Skip to content

build(deps): bump tar and opensheetmusicdisplay in /frontend#368

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-834990133b
Open

build(deps): bump tar and opensheetmusicdisplay in /frontend#368
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/multi-834990133b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 19, 2026

Copy link
Copy Markdown
Contributor

Bumps tar to 7.5.16 and updates ancestor dependency opensheetmusicdisplay. These dependencies need to be updated together.

Updates tar from 7.5.11 to 7.5.16

Commits
  • cf21338 7.5.16
  • 21a8220 do not apply PAX header fields to meta entries
  • 52632cf update project deps
  • 302f51f fix inconsequential typo in PENDINGLINKS symbol name
  • 55dbb99 remove some uses of mutate-fs
  • 87cc309 7.5.15
  • 7aef486 fix: regression in pending links detection
  • 6244eb3 7.5.14
  • 9704d8c stricter protection against hardlinks preempting their targets
  • 700734f update workflows and deps
  • Additional commits viewable in compare view

Updates opensheetmusicdisplay from 1.9.7 to 1.9.9

Release notes

Sourced from opensheetmusicdisplay's releases.

1.9.9

See Changelog:

1.9.9 (2026-05-05)

Bug Fixes

  • Lyrics: Fix lyrics overlap for pickup measure / last note in measure with dash that's part of a multi-syllable word (PR #1672, #1659) (7833778)

Misc

  • Npm Audit: gl bumped to ^9.0.0-rc.10, should remove npm audit warning for tar (even though the released package doesn't use gl anyways, it's an optional devDependency) (18c3544)

1.9.8

See Changelog:

1.9.8 (2026-05-04)

Bug Fixes

  • Cursor: Fix multi-movement pieces not isolating repetitions between movements, affecting cursor movement for repetitions in later movements (ef19c11)
  • Lyrics: Fix error for old samples: noteDuration NaN when MusicXML exporter places divisions after first notes of measure, erroring in calculateLyricExtend (048d4a5)
  • Octave Bracket: Fix octave shift not applied to grace notes before stop direction (PR #1649) (c0f4a3f)
  • Wavy-Line: Fix a rare error with wavy-lines on certain screen widths for a sample where the end note could not be found (PR #1653, #657) (c758794)

Features

  • Metronome Mark: Implement swing metronome mark and other complex metronome marks (PR #1655, #1654) (742a0f6)
  • Migrate ESLint to v9/10 with flat config (needs node v20+) (#1662) (01cddff)
  • Wavy Line: Implement wavy-line (e.g. after trill) (merge from audio player) (PR #1653) (cde49c7), closes #1651
Changelog

Sourced from opensheetmusicdisplay's changelog.

1.9.9 (2026-05-05)

Bug Fixes

  • Lyrics: Fix lyrics overlap for pickup measure / last note in measure with dash that's part of a multi-syllable word (PR #1672, #1659) (7833778)

Misc

  • Npm Audit: gl bumped to ^9.0.0-rc.10, should remove npm audit warning for tar (even though the released package doesn't use gl anyways, it's an optional devDependency) (18c3544)

1.9.8 (2026-05-04)

Bug Fixes

  • Cursor: Fix multi-movement pieces not isolating repetitions between movements, affecting cursor movement for repetitions in later movements (ef19c11)
  • Lyrics: Fix error for old samples: noteDuration NaN when MusicXML exporter places divisions after first notes of measure, erroring in calculateLyricExtend (048d4a5)
  • Octave Bracket: Fix octave shift not applied to grace notes before stop direction (PR #1649) (c0f4a3f)
  • Wavy-Line: Fix a rare error with wavy-lines on certain screen widths for a sample where the end note could not be found (PR #1653, #657) (c758794)

Features

  • Metronome Mark: Implement swing metronome mark and other complex metronome marks (PR #1655, #1654) (742a0f6)
  • Migrate ESLint to v9/10 with flat config (needs node v20+) (#1662) (01cddff)
  • Wavy Line: Implement wavy-line (e.g. after trill) (merge from audio player) (PR #1653) (cde49c7), closes #1651
Commits
  • c03bcdf chore: update changelog for 1.9.9
  • 2e6391c chore: bump osmd version to 1.9.9
  • 7833778 fix(Lyrics): Fix lyrics overlap for pickup measure / last note in measure wit...
  • 7d3146c chore: remove travis CI setup. simplify publish_gh_page script: get latest ta...
  • 78b4a22 chore: remove @​types/minimatch dependency (It was loaded anyways as peer depe...
  • d6ee5b6 chore: bump jspdf to ^4.2.1 (better fallbacks for non-ASCII unicode character...
  • 93f3948 chore: bump ts-loader to ^9.5.7 (was already used)
  • 614edb4 chore: bump html-webpack-plugin to ^5.6.7 (was already used)
  • af2aea1 chore: bump karma-firefox-launcher to ^2.1.3
  • 2339bd1 chore: update eslint to v10. needs rm -rf node_modules/ for peer dependency r...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.16 and updates ancestor dependency [opensheetmusicdisplay](https://github.com/opensheetmusicdisplay/opensheetmusicdisplay). These dependencies need to be updated together.


Updates `tar` from 7.5.11 to 7.5.16
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.11...v7.5.16)

Updates `opensheetmusicdisplay` from 1.9.7 to 1.9.9
- [Release notes](https://github.com/opensheetmusicdisplay/opensheetmusicdisplay/releases)
- [Changelog](https://github.com/opensheetmusicdisplay/opensheetmusicdisplay/blob/develop/CHANGELOG.md)
- [Commits](opensheetmusicdisplay/opensheetmusicdisplay@1.9.7...1.9.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: indirect
- dependency-name: opensheetmusicdisplay
  dependency-version: 1.9.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 19, 2026
@github-actions

Copy link
Copy Markdown

AI Code Review - Skipped

The AI review step failed (likely an API key or quota issue). This is advisory only and does not affect CI status.

Check Actions for details.

@github-actions

Copy link
Copy Markdown

GPT AI Code Review - Skipped

The GPT review step failed (likely an API key or quota issue). This is advisory only and does not affect CI status.

Check Actions for details.

@codecov

codecov Bot commented Jun 19, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.50%. Comparing base (c47e555) to head (79a9cf1).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #368   +/-   ##
=======================================
  Coverage   94.50%   94.50%           
=======================================
  Files          22       22           
  Lines        1785     1785           
=======================================
  Hits         1687     1687           
  Misses         98       98           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants