Skip to content

Bump tar from 0.4.44 to 0.4.45#4

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/tar-0.4.45
Closed

Bump tar from 0.4.44 to 0.4.45#4
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/cargo/tar-0.4.45

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026

Bumps tar from 0.4.44 to 0.4.45.

Commits
  • 096e3d1 Bump to 0.4.45 (#443)
  • 17b1fd8 archive: Prevent symlink-directory collision chmod attack (#442)
  • de1a587 archive: Unconditionally honor PAX size (#441)
  • 6071cbe ci: Consolidate workflows (#439)
  • ad1fde9 build-sys: Promote unused_code to an error
  • c8cb250 tests: Squash a warning
  • 638c495 ci: Add xtask infra + reverse dependency testing (#435)
  • 32a9bbb tests: Add RandomReader to exercise partial-read resilience (#436)
  • 9c5df0b Fix GNU long-name extension stream corruption on validation error (#434)
  • 88b1e3b Fix docs typo in header.rs (#431)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 30, 2026
FrogSnot added a commit that referenced this pull request Apr 8, 2026
Dependencies updated:
- rand 0.8 -> 0.10 (thread_rng() -> rng(), RngCore -> Rng)
- indicatif 0.17 -> 0.18
- criterion 0.5 -> 0.8 (black_box -> std::hint::black_box)
- sha2 0.10 -> 0.11
- libc 0.2.182 -> 0.2.184
- tar 0.4.44 -> 0.4.45
- clap 4.5.60 -> 4.6.0
- tempfile 3.26.0 -> 3.27.0

Code changes:
- Migrate rand API (5 call sites across engine, archive, tests, benches)
- Fix clippy::needless_borrows_for_generic_args in tests
- Use std::hint::black_box instead of deprecated criterion::black_box
- Update README rand references

Closes #1, #2, #3, #4, #5, #7, #9, #11, #12, #13
Supersedes #6 (replaced by #12)
Bumps [tar](https://github.com/alexcrichton/tar-rs) from 0.4.44 to 0.4.45.
- [Commits](alexcrichton/tar-rs@0.4.44...0.4.45)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 0.4.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/cargo/tar-0.4.45 branch from 0a16714 to 8c23d82 Compare April 8, 2026 22:41
@FrogSnot
Copy link
Copy Markdown
Owner

FrogSnot commented Apr 8, 2026

Included in v1.0.3.

@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Apr 8, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot Bot deleted the dependabot/cargo/tar-0.4.45 branch April 8, 2026 22:43
FrogSnot added a commit that referenced this pull request Apr 8, 2026
Dependencies updated:
- rand 0.8 -> 0.10 (thread_rng() -> rng(), RngCore -> Rng)
- indicatif 0.17 -> 0.18
- criterion 0.5 -> 0.8 (black_box -> std::hint::black_box)
- sha2 0.10 -> 0.11
- libc 0.2.182 -> 0.2.184
- tar 0.4.44 -> 0.4.45
- clap 4.5.60 -> 4.6.0
- tempfile 3.26.0 -> 3.27.0

Code changes:
- Migrate rand API (5 call sites across engine, archive, tests, benches)
- Fix clippy::needless_borrows_for_generic_args in tests
- Use std::hint::black_box instead of deprecated criterion::black_box
- Update README rand references

Closes #1, #2, #3, #4, #5, #7, #9, #11, #12, #13
Supersedes #6 (replaced by #12)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant