4.1.4`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 3 updates in the /infra/requestor-lists directory: glob, js-yaml and tar.
Bumps the npm_and_yarn group with 5 updates in the /infra/sample directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Bumps the npm_and_yarn group with 5 updates in the /infra/slasher directory:

Package	From	To
@smithy/config-resolver	`4.1.0`	`4.4.6`
fast-xml-parser	`4.4.1`	`5.3.6`
glob	`10.4.5`	`10.5.0`
js-yaml	`3.14.1`	`3.14.2`
tar	`6.2.1`	`7.5.9`

Updates @smithy/config-resolver from 4.1.0 to 4.4.6

Release notes

Sourced from @smithy/config-resolver's releases.

@smithy/util-defaults-mode-browser@4.3.32

Patch Changes

@smithy/smithy-client@4.11.5

@smithy/middleware-compression@4.3.31

Patch Changes

Updated dependencies [c5db01c]

@smithy/core@3.23.2

@smithy/util-defaults-mode-browser@4.3.31

Patch Changes

@smithy/smithy-client@4.11.4

@smithy/util-defaults-mode-browser@4.3.30

Patch Changes

@smithy/smithy-client@4.11.3

@smithy/middleware-compression@4.3.30

Patch Changes

Updated dependencies [6f96c01]

@smithy/core@3.23.1

@smithy/util-defaults-mode-browser@4.3.29

Patch Changes

@smithy/smithy-client@4.11.2

@smithy/middleware-compression@4.3.29

Patch Changes

Updated dependencies [4f05c6a]

@smithy/core@3.23.0

@smithy/util-defaults-mode-browser@4.3.28

Patch Changes

@smithy/smithy-client@4.11.1

@smithy/middleware-compression@4.3.28

Patch Changes

@smithy/core@3.22.1

@smithy/middleware-compression@4.3.27

Patch Changes

... (truncated)

Changelog

Sourced from @smithy/config-resolver's changelog.

4.4.6

Patch Changes

Updated dependencies [745867a]

@smithy/types@4.12.0

@smithy/node-config-provider@4.3.8

@smithy/util-endpoints@3.2.8

@smithy/util-middleware@4.2.8

4.4.5

Patch Changes

Updated dependencies [9ccb841]

@smithy/types@4.11.0

@smithy/node-config-provider@4.3.7

@smithy/util-endpoints@3.2.7

@smithy/util-middleware@4.2.7

4.4.4

Patch Changes

Updated dependencies [5a56762]

@smithy/types@4.10.0

@smithy/node-config-provider@4.3.6

@smithy/util-endpoints@3.2.6

@smithy/util-middleware@4.2.6

4.4.3

Patch Changes

Updated dependencies [3926fd7]

@smithy/types@4.9.0

@smithy/node-config-provider@4.3.5

@smithy/util-endpoints@3.2.5

@smithy/util-middleware@4.2.5

4.4.2

Patch Changes

372b46f: allow * region with warning

4.4.1

Patch Changes

... (truncated)

Commits

0e8cc49 Version NPM packages
7e4bbf6 chore: upgrade rimraf to v5.0.10 (#1829)
521d67c Version NPM packages
8b90f36 Version NPM packages
cc0124e Version NPM packages
07f95d9 Version NPM packages
372b46f fix(config-resolver): allow asterisk region with warning (#1760)
472a5ea Version NPM packages
8af2d33 Version NPM packages
13c5cd9 chore(config-resolver): add region validation cache (#1750)
Additional commits viewable in compare view

Updates fast-xml-parser from 4.4.1 to 5.3.6

Release notes

Sourced from fast-xml-parser's releases.

Entity security and performance

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.5...v5.3.6

v5.3.5

What's Changed

Add missing exports to fxp commonjs types by @jeremymeng in NaturalIntelligence/fast-xml-parser#782

fix: Escape regex char in entity name

update strnum to 2.1.2

New Contributors

@jeremymeng made their first contribution in NaturalIntelligence/fast-xml-parser#782

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.4...v5.3.5

fix: handle HTML numeric and hex entities when out of range

No release notes provided.

bug fix and performance improvements

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

Performance improvement for stopNodes (By Maciek Lamberski)

Replace Buffer with Uint8Array

Launched Separate CLI module

Replace Buffer with Uint8Array

Support EMPTY and ANY with ELEMENT in DOCTYPE

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.2.4...v5.2.4

upgrade to ESM module and fixing value parsing issues

Support ESM modules

fix value parsing issues

a feature to access tag location is added (metadata)

fix to read DOCTYPE correctly

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md

Summary update on all the previous releases from v4.2.4

Multiple minor fixes provided in the validator and parser

v6 is added for experimental use.

ignoreAttributes support function, and array of string or regex

Add support for parsing HTML numeric entities

v5 of the application is ESM module now. However, JS is also supported

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

5.3.7 5.3.7 / 2026-02-20

fix typings for CJS (By Corentin Girard)

5.3.6 / 2026-02-14

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

5.3.5 / 2026-02-08

fix: Escape regex char in entity name

update strnum to 2.1.2

add missing exports in CJS typings

5.3.4 / 2026-01-30

fix: handle HTML numeric and hex entities when out of range

5.3.3 / 2025-12-12

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

5.3.2 / 2025-11-14

fix for import statement for v6

5.3.1 / 2025-11-03

Performance improvement for stopNodes (By Maciek Lamberski)

5.3.0 / 2025-10-03

Use Uint8Array in place of Buffer in Parser

5.2.5 / 2025-06-08

Inform user to use fxp-cli instead of in-built CLI feature

Export typings for direct use

5.2.4 / 2025-06-06

fix (#747): fix EMPTY and ANY with ELEMENT in DOCTYPE

5.2.3 / 2025-05-11

fix (#747): support EMPTY and ANY with ELEMENT in DOCTYPE

5.2.2 / 2025-05-05

fix (#746): update strnum to fix parsing issues related to enotations

... (truncated)

Commits

ecb2ca1 update release info
910dae5 fix entities performance & security issues
fe9a852 update strnum and release detail
943ef0e fix: Escape regex char in entity name
ddcd0ac Escape regex char in entity name
341b582 Add missing exports to fxp commonjs types (#782)
753e770 update release details
4e387f6 handle html entities when out of range
088b47a correct typo (#780)
f335cbf update publish detail
Additional commits viewable in compare view

Updates glob from 10.4.5 to 10.5.0

Commits

56774ef 10.5.0
1e4e297 bin: Do not expose filenames to shell expansion
See full diff in compare view

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

Types are now exported as yaml.types.XXX.

Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

Check migration guide to see details for all breaking changes.

Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.

Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.

yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.

yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.

!!binary now always mapped to Uint8Array on load.

Reduced nesting of /lib folder.

Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).

dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.

Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.

Code snippet created in exceptions now contains multiple lines with line numbers.

dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.

dump() with skipInvalid=true now serializes invalid items in collections as null.

Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.

Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

Added .mjs (es modules) support.

Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.

Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

9963d36 3.14.2 released
10d3c8e dist rebuild
5278870 fix prototype pollution in merge (<<) (#731)
See full diff in compare view

Updates tar from 6.2.1 to 7.5.9

Changelog

Sourced from tar's changelog.

Changelog

7.5

Added zstd compression support.

Consistent TOCTOU behavior in sync t.list

Only read from ustar block if not specified in Pax

Fix sync tar.list when file size reduces while reading

Sanitize absolute linkpaths properly

Prevent writing hardlink entries to the archive ahead of their file target

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Drop support for node <18

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

1f0c2c9 7.5.9
fbb0851 build minified version as default export
6b8eba0 7.5.8
2cb1120 fix(unpack): improve UnpackSync symlink error "into" path accuracy
d18e4e1 fix: do not write linkpaths through symlinks
4a37eb9 7.5.7
f4a7aa9 fix: properly sanitize hard links containing ..
394ece6 7.5.6
7d4cc17 fix race puting a Link ahead of its target File
26ab904 7.5.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @smithy/config-resolver from 4.1.0 to 4.4.6

Release notes

Sourced from @smithy/config-resolver's releases.

@smithy/util-defaults-mode-browser@4.3.32

Patch Changes

@smithy/smithy-client@4.11.5

@smithy/middleware-compression@4.3.31

Patch Changes

Updated dependencies [c5db01c]

@smithy/core@3.23.2

@smithy/util-defaults-mode-browser@4.3.31

Patch Changes

@smithy/smithy-client@4.11.4

@smithy/util-defaults-mode-browser@4.3.30

Patch Changes

@smithy/smithy-client@4.11.3

@smithy/middleware-compression@4.3.30

Patch Changes

Updated dependencies [6f96c01]

@smithy/core@3.23.1

@smithy/util-defaults-mode-browser@4.3.29

Patch Changes

@smithy/smithy-client@4.11.2

@smithy/middleware-compression@4.3.29

Patch Changes

Updated dependencies [4f05c6a]

@smithy/core@3.23.0

@smithy/util-defaults-mode-browser@4.3.28

Patch Changes

@smithy/smithy-client@4.11.1

@smithy/middleware-compression@4.3.28

Patch Changes

@smithy/core@3.22.1

@smithy/middleware-compression@4.3.27

Patch Changes

... (truncated)

Changelog

Sourced from @smithy/config-resolver's changelog.

4.4.6

Patch Changes

Updated dependencies [745867a]

@smithy/types@4.12.0

@smithy/node-config-provider@4.3.8

@smithy/util-endpoints@3.2.8

@smithy/util-middleware@4.2.8

4.4.5

Patch Changes

Updated dependencies [9ccb841]

@smithy/types@4.11.0

@smithy/node-config-provider@4.3.7

@smithy/util-endpoints@3.2.7

@smithy/util-middleware@4.2.7

4.4.4

Patch Changes

Updated dependencies [5a56762]

@smithy/types@4.10.0

@smithy/node-config-provider@4.3.6

@smithy/util-endpoints@3.2.6

@smithy/util-middleware@4.2.6

4.4.3

Patch Changes

Updated dependencies [3926fd7]

@smithy/types@4.9.0

@smithy/node-config-provider@4.3.5

@smithy/util-endpoints@3.2.5

@smithy/util-middleware@4.2.5

4.4.2

Patch Changes

372b46f: allow * region with warning

4.4.1

Patch Changes

... (truncated)

Commits

0e8cc49 Version NPM packages
7e4bbf6 chore: upgrade rimraf to v5.0.10 (#1829)
521d67c Version NPM packages
8b90f36 Version NPM packages
cc0124e Version NPM packages
07f95d9 Version NPM packages
372b46f fix(config-resolver): allow asterisk region with warning (#1760)
472a5ea Version NPM packages
8af2d33 Version NPM packages
13c5cd9 chore(config-resolver): add region validation cache (#1750)
Additional commits viewable in compare view

Updates fast-xml-parser from 4.4.1 to 5.3.6

Release notes

Sourced from fast-xml-parser's releases.

Entity security and performance

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.5...v5.3.6

v5.3.5

What's Changed

Add missing exports to fxp commonjs types by @jeremymeng in NaturalIntelligence/fast-xml-parser#782

fix: Escape regex char in entity name

update strnum to 2.1.2

New Contributors

@jeremymeng made their first contribution in NaturalIntelligence/fast-xml-parser#782

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.3.4...v5.3.5

fix: handle HTML numeric and hex entities when out of range

No release notes provided.

bug fix and performance improvements

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

Performance improvement for stopNodes (By Maciek Lamberski)

Replace Buffer with Uint8Array

Launched Separate CLI module

Replace Buffer with Uint8Array

Support EMPTY and ANY with ELEMENT in DOCTYPE

Full Changelog: NaturalIntelligence/fast-xml-parser@v5.2.4...v5.2.4

upgrade to ESM module and fixing value parsing issues

Support ESM modules

fix value parsing issues

a feature to access tag location is added (metadata)

fix to read DOCTYPE correctly

Full Changelog: https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md

Summary update on all the previous releases from v4.2.4

Multiple minor fixes provided in the validator and parser

v6 is added for experimental use.

ignoreAttributes support function, and array of string or regex

Add support for parsing HTML numeric entities

v5 of the application is ESM module now. However, JS is also supported

... (truncated)

Changelog

Sourced from fast-xml-parser's changelog.

Note: If you find missing information about particular minor version, that version must have been changed without any functional change in this library.

5.3.7 5.3.7 / 2026-02-20

fix typings for CJS (By Corentin Girard)

5.3.6 / 2026-02-14

Improve security and performance of entity processing

new options maxEntitySize, maxExpansionDepth, maxTotalExpansions, maxExpandedLength, allowedTags,tagFilter

fast return when no edtity is present

improvement replacement logic to reduce number of calls

5.3.5 / 2026-02-08

fix: Escape regex char in entity name

update strnum to 2.1.2

add missing exports in CJS typings

5.3.4 / 2026-01-30

fix: handle HTML numeric and hex entities when out of range

5.3.3 / 2025-12-12

fix #775: transformTagName with allowBooleanAttributes adds an unnecessary attribute

5.3.2 / 2025-11-14

fix for import statement for v6

5.3.1 / 2025-11-03

Performance improvement for stopNodes (By Maciek Lamberski)

5.3.0 / 2025-10-03

Use Uint8Array in place of Buffer in Parser

5.2.5 / 2025-06-08

Inform user to use fxp-cli instead of in-built CLI feature

Export typings for direct use

5.2.4 / 2025-06-06

fix (#747): fix EMPTY and ANY with ELEMENT in DOCTYPE

5.2.3 / 2025-05-11

fix (#747): support EMPTY and ANY with ELEMENT in DOCTYPE

5.2.2 / 2025-05-05

fix (#746): update strnum to fix parsing issues related to enotations

... (truncated)

Commits

ecb2ca1 update release info
910dae5 fix entities performance & security issues
fe9a852 update strnum and release detail
943ef0e fix: Escape regex char in entity name
ddcd0ac Escape regex char in entity name
341b582 Add missing exports to fxp commonjs types (#782)
753e770 update release details
4e387f6 handle html entities when out of range
088b47a correct typo (#780)
f335cbf update publish detail
Additional commits viewable in compare view

Updates glob from 10.4.5 to 10.5.0

Commits

56774ef 10.5.0
1e4e297 bin: Do not expose filenames to shell expansion
See full diff in compare view

Updates js-yaml from 3.14.1 to 3.14.2

Changelog

Sourced from js-yaml's changelog.

[3.14.2] - 2025-11-15

Security

Backported v4.1.1 fix to v3

[4.1.1] - 2025-11-12

Security

Fix prototype pollution issue in yaml merge (<<) operator.

[4.1.0] - 2021-04-15

Added

Types are now exported as yaml.types.XXX.

Every type now has options property with original arguments kept as they were (see yaml.types.int.options as an example).

Changed

Schema.extend() now keeps old type order in case of conflicts (e.g. Schema.extend([ a, b, c ]).extend([ b, a, d ]) is now ordered as abcd instead of cbad).

[4.0.0] - 2021-01-03

Changed

Check migration guide to see details for all breaking changes.

Breaking: "unsafe" tags !!js/function, !!js/regexp, !!js/undefined are moved to js-yaml-js-types package.

Breaking: removed safe* functions. Use load, loadAll, dump instead which are all now safe by default.

yaml.DEFAULT_SAFE_SCHEMA and yaml.DEFAULT_FULL_SCHEMA are removed, use yaml.DEFAULT_SCHEMA instead.

yaml.Schema.create(schema, tags) is removed, use schema.extend(tags) instead.

!!binary now always mapped to Uint8Array on load.

Reduced nesting of /lib folder.

Parse numbers according to YAML 1.2 instead of YAML 1.1 (01234 is now decimal, 0o1234 is octal, 1:23 is parsed as string instead of base60).

dump() no longer quotes :, [, ], (, ) except when necessary, #470, #557.

Line and column in exceptions are now formatted as (X:Y) instead of at line X, column Y (also present in compact format), #332.

Code snippet created in exceptions now contains multiple lines with line numbers.

dump() now serializes undefined as null in collections and removes keys with undefined in mappings, #571.

dump() with skipInvalid=true now serializes invalid items in collections as null.

Custom tags starting with ! are now dumped as !tag instead of !<!tag>, #576.

Custom tags starting with tag:yaml.org,2002: are now shorthanded using !!, #258.

Added

Added .mjs (es modules) support.

Added quotingType and forceQuotes options for dumper to configure string literal style, #290, #529.

Added styles: { '!!null': 'empty' } option for dumper (serializes { foo: null } as "foo: "), #570.

... (truncated)

Commits

9963d36 3.14.2 released
10d3c8e dist rebuild
5278870 fix prototype pollution in merge (<<) (#731)
See full diff in compare view

Updates tar from 6.2.1 to 7.5.9

Changelog

Sourced from tar's changelog.

Changelog

7.5

Added zstd compression support.

Consistent TOCTOU behavior in sync t.list

Only read from ustar block if not specified in Pax

Fix sync tar.list when file size reduces while reading

Sanitize absolute linkpaths properly

Prevent writing hardlink entries to the archive ahead of their file target

7.4

Deprecate onentry in favor of onReadEntry for clarity.

7.3

Add onWriteEntry option

7.2

DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

Update minipass to v7.1.0

Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

Drop support for node <18

Rewrite in TypeScript, provide ESM and CommonJS hybrid interface

Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.

Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.

Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

1f0c2c9 7.5.9
fbb0851 build minified version as default export
6b8eba0 7.5.8
2cb1120 fix(unpack): improve UnpackSync symlink error "into" path accuracy
d18e4e1 fix: do not write linkpaths through symlinks
4a37eb9 7.5.7
f4a7aa9 fix: properly sanitize hard links containing ..
394ece6 7.5.6
7d4cc17 fix race puting a Link ahead of its target File
26ab904 7.5.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @smithy/config-resolver from 4.1.4 to 4.4.6

Release notes

Sourced from @smithy/config-resolver's releases.

@smithy/util-defaults-mode-browser@4.3.32

Patch Changes

@smithy/smithy-client@4.11.5

@smithy/middleware-compression@4.3.31

Patch Changes

Updated dependencies [c5db01c]

@smithy/core@3.23.2

@smithy/util-defaults-mode-browser@4.3.31

Patch Changes

@smithy/smithy-client@4.11.4

@smithy/util-defaults-mode-browser@4.3.30

Patch Changes

@smithy/smithy-client@4.11.3

@smithy/middleware-compression@4.3.30

Patch Changes

Updated dependencies [6f96c01]

@smithy/core@3.23.1

@smithy/util-defaults-mode-browser@4.3.29

Patch Changes

@smithy/smithy-client@4.11.2

@smithy/middleware-compression@4.3.29

Patch Changes

Updated dependencies [4f05c6a]

@smithy/core@3.23.0

@smithy/util-defaults-mode-browser@4.3.28

Patch Changes

@smithy/smithy-client@4.11.1

@smithy/middleware-compression@4.3.28

Patch Changes

@smithy/core@3.22.1

@smithy/middleware-compression@4.3.27

Patch Changes

... (truncated)

Changelog

Sourced from @smithy/config-resolver's changelog.

4.4.6

Patch Changes

Updated dependencies [745867a]

@smithy/types@4.12.0

@smithy/node-config-provider@4.3.8

@smithy/util-endpoints@3.2.8

@smithy/util-middleware@4.2.8

4.4.5

Patch Changes

Updated dependencies [9ccb841]

@smithy/types@4.11.0

@smithy/node-config-provider@4.3.7

@smithy/util-endpoints@3.2.7

@smithy/util-middleware@4.2.7

4.4.4

Patch Changes

Updated dependencies [5a56762]

@smithy/types@4.10.0

@smithy/node-config-provider@4.3.6

@smithy/util-endpoints@3.2.6

@smithy/util-middleware@4.2.6

4.4.3

Patch Changes

Updated dependencies [3926fd7]

@smithy/types@4.9.0

@smithy/node-config-provider@4.3.5

@smithy/util-endpoints@3.2.5

@smithy/util-middleware@4.2.5

4.4.2

Patch Changes

372b46f: allow * region with warning

4.4.1

Patch Changes

... (truncated)

Commits

0e8cc49 Version NPM packages
7e4bbf6 chore: upgrade rimraf to v5.0.10 (#1829)
521d67c Version NPM packages
8b90f36 Version NPM packages
cc0124e Version NPM packages
07f95d9 Version NPM packages
372b46f fix(config-resolver): allow asterisk region with warning (#1760)
472a5ea Version NPM packages

Bumps the npm_and_yarn group with 5 updates in the /infra/bootstrap directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/builder directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/distributor directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.4` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/indexer directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 1 update in the /infra/indexer/backfill-trigger-lambda directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser). Bumps the npm_and_yarn group with 5 updates in the /infra/order-generator directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/order-stream directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/pipelines directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.0.1` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 2 updates in the /infra/pipelines/log-lambda directory: [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) and [js-yaml](https://github.com/nodeca/js-yaml). Bumps the npm_and_yarn group with 5 updates in the /infra/prover directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/prover-cluster directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.4` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 3 updates in the /infra/requestor-lists directory: [glob](https://github.com/isaacs/node-glob), [js-yaml](https://github.com/nodeca/js-yaml) and [tar](https://github.com/isaacs/node-tar). Bumps the npm_and_yarn group with 5 updates in the /infra/sample directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Bumps the npm_and_yarn group with 5 updates in the /infra/slasher directory: | Package | From | To | | --- | --- | --- | | [@smithy/config-resolver](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/config-resolver) | `4.1.0` | `4.4.6` | | [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) | `4.4.1` | `5.3.6` | | [glob](https://github.com/isaacs/node-glob) | `10.4.5` | `10.5.0` | | [js-yaml](https://github.com/nodeca/js-yaml) | `3.14.1` | `3.14.2` | | [tar](https://github.com/isaacs/node-tar) | `6.2.1` | `7.5.9` | Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.4 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `fast-xml-parser` from 5.2.5 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.0.1 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.4 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) Updates `@smithy/config-resolver` from 4.1.0 to 4.4.6 - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/config-resolver/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/config-resolver@4.4.6/packages/config-resolver) Updates `fast-xml-parser` from 4.4.1 to 5.3.6 - [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases) - [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md) - [Commits](NaturalIntelligence/fast-xml-parser@v4.4.1...v5.3.6) Updates `glob` from 10.4.5 to 10.5.0 - [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md) - [Commits](isaacs/node-glob@v10.4.5...v10.5.0) Updates `js-yaml` from 3.14.1 to 3.14.2 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@3.14.1...3.14.2) Updates `tar` from 6.2.1 to 7.5.9 - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](isaacs/node-tar@v6.2.1...v7.5.9) --- updated-dependencies: - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: "@smithy/config-resolver" dependency-version: 4.4.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: fast-xml-parser dependency-version: 5.3.6 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: glob dependency-version: 10.5.0 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: js-yaml dependency-version: 3.14.2 dependency-type: indirect dependency-group: npm_and_yarn - dependency-name: tar dependency-version: 7.5.9 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Feb 21, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

Bump the npm_and_yarn group across 14 directories with 5 updates#3

Bump the npm_and_yarn group across 14 directories with 5 updates#3
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/infra/bootstrap/npm_and_yarn-4891cef64e

dependabot bot commented on behalf of github Feb 21, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 21, 2026

@​smithy/util-defaults-mode-browser@​4.3.32

Patch Changes

@​smithy/middleware-compression@​4.3.31

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.31

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.30

Patch Changes

@​smithy/middleware-compression@​4.3.30

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.29

Patch Changes

@​smithy/middleware-compression@​4.3.29

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.28

Patch Changes

@​smithy/middleware-compression@​4.3.28

Patch Changes

@​smithy/middleware-compression@​4.3.27

Patch Changes

4.4.6

Patch Changes

4.4.5

Patch Changes

4.4.4

Patch Changes

4.4.3

Patch Changes

4.4.2

Patch Changes

4.4.1

Patch Changes

Entity security and performance

v5.3.5

What's Changed

New Contributors

fix: handle HTML numeric and hex entities when out of range

bug fix and performance improvements

Replace Buffer with Uint8Array

Support EMPTY and ANY with ELEMENT in DOCTYPE

upgrade to ESM module and fixing value parsing issues

Summary update on all the previous releases from v4.2.4

[3.14.2] - 2025-11-15

Security

[4.1.1] - 2025-11-12

Security

[4.1.0] - 2021-04-15

Added

Changed

[4.0.0] - 2021-01-03

Changed

Added

Changelog

7.5

7.4

7.3

7.2

7.1

7.0

@​smithy/util-defaults-mode-browser@​4.3.32

Patch Changes

@​smithy/middleware-compression@​4.3.31

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.31

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.30

Patch Changes

@​smithy/middleware-compression@​4.3.30

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.29

Patch Changes

@​smithy/middleware-compression@​4.3.29

Patch Changes

@​smithy/util-defaults-mode-browser@​4.3.28

Patch Changes

@​smithy/middleware-compression@​4.3.28

Patch Changes

`@smithy/util-defaults-mode-browser@4`.3.32

`@smithy/middleware-compression@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.30

`@smithy/middleware-compression@4`.3.30

`@smithy/util-defaults-mode-browser@4`.3.29

`@smithy/middleware-compression@4`.3.29

`@smithy/util-defaults-mode-browser@4`.3.28

`@smithy/middleware-compression@4`.3.28

`@smithy/middleware-compression@4`.3.27

Replace `Buffer` with `Uint8Array`

`@smithy/util-defaults-mode-browser@4`.3.32

`@smithy/middleware-compression@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.30

`@smithy/middleware-compression@4`.3.30

`@smithy/util-defaults-mode-browser@4`.3.29

`@smithy/middleware-compression@4`.3.29

`@smithy/util-defaults-mode-browser@4`.3.28

`@smithy/middleware-compression@4`.3.28

`@smithy/middleware-compression@4`.3.27

Replace `Buffer` with `Uint8Array`

`@smithy/util-defaults-mode-browser@4`.3.32

`@smithy/middleware-compression@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.31

`@smithy/util-defaults-mode-browser@4`.3.30

`@smithy/middleware-compression@4`.3.30

`@smithy/util-defaults-mode-browser@4`.3.29

`@smithy/middleware-compression@4`.3.29

`@smithy/util-defaults-mode-browser@4`.3.28

`@smithy/middleware-compression@4`.3.28

`@smithy/middleware-compression@4`.3.27