Skip to content

build(deps): bump tar from 0.4.44 to 0.4.46 - #30

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tar-0.4.46
Open

build(deps): bump tar from 0.4.44 to 0.4.46#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/cargo/tar-0.4.46

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown

Bumps tar from 0.4.44 to 0.4.46.

Release notes

Sourced from tar's releases.

0.4.46

Security

See also GHSA-3cv2-h65g-fgmm

Other changes

New Contributors

Full Changelog: composefs/tar-rs@0.4.45...0.4.46

Commits
  • fc459c1 Release 0.4.46
  • 43e05a8 ci: Add crates.io trusted publishing workflow
  • bba5666 Update repo links
  • cd94c46 docs: Document TOCTOU / concurrent-mutation threat model
  • 1b4997c builder: Expand docs for follow_symlinks and append_dir_all
  • bab14dd archive: Fix another PAX header desync (GHSA-3cv2-h65g-fgmm)
  • 2349b49 Add support of absolute paths
  • 39d0311 Update some links
  • 59d803e Update astral-tokio-tar requirement from 0.5 to 0.6
  • 8296b9a ci: Fix and re-enable reverse dependency testing (#444)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file rust Pull requests that update rust code labels Jul 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tar-0.4.46 branch from f368ae8 to 2277c58 Compare July 22, 2026 16:12
@dependabot dependabot Bot changed the title build(deps): bump tar from 0.4.44 to 0.4.46 build(deps): Bump tar from 0.4.44 to 0.4.46 Jul 25, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tar-0.4.46 branch from 2277c58 to eff0c33 Compare July 25, 2026 22:36
@dependabot dependabot Bot changed the title build(deps): Bump tar from 0.4.44 to 0.4.46 build(deps): bump tar from 0.4.44 to 0.4.46 Jul 27, 2026
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tar-0.4.46 branch from eff0c33 to 22c4e0a Compare July 27, 2026 15:03
Bumps [tar](https://github.com/composefs/tar-rs) from 0.4.44 to 0.4.46.
- [Release notes](https://github.com/composefs/tar-rs/releases)
- [Commits](composefs/tar-rs@0.4.44...0.4.46)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 0.4.46
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/tar-0.4.46 branch from 22c4e0a to 6d9b932 Compare July 28, 2026 15:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file rust Pull requests that update rust code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants