Skip to content

deps: bump the dependency-updates group across 1 directory with 13 updates - #2019

Open
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependency-updates-d8914a3214
Open

deps: bump the dependency-updates group across 1 directory with 13 updates#2019
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/dependency-updates-d8914a3214

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependency-updates group with 13 updates in the / directory:

Package From To
@octokit/plugin-retry 8.1.0 8.1.1
@octokit/plugin-throttling 11.0.3 11.0.5
@primer/octicons-react 19.28.1 19.33.0
@primer/react 38.27.0 38.35.0
downshift 9.3.6 9.4.0
fuse.js 7.4.2 7.5.0
postcss 8.5.15 8.5.26
@npmcli/template-oss 5.1.0 5.1.1
eslint-plugin-github 6.0.0 6.1.2
prettier 3.8.3 3.9.6
minimatch 10.2.5 10.2.6
semver 7.8.2 7.8.5
tar 7.5.20 7.5.22

Updates @octokit/plugin-retry from 8.1.0 to 8.1.1

Release notes

Sourced from @​octokit/plugin-retry's releases.

v8.1.1

8.1.1 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#685) (a323a9a)
Commits
  • ed95dae ci(action): update actions/checkout action to v7 (#680)
  • a323a9a fix(deps): update dependency @​octokit/types to v17 (#685)
  • 944c701 ci(action): update actions/setup-node action to v7 (#682)
  • 3a4e3d0 build(deps): lock file maintenance (#684)
  • bae11ba build(deps): lock file maintenance (#679)
  • 433e259 chore(deps): update dependency esbuild to ^0.28.0 [security] (#678)
  • 03ed096 build(deps): lock file maintenance (#669)
  • 5a0d924 build(deps): lock file maintenance (#664)
  • f8773e4 tests: correct the errorRequest tests due not testing the right thing (#662)
  • 4447fd3 chore(deps): update dependency esbuild to ^0.27.0 (#652)
  • Additional commits viewable in compare view

Updates @octokit/plugin-throttling from 11.0.3 to 11.0.5

Release notes

Sourced from @​octokit/plugin-throttling's releases.

v11.0.5

11.0.5 (2026-08-01)

Bug Fixes

  • deps: update dependency @​octokit/types to v17 (#860) (4859cd1)

v11.0.4

11.0.4 (2026-08-01)

Bug Fixes

  • defer Bottleneck instantiation until first request (CF Workers compat) (#850) (d711c52)
Commits
  • 54030a4 ci(action): update actions/setup-node action to v7 (#857)
  • 4859cd1 fix(deps): update dependency @​octokit/types to v17 (#860)
  • d711c52 fix: defer Bottleneck instantiation until first request (CF Workers compat) (...
  • 003e302 chore(deps): update dependency typescript to v7 (#856)
  • d218863 build(deps): lock file maintenance (#859)
  • 0c6f81f build(deps): lock file maintenance (#853)
  • e064466 chore(deps): update dependency esbuild to ^0.28.0 [security] (#852)
  • cb71e45 build(deps): lock file maintenance (#841)
  • 1a64804 build(deps-dev): bump lodash-es from 4.17.23 to 4.18.1 (#835)
  • 07c8297 build(deps): lock file maintenance (#833)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​octokit/plugin-throttling since your current version.


Updates @primer/octicons-react from 19.28.1 to 19.33.0

Release notes

Sourced from @​primer/octicons-react's releases.

v19.33.0

Minor Changes

v19.32.0

Minor Changes

  • #1286 917ad7a8 Thanks @​joshblack! - Add default exports to per-icon @primer/octicons-react subpath modules (e.g. @primer/octicons-react/AlertIcon), alongside the existing named exports. Root/barrel APIs remain named-only.

Patch Changes

Minor Changes

  • #1260 456fea25 Thanks @​copilot-swe-agent! - Add default exports to per-icon @primer/octicons-react subpath modules (e.g. @primer/octicons-react/AlertIcon), alongside the existing named exports. Root/barrel APIs remain named-only.

v19.31.0

Minor Changes

v19.30.0

Minor Changes

  • #1245 b6bfb8bd Thanks @​copilot-swe-agent! - Optimize @primer/octicons-react for codesplitting and tree-shaking. Each icon is now emitted as its own module and exposed via a ./* subpath export, so icons can be dynamically imported and code-split (e.g. import('@primer/octicons-react/AlertIcon')). The generated icons are now finished React.forwardRef components built on a shared renderOcticon runtime instead of runtime createIconComponent factory calls. Existing import {AlertIcon} and import * as Octicons usage continues to work unchanged.

v19.29.2

Patch Changes

v19.29.1

Patch Changes

v19.29.0

Minor Changes

Changelog

Sourced from @​primer/octicons-react's changelog.

Changelog

19.31.0

Minor Changes

19.30.0

Minor Changes

  • #1245 b6bfb8bd Thanks @​copilot-swe-agent! - Optimize @primer/octicons-react for codesplitting and tree-shaking. Each icon is now emitted as its own module and exposed via a ./* subpath export, so icons can be dynamically imported and code-split (e.g. import('@primer/octicons-react/AlertIcon')). The generated icons are now finished React.forwardRef components built on a shared renderOcticon runtime instead of runtime createIconComponent factory calls. Existing import {AlertIcon} and import * as Octicons usage continues to work unchanged.

19.29.2

Patch Changes

19.29.1

Patch Changes

19.29.0

Minor Changes

Commits

Updates @primer/react from 38.27.0 to 38.35.0

Release notes

Sourced from @​primer/react's releases.

@​primer/react@​38.35.0

Minor Changes

@​primer/react@​38.34.0

Minor Changes

  • #8086 81d4174 Thanks @​TylerJDev! - Add a hideDivider prop to NavList.Group so consumers can opt out of rendering the divider before a group.

Patch Changes

  • #8211 a3e669f Thanks @​francinelucca! - Link: Remove unnecessary data-hover-color attribute from rendered DOM element

  • #8196 e24effd Thanks @​liuliu-dev! - Use aria-pressed instead of aria-current on SegmentedControl.Button and SegmentedControl.IconButton so JAWS announces the selected state when a segment is activated.

  • #8169 1d6f559 Thanks @​liuliu-dev! - Timeline: Timeline.Actions now wraps onto a new row below Timeline.Body, left-aligned with the body content, when Timeline.Item is narrower than 480px.

  • #8214 41705f4 Thanks @​rickyzhangca! - UnderlinePanels: The experimental UnderlinePanels component is now built on the experimental Tabs component instead of @github/tab-container-element. Its public API and behavior are unchanged.

@​primer/react@​38.33.0

Minor Changes

  • #8160 f8e7cf2 Thanks @​TylerJDev! - PageLayout: Export the resize primitives usePaneWidth and DragHandle (with defaultPaneWidth and related types) so pane-resize behavior can be reused outside of PageLayout.

Patch Changes

  • #8064 eb447fe Thanks @​copilot-swe-agent! - Update the ActionBar overflow menu anchor label to More items

  • #8166 4045abe Thanks @​mattcosta7! - Add contain: layout to high-churn overflow containers (ActionBar, UnderlineNav, UnderlinePanels, and LabelGroup) so their frequent reflows no longer invalidate ancestor layout.

  • #8176 f061bc4 Thanks @​francinelucca! - FeatureFlags: Guard against missing context in useFeatureFlag so it returns false instead of throwing when used outside a provider

  • #8188 2a67c19 Thanks @​iansan5653! - Fix UnderlineNav items all being considered overflowing on Safari with text size overrides

  • #8116 cade4af Thanks @​mattcosta7! - useAnchoredPosition: improve performance by caching the scrollable-ancestor walk per anchor, reducing repositioning work for overlays, menus, and tooltips.

  • #8164 f86e5a6 Thanks @​jonrohan! - Fix UnderlineNav tab list not filling the full width of the underline nav in Safari

  • #8165 d60d05b Thanks @​jonrohan! - Pin the underline tabbed interface wrapper's vertical box model in wrap mode so external border and padding overrides can no longer offset its height and incorrectly trigger the overflow "more" menu

@​primer/react@​38.32.0

Minor Changes

  • #8133 0cb8e17 Thanks @​iansan5653! - UnderlineNav: Replaced dynamic icon visibility with static breakpoints to avoid flickering. Breakpoints customizable via the hideIconsBreakpoint prop.

  • #8112 50face0 Thanks @​llastflowers! - Add data-component attributes and associated tests for:

    SplitPageLayout Stack

... (truncated)

Commits
  • db0495e Release tracking (#8251)
  • da3df9a Add default Esc-to-dismiss support to Popover component (#8253)
  • 2cbe47d Update MCP server to SDK v2 (#8249)
  • 9e1e598 Release tracking (#8235)
  • f787233 chore(deps-dev): bump rolldown from 1.1.5 to 1.2.0 in the rolldown group (#8244)
  • a04584e chore(deps-dev): bump the storybook group with 6 updates (#8245)
  • 621b9d7 chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#8242)
  • 857601d chore(deps): bump github/codeql-action from 4.37.0 to 4.37.2 (#8241)
  • ac1800c chore(deps-dev): bump eslint-plugin-storybook from 10.5.0 to 10.5.3 in the es...
  • ac25137 Document the modular DS model as skills (#8113)
  • Additional commits viewable in compare view

Updates downshift from 9.3.6 to 9.4.0

Release notes

Sourced from downshift's releases.

v9.4.0

9.4.0 (2026-06-30)

Features

Commits

Updates fuse.js from 7.4.2 to 7.5.0

Release notes

Sourced from fuse.js's releases.

v7.5.0

⚠️ Behavior changes

Every change in this release is a bug fix, but each one corrects a scoring or ranking bug. Scores and result ordering will shift for some queries. That is why this ships as a minor rather than a patch: the public API is unchanged and upgrading is a drop-in, but the results you get back can differ, and that should not arrive silently in a patch bump.

If you assert on exact score values or on a specific result order, expect those assertions to need updating. Re-baseline them against 7.5.0 rather than pinning to 7.4.x, since the 7.4.x behavior was wrong in the cases below.

  • Field-length normalisation now counts words correctly. Tabs and newlines were not treated as word separators, so a multi-line or tab-delimited field was scored as though it were one long word, making it look far shorter than it is. Fields containing \t, \n, or \r now score differently (#830).
  • Key weights are now normalised in object and keyless-logical search. Weights that did not sum to 1 were applied unnormalised, skewing the relative influence of each key. If your keys weights do not already sum to 1, your relative ranking changes (#833).
  • limit now returns the correct top-N when scores tie. A tie at the cutoff boundary could evict a result that should have been kept, so limit could return the wrong items, not merely the right items in a different order (#835).
  • Bitap respects minMatchCharLength in the exact-match shortcut. Matches shorter than minMatchCharLength were still reported via the exact-match fast path, so the matches array could contain entries it was configured to exclude (#831).

Bug Fixes

  • bitap: respect minMatchCharLength in exact-match shortcut (dbb98b6), closes #831
  • fieldNorm: count tabs and newlines as word separators (6fe85b0), closes #830
  • fieldNorm: count word-starts instead of space transitions (2946f97)
  • scoring: normalise key weights in object and keyless-logical search (e164b61), closes #833
  • search: keep the correct top-N under limit when scores tie (437f8f3), closes #835, thanks @​spokodev for the report and the fix

Full Changelog: krisk/Fuse@v7.4.2...v7.5.0

Changelog

Sourced from fuse.js's changelog.

7.5.0 (2026-07-13)

⚠️ Behavior changes

Every change in this release is a bug fix, but each one corrects a scoring or ranking bug. Scores and result ordering will shift for some queries. That is why this ships as a minor rather than a patch: the public API is unchanged and upgrading is a drop-in, but the results you get back can differ, and that should not arrive silently in a patch bump.

If you assert on exact score values or on a specific result order, expect those assertions to need updating. Re-baseline them against 7.5.0 rather than pinning to 7.4.x, since the 7.4.x behavior was wrong in the cases below.

  • Field-length normalisation now counts words correctly. Tabs and newlines were not treated as word separators, so a multi-line or tab-delimited field was scored as though it were one long word, making it look far shorter than it is. Fields containing \t, \n, or \r now score differently (#830).
  • Key weights are now normalised in object and keyless-logical search. Weights that did not sum to 1 were applied unnormalised, skewing the relative influence of each key. If your keys weights do not already sum to 1, your relative ranking changes (#833).
  • limit now returns the correct top-N when scores tie. A tie at the cutoff boundary could evict a result that should have been kept, so limit could return the wrong items, not merely the right items in a different order (#835).
  • Bitap respects minMatchCharLength in the exact-match shortcut. Matches shorter than minMatchCharLength were still reported via the exact-match fast path, so the matches array could contain entries it was configured to exclude (#831).

Bug Fixes

  • bitap: respect minMatchCharLength in exact-match shortcut (dbb98b6), closes #831
  • fieldNorm: count tabs and newlines as word separators (6fe85b0), closes #830
  • fieldNorm: count word-starts instead of space transitions (2946f97)
  • scoring: normalise key weights in object and keyless-logical search (e164b61), closes #833
  • search: keep the correct top-N under limit when scores tie (437f8f3), closes #835, thanks @​spokodev for the report and the fix
Commits
  • 45bac9f chore(release): 7.5.0
  • 437f8f3 fix(search): keep the correct top-N under limit when scores tie
  • b8142cf test(fieldNorm): cover full separator set; narrow "any whitespace" comment
  • 6fe85b0 fix(fieldNorm): count tabs and newlines as word separators
  • e164b61 fix(scoring): normalise key weights in object and keyless-logical search
  • dbb98b6 fix(bitap): respect minMatchCharLength in exact-match shortcut
  • e2ee793 chore: rebuild dist for #830 (fieldNorm whitespace fix)
  • 2946f97 fix(fieldNorm): count word-starts instead of space transitions
  • 2fadbfa chore: bump doc versions to 7.4.2
  • See full diff in compare view

Updates postcss from 8.5.15 to 8.5.26

Release notes

Sourced from postcss's releases.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

Changelog

Sourced from postcss's changelog.

8.5.26

  • Fixed list.split() regression (by @​lazerg).
  • Track symlinks in path protection in source map loading (by @​drengir1).

8.5.25

  • Fixed 8.5.17 visitor regression.
  • Fixed list.split() for non-string values (by @​amir-rezaei).

8.5.24

  • Preserve the BOM after the processing (by @​hdimer).

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).

8.5.16

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for postcss since your current version.


Updates @npmcli/template-oss from 5.1.0 to 5.1.1

Release notes

Sourced from @​npmcli/template-oss's releases.

v5.1.1

5.1.1 (2026-06-16)

Dependencies

Changelog

Sourced from @​npmcli/template-oss's changelog.

5.1.1 (2026-06-16)

Dependencies

Commits

Updates eslint-plugin-github from 6.0.0 to 6.1.2

Release notes

Sourced from eslint-plugin-github's releases.

v6.1.2

What's Changed

Full Changelog: github/eslint-plugin-github@v6.1.1...v6.1.2

v6.1.1

Fixed

  • jsx-a11y recommended rules are now correctly applied in the flat React config. Previously, lib/configs/flat/react.js spread jsx-a11y's recommended config but then redefined its own rules object, which shallow-overwrote and silently dropped most of the recommended rule set — leaving only a handful of rules active. The recommended rules are now explicitly merged, so the full jsx-a11y/recommended baseline is enforced while GitHub-specific overrides are preserved.

v6.1.0

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat

v6.1.0-alpha

  • Expanded supported ESLint peer range Changed peerDependencies from ^8 || ^9 to ^8 || ^9 || ^10
  • Fixed flat recommended plugin wiring for compatibility Wrapped eslint-plugin-eslint-comments with @​eslint/compat
Commits
  • 03bfb7d Merge pull request #726 from github/gp/upgrade-dep
  • d66f3e8 upgrade deps
  • 259c9e1 chore(deps-dev): bump the npm_and_yarn group across 1 directory with 2 update...
  • a95d9e7 chore(deps): resolve npm audit vulnerabilities (#720)
  • add7174 chore(deps): bump actions/setup-node from 6.4.0 to 7.0.0 (#718)
  • 7a5567b Merge pull request #715 from github/alaingoga/714-adding-jsxA11y-plugin-suppo...
  • fa8eeb1 714 - Adding jsxA11y plugin support back
  • 3611a16 Merge pull request #713 from github/alaingoga/eslint10-compact
  • fe11575 Support ESLint 10: widen peer range and fix eslint-comments in flat recommend...
  • 2dcfb60 Merge pull request #706 from github/dependabot/npm_and_yarn/all-dependencies-...
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-github since your current version.


Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Adde...

Description has been truncated

@dependabot
deps: bump the dependency-updates group across 1 directory with 13 up…
2389b33 
…dates

Bumps the dependency-updates group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@octokit/plugin-retry](https://github.com/octokit/plugin-retry.js) | `8.1.0` | `8.1.1` |
| [@octokit/plugin-throttling](https://github.com/octokit/plugin-throttling.js) | `11.0.3` | `11.0.5` |
| [@primer/octicons-react](https://github.com/primer/octicons) | `19.28.1` | `19.33.0` |
| [@primer/react](https://github.com/primer/react) | `38.27.0` | `38.35.0` |
| [downshift](https://github.com/downshift-js/downshift) | `9.3.6` | `9.4.0` |
| [fuse.js](https://github.com/krisk/Fuse) | `7.4.2` | `7.5.0` |
| [postcss](https://github.com/postcss/postcss) | `8.5.15` | `8.5.26` |
| [@npmcli/template-oss](https://github.com/npm/template-oss) | `5.1.0` | `5.1.1` |
| [eslint-plugin-github](https://github.com/github/eslint-plugin-github) | `6.0.0` | `6.1.2` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |
| [minimatch](https://github.com/isaacs/minimatch) | `10.2.5` | `10.2.6` |
| [semver](https://github.com/npm/node-semver) | `7.8.2` | `7.8.5` |
| [tar](https://github.com/isaacs/node-tar) | `7.5.20` | `7.5.22` |



Updates `@octokit/plugin-retry` from 8.1.0 to 8.1.1
- [Release notes](https://github.com/octokit/plugin-retry.js/releases)
- [Commits](octokit/plugin-retry.js@v8.1.0...v8.1.1)

Updates `@octokit/plugin-throttling` from 11.0.3 to 11.0.5
- [Release notes](https://github.com/octokit/plugin-throttling.js/releases)
- [Commits](octokit/plugin-throttling.js@v11.0.3...v11.0.5)

Updates `@primer/octicons-react` from 19.28.1 to 19.33.0
- [Release notes](https://github.com/primer/octicons/releases)
- [Changelog](https://github.com/primer/octicons/blob/main/CHANGELOG.md)
- [Commits](primer/octicons@v19.28.1...v19.33.0)

Updates `@primer/react` from 38.27.0 to 38.35.0
- [Release notes](https://github.com/primer/react/releases)
- [Commits](https://github.com/primer/react/compare/@primer/react@38.27.0...@primer/react@38.35.0)

Updates `downshift` from 9.3.6 to 9.4.0
- [Release notes](https://github.com/downshift-js/downshift/releases)
- [Changelog](https://github.com/downshift-js/downshift/blob/master/CHANGELOG.md)
- [Commits](downshift-js/downshift@v9.3.6...v9.4.0)

Updates `fuse.js` from 7.4.2 to 7.5.0
- [Release notes](https://github.com/krisk/Fuse/releases)
- [Changelog](https://github.com/krisk/Fuse/blob/main/CHANGELOG.md)
- [Commits](krisk/Fuse@v7.4.2...v7.5.0)

Updates `postcss` from 8.5.15 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.15...8.5.26)

Updates `@npmcli/template-oss` from 5.1.0 to 5.1.1
- [Release notes](https://github.com/npm/template-oss/releases)
- [Changelog](https://github.com/npm/template-oss/blob/main/CHANGELOG.md)
- [Commits](npm/template-oss@v5.1.0...v5.1.1)

Updates `eslint-plugin-github` from 6.0.0 to 6.1.2
- [Release notes](https://github.com/github/eslint-plugin-github/releases)
- [Commits](github/eslint-plugin-github@v6.0.0...v6.1.2)

Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `minimatch` from 10.2.5 to 10.2.6
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v10.2.5...v10.2.6)

Updates `semver` from 7.8.2 to 7.8.5
- [Release notes](https://github.com/npm/node-semver/releases)
- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)
- [Commits](npm/node-semver@v7.8.2...v7.8.5)

Updates `tar` from 7.5.20 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.20...v7.5.22)

---
updated-dependencies:
- dependency-name: "@octokit/plugin-retry"
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: "@octokit/plugin-throttling"
  dependency-version: 11.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: "@primer/octicons-react"
  dependency-version: 19.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: "@primer/react"
  dependency-version: 38.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: downshift
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: fuse.js
  dependency-version: 7.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: postcss
  dependency-version: 8.5.26
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: "@npmcli/template-oss"
  dependency-version: 5.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: eslint-plugin-github
  dependency-version: 6.1.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependency-updates
- dependency-name: minimatch
  dependency-version: 10.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: semver
  dependency-version: 7.8.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependency-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Aug 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 10, 2026 05:37
@dependabot dependabot Bot added the Dependencies Pull requests that update a dependency file label Aug 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@npm-cli-bot