Skip to content

chore(deps): bump tar and firebase-tools#140

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-36749cffcf
Open

chore(deps): bump tar and firebase-tools#140
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-36749cffcf

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 11, 2026

Bumps tar to 7.5.14 and updates ancestor dependency firebase-tools. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.14

Changelog

Sourced from tar's changelog.

Changelog

7.5

  • Added zstd compression support.
  • Consistent TOCTOU behavior in sync t.list
  • Only read from ustar block if not specified in Pax
  • Fix sync tar.list when file size reduces while reading
  • Sanitize absolute linkpaths properly
  • Prevent writing hardlink entries to the archive ahead of their file target

7.4

  • Deprecate onentry in favor of onReadEntry for clarity.

7.3

  • Add onWriteEntry option

7.2

  • DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

  • Update minipass to v7.1.0
  • Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

  • Drop support for node <18
  • Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
  • Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
  • Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
  • Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates firebase-tools from 13.10.0 to 15.16.0

Release notes

Sourced from firebase-tools's releases.

v15.16.0

  • Updated Firestore Emulator to v1.21.0, which adds support for subqueries and new stages like let(...), as well as allowing setting database-edition per-database.
  • Suppressed the 'punycode' deprecation warning during firebase deploy on Node 22. (#10385)
  • Fixed an issue where hosting deploy allowed publishing to a site in a different project. (#10376)
  • Added SSE mode support to firebase mcp. To use it, run firebase mcp --mode=sse --port=3000, and connect your client on http://localhost:3000.
  • Update the valid Python runtimes for functions. Default Python runtime is now Python 3.14.
  • Fix CLI non-interactive mode for dataconnect init (#10401)
  • Fixed issue where rules for non-default Firestore databases were not being deployed correctly.
  • Suppress SSR warning for non-SSR Angular projects on init hosting (#10364)
  • Updated the SQL Connect emulator to v3.4.6, including internal bug fixes (#10434)
  • Fix an issue where deploying multi-codebase functions failed due to a shared source token scraper (#10428)

v15.15.0

  • Add foundation for being smarter about where to place functions when the region is not specified (#10293)
  • Updated Pub/Sub emulator to version 0.8.30
  • Renamed Data Connect displayed text to SQL Connect (#10270)
  • Added support for the experimental Cloud Functions for Firebase Dart SDK behind the dartfunctions flag
  • Updated the SQL Connect emulator to v3.4.5, including internal bug fixes (#10336)

v15.14.0

  • Added Enterprise Edition support to the Firestore emulator. Configure it by setting firebase.json#firestore.edition or firebase.json#emulators.firestore.edition.
  • Fixed an issue where functions deployments would silently fail (#6989)
  • Fixed issue where the CLI isn't able to correctly parse command arguments on PowerShell (#7506)
  • Add support for Next.js 16 middleware (proxy.ts/proxy.js) (#9631)
  • Updates the default region for new App Hosting backends to us-east4 (#10271)
  • Fix Next.js image optimization detection in client components (#10228)
  • Updates Firebase Data Connect emulator to v3.4.1 (#10290)
    • Upgraded Go runtime to 1.25.9.
    • Bug fix: Fixed an issue that caused Angular SDK generation to fail.

v15.13.0

  • Add validation to check if backendId exists in firebase.json when --only flag is used. (#10161)
  • Updated default Postgres version for Data Connect to 18. (#10234)
  • Update Typescript version to v6 in templates for functions and extensions. (#10232)

v15.12.0

  • Moved MCP server firebase-debug.log to ~/.cache/firebase/firebase-debug.log. (#9982)
  • Added a prompt to firebase init to install Agent Skills for Firebase.
  • Updated the Firebase Data Connect local toolkit to v3.3.1, which includes the following changes: (#10190)
    • [added] Support for configuring client-side caching in connector.yaml / generate section

v15.11.0

  • Add support for dataAccessMode in Firestore database creation. This allows choosing between FIRESTORE_NATIVE and MONGODB_COMPATIBLE for Enterprise edition databases.
  • Updated Firestore Emulator to v1.20.4, which includes minor bug fixes for Firestore Native Mode.
  • Added apptesting:execute command to run App Testing agent tests from YAML files.
  • Updated Data Connect emulator to v3.3.0:
    • firebase dataconnect:sdk:generate now performs compilation check first before generating SDKs.
    • Updated the Golang dependency version from 1.24.13 to 1.25.8, which removes support for macOS versions prior to Monterey.
    • Prevent concurrent execution of operations. firebase/firebase-tools#9866
    • Support for skip and include directives.

... (truncated)

Commits
  • eed9c59 15.16.0
  • 0adfcaf fix: resolve default regions before matching endpoints and check all function...
  • 39e87a3 Update FDC emulator to v3.4.6 (#10434)
  • c8c5b54 Prompt for ABIU runtime settings when creating a backend from the "deploy" fl...
  • f4599b6 Fix shared scraper (#10432)
  • 8b08ef5 Correctly set attachment_point for rules deploy (#10425)
  • f2aa408 fix: detect @​angular/platform-server to determine if Angular project uses SSR...
  • f3f8d4e docs: fix URL of Firebase Agent Sklls in src/mcp/README.md (#10429)
  • 914d4fb feat(dart): update the template to use an analysis_options.yaml (#10421)
  • c4f26e6 Update Firestore Emulator to v1.21.0 (#10427)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 11, 2026
@Splaktar
Copy link
Copy Markdown
Member

Splaktar commented May 6, 2026

@dependabot rebase

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.14 and updates ancestor dependency [firebase-tools](https://github.com/firebase/firebase-tools). These dependencies need to be updated together.


Updates `tar` from 6.2.1 to 7.5.14
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v6.2.1...v7.5.14)

Updates `firebase-tools` from 13.10.0 to 15.16.0
- [Release notes](https://github.com/firebase/firebase-tools/releases)
- [Changelog](https://github.com/firebase/firebase-tools/blob/main/CHANGELOG.md)
- [Commits](firebase/firebase-tools@v13.10.0...v15.16.0)

---
updated-dependencies:
- dependency-name: firebase-tools
  dependency-version: 15.9.1
  dependency-type: direct:development
- dependency-name: tar
  dependency-version: 7.5.11
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-36749cffcf branch from a1eb7f4 to 6730830 Compare May 6, 2026 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant