fix(deps): update dependency modern-tar to ^0.8.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
modern-tar	^0.7.5 → ^0.8.0

---

Release Notes

ayuhito/modern-tar (modern-tar)

v0.8.0

Compare Source

Overview

Type cleanups and helper removals for correctness and a smaller web bundle. Additionally improves older Safari browser compatibility 🌊

Breaking Changes❗

• Removed createGzipEncoder and createGzipDecoder web helpers in favor of native CompressionStream and DecompressionStream.
  • See README documentation for examples.
• Changed createTarDecoder() to return a ReadableWritablePair instead of TransformStream.
  • This is a type correctness fix and should not affect usage.
• Narrowed packTar() results, createTarPacker().readable, and ParsedTarEntryWithData.data from Uint8Array to Uint8Array<ArrayBuffer>.

What's Changed

• perf(tar): skip zero-block scan for normal headers by @​ayuhito in #​161
• feat!: use native compression streams by @​ayuhito in #​162

Full Changelog: ayuhito/modern-tar@v0.7.7...v0.8.0

v0.7.7

Compare Source

Overview

A variety of bugs and security fixes, while making buffered web unpacking up to 3× faster ☘️

• fix(path): replace pre-existing link leaves without following them by @​ayuhito in #​134
• perf(web): skip redundant buffer allocation by @​ayuhito in #​135
• perf(pax): use flag for header check by @​ayuhito in #​136
• fix(fs): harden pack against source swaps by @​ayuhito in #​137
• fix(fs): snapshot caller pack sources by @​ayuhito in #​138
• fix(fs): validate symlink graph after extraction by @​ayuhito in #​139
• fix(fs): reject symlink graph follow overflow by @​ayuhito in #​140
• fix(fs): harden unpack parent races by @​ayuhito in #​141
• perf(web): speed up buffered unpack by @​ayuhito in #​142
• fix(fs): reject symlink hardlink targets by @​ayuhito in #​144
• fix(pax): cap tar metadata entries by @​ayuhito in #​143
• fix: preserve equals signs in PAX values by @​ayuhito in #​145
• fix(fs): prevent symlink parent races by @​ayuhito in #​146
• fix(fs): validate symlinks against destination state by @​ayuhito in #​149
• fix: preserve tar entry boundaries with PAX metadata by @​ayuhito in #​150
• fix(fs): prevent directory packing readdir race by @​ayuhito in #​147
• fix(fs): preserve unicode path spelling by @​ayuhito in #​151
• fix(fs): restore concurrent file opens during unpack by @​ayuhito in #​152
• perf(fs): avoid redundant pack file operations by @​ayuhito in #​153
• perf(fs): streamline hardlink finalization by @​ayuhito in #​154
• perf(fs): reduce symlink validation overhead by @​ayuhito in #​155
• perf(fs): validate symlinks concurrently by @​ayuhito in #​156
• perf(fs): overlap hardlink finalization reads by @​ayuhito in #​157
• fix: prevent malformed pax record hangs by @​ayuhito in #​159
• chore: upgrade dependencies by @​ayuhito in #​158

Full Changelog: ayuhito/modern-tar@v0.7.6...v0.7.7

v0.7.6

Compare Source

Overview

Resolves issues with unpacking hanging in Cloudflare Workers, unicode path handing and various security fixes ☁️

• fix(pax): Fix filename length checking logic by @​simnalamburt in #​121
• fix(web): respect backpressure in main loop by @​ayuhito in #​122
• fix(unpacker): prevent 32 bit overflow on meta header sizes by @​ayuhito in #​123
• perf(web): increase highwatermark for unpacker by @​ayuhito in #​124
• fix(fs): use actual filepath on filter over target by @​ayuhito in #​125
• fix(ustar): add size guard to prevent unnecessary split checks by @​ayuhito in #​126
• fix(pack): add number boundary checks to size by @​ayuhito in #​127
• fix(fs): remove bounded cache on path conflicts by @​ayuhito in #​128
• fix(web): switch unpack from transform stream to readable writable pair by @​ayuhito in #​130
• fix(fs): prevent file sink from following a symlink on unpack by @​ayuhito in #​131
• chore: upgrade dependencies by @​ayuhito in #​132

New Contributors

• @​simnalamburt made their first contribution in #​121

Full Changelog: ayuhito/modern-tar@v0.7.5...v0.7.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

📊 Benchmark results

Comparing with db9b010

• Dependency count: 1,159 (no change)
• Package size: 404 MB ⬆️ 0.00% increase vs. db9b010
• Number of ts-expect-error directives: 358 (no change)

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.