Skip to content

chore(deps): bump tar, @angular/cli and @capacitor/cli in /angular#730

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/multi-4832a91ff9
Open

chore(deps): bump tar, @angular/cli and @capacitor/cli in /angular#730
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/angular/multi-4832a91ff9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps tar to 7.5.16 and updates ancestor dependencies tar, @angular/cli and @capacitor/cli. These dependencies need to be updated together.

Updates tar from 6.2.0 to 7.5.16

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
  • cf21338 7.5.16
  • 21a8220 do not apply PAX header fields to meta entries
  • 52632cf update project deps
  • 302f51f fix inconsequential typo in PENDINGLINKS symbol name
  • 55dbb99 remove some uses of mutate-fs
  • 87cc309 7.5.15
  • 7aef486 fix: regression in pending links detection
  • 6244eb3 7.5.14
  • 9704d8c stricter protection against hardlinks preempting their targets
  • 700734f update workflows and deps
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @angular/cli from 16.2.9 to 22.0.3

Release notes

Sourced from @​angular/cli's releases.

22.0.3

@​schematics/angular

Commit Description
fix - 0eddea898 remove default workspace vscode mcp.json configuration

22.0.2

@​angular/cli

Commit Description
fix - 136fc2714 support registry metadata fetching under bun package manager
perf - 2653dd5c7 implement semaphore backpressure throttling in PackageManager

@​angular/build

Commit Description
perf - 0b4a48add implement semaphore backpressure throttling in JavaScriptTransformer

@​angular/ssr

Commit Description
fix - d996a27e9 avoid caching non-SSG page lookups
fix - 285a34e42 correct grammar in console warning for redirected location headers
fix - c8088a536 prioritize options over environment variables in AngularNodeAppEngine

22.0.1

@​schematics/angular

Commit Description
fix - c80012294 fix browserMode option mapping in refactor-jasmine-vitest
fix - a9b6bd904 safely comment out multiline statements in refactor-jasmine-vitest
fix - 12199df00 use null objects and callbacks in karma-to-vitest migration

@​angular/cli

Commit Description
fix - b54e9a549 do not sort migrations of the same version alphabetically
fix - d33311612 fallback to local package.json for schematic detection on first run
fix - 918102a93 isolate temporary package installation from parent pnpm workspace
fix - b048b5f4a remove forceAuth and unscoped credential parsing
fix - 277934035 validate registry option is a valid URL in ng add
perf - 4510dae02 optimize update schematic registry query counts by fetching package metadata lazily

@​angular/build

Commit Description
fix - 89d1be979 allow disabling Vitest isolation from builder
fix - d45b84be9 exclude JSON imports from Vite dependency optimization
fix - e3cab4ddd prevent concurrent stylesheet bundling esbuild context leaks
fix - bd413b0eb restrict application builder output paths to output directory

22.0.0

@​schematics/angular

| Commit | Description |

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

22.0.3 (2026-06-18)

@​schematics/angular

Commit Type Description
0eddea898 fix remove default workspace vscode mcp.json configuration

21.2.16 (2026-06-17)

@​angular/cli

Commit Type Description
77c9047ac fix update pacote to 21.5.1

@​angular/ssr

Commit Type Description
d052e97da fix prioritize options over environment variables in AngularNodeAppEngine

20.3.29 (2026-06-17)

@​angular/cli

Commit Type Description
5f7c0328c fix update pacote to 21.5.1

@​angular/ssr

Commit Type Description
a75d78e68 fix prioritize options over environment variables in AngularNodeAppEngine

22.0.2 (2026-06-17)

... (truncated)

Commits
  • b30b9d3 release: cut the v22.0.3 release
  • bc97bb3 build: update dependency vite to v7.3.5
  • 0eddea8 fix(@​schematics/angular): remove default workspace vscode mcp.json configuration
  • 08f9959 refactor(@​angular/cli): promote experimental MCP tools to stable
  • aab6c10 release: cut the v22.0.2 release
  • 376e4dc build: update cross-repo angular dependencies
  • d996a27 fix(@​angular/ssr): avoid caching non-SSG page lookups
  • 5714bfc build: update pnpm to v10.34.3
  • f26011a build: lock file maintenance
  • 2879ed9 build: update bazel dependencies
  • Additional commits viewable in compare view

Updates @capacitor/cli from 5.6.0 to 8.4.0

Release notes

Sourced from @​capacitor/cli's releases.

8.4.0

8.4.0 (2026-06-02)

Bug Fixes

  • android: show only the requested system bar (#8480) (4c6c321)
  • cli: revert live reload config on failure (#8485) (1d031a4)
  • SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)
  • SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

8.3.4

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3

8.3.3 (2026-05-08)

Bug Fixes

  • cli: copy plugin files in CocoaPods projects (#8467) (b2d7719)

8.3.2

8.3.2 (2026-05-07)

Bug Fixes

  • cli: add cSettings support for compiler flags in generated Package.swift (#8448) (0bd0676)
  • cli: add system framework and weak framework support in SPM Package.swift (#8447) (3232f0f)
  • cli: correct Capacitor plugin SPM compat check (#8440) (e5ccc45)
  • cli: generate binaryTarget entries for custom xcframeworks in Package.swift (#8445) (1f7e33f)
  • cli: generate resource entries in Package.swift (#8455) (790bd27)
  • cli: handle Cordova plugins without iOS source files (#8443) (0da130e)
  • cli: link plugin dependencies in Package.swift (#8457) (b3c769e)
  • ios: support Cordova plugins with Package.swift (#8438) (139943b)
  • SystemBars: avoid extra view padding on API <= 34 (#8439) (5b135a7)

... (truncated)

Changelog

Sourced from @​capacitor/cli's changelog.

8.4.0 (2026-06-02)

Bug Fixes

  • android: show only the requested system bar (#8480) (4c6c321)
  • cli: revert live reload config on failure (#8485) (1d031a4)
  • SystemBars: make safe-area-inset-x available on API <= 34 (#8424) (e456de0)
  • SystemBars: respect insetsHandling disable (#8481) (d4ad7ff)

Features

8.3.4 (2026-05-12)

Note: Version bump only for package capacitor

8.3.3 (2026-05-08)

Bug Fixes

  • cli: copy plugin files in CocoaPods projects (#8467) (b2d7719)

8.3.2 (2026-05-07)

Bug Fixes

  • cli: add cSettings support for compiler flags in generated Package.swift (#8448) (0bd0676)
  • cli: add system framework and weak framework support in SPM Package.swift (#8447) (3232f0f)
  • cli: correct Capacitor plugin SPM compat check (#8440) (e5ccc45)
  • cli: generate binaryTarget entries for custom xcframeworks in Package.swift (#8445) (1f7e33f)
  • cli: generate resource entries in Package.swift (#8455) (790bd27)
  • cli: handle Cordova plugins without iOS source files (#8443) (0da130e)
  • cli: link plugin dependencies in Package.swift (#8457) (b3c769e)
  • ios: support Cordova plugins with Package.swift (#8438) (139943b)
  • SystemBars: avoid extra view padding on API <= 34 (#8439) (5b135a7)

8.3.1 (2026-04-16)

Bug Fixes

  • android: handle null versionName in isNewBinary() (#8397) (aa1a660)
  • boundary value extraction for form-data requests (#7518) (64ab854)
  • cli: check CAPACITOR_COCOAPODS_PATH in determinePackageManager (#8407) (acb64ab)
  • system-bars: use separate current styles (#8409) (3d1f8d1)

8.3.0 (2026-03-25)

... (truncated)

Commits
  • 41fd9de Release 8.4.0
  • 36b729d chore: Decrease timeout for CI jobs from 60 to 30 minutes (#8476)
  • 4c6c321 fix(android): show only the requested system bar (#8480)
  • d4ad7ff fix(SystemBars): respect insetsHandling disable (#8481)
  • f1077ef chore: fix typo in declarations.ts (#8488)
  • 1d031a4 fix(cli): revert live reload config on failure (#8485)
  • b4b297a feat(cli): capture ios_package_manager in telemetry (#8482)
  • 258867b feat(cli): add experimental packageOptions (#8471)
  • e456de0 fix(SystemBars): make safe-area-inset-x available on API <= 34 (#8424)
  • 93c72de feat: add method getDouble to plugin config (#7638)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by capacitor-plugin-bot, a new releaser for @​capacitor/cli since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.16 and updates ancestor dependencies [tar](https://github.com/isaacs/node-tar), [@angular/cli](https://github.com/angular/angular-cli) and [@capacitor/cli](https://github.com/ionic-team/capacitor). These dependencies need to be updated together.


Updates `tar` from 6.2.0 to 7.5.16
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.0...v7.5.16)

Updates `@angular/cli` from 16.2.9 to 22.0.3
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.9...v22.0.3)

Updates `@capacitor/cli` from 5.6.0 to 8.4.0
- [Release notes](https://github.com/ionic-team/capacitor/releases)
- [Changelog](https://github.com/ionic-team/capacitor/blob/main/CHANGELOG.md)
- [Commits](ionic-team/capacitor@5.6.0...8.4.0)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: indirect
- dependency-name: "@angular/cli"
  dependency-version: 22.0.3
  dependency-type: direct:development
- dependency-name: "@capacitor/cli"
  dependency-version: 8.4.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants