Title: chore(deps): bump tar and npm by dependabot[bot] · Pull Request #266 · scriptcoded/sql-highlight · GitHub
Open Graph Title: chore(deps): bump tar and npm by dependabot[bot] · Pull Request #266 · scriptcoded/sql-highlight
X Title: chore(deps): bump tar and npm by dependabot[bot] · Pull Request #266 · scriptcoded/sql-highlight
Description: Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together.
Removes tar
Updates npm from 11.7.0 to 11.8.0
Release notes
Sourced from npm's releases.
v11.8.0
11.8.0 (2026-01-21)
Features
545e861 #8828 show proxy environment variables in npm config list (Max Black)
Bug Fixes
c2f784d #8859 preserve serialNumber UUID in CycloneDX SBOM output #8837 (#8859) (@saksham-malhotra-27)
f2c3af7 #8840 more intuitive byte formatting boundaries for rounding (#8840) (@watilde)
Documentation
3474ec3 #8866 fix typo/logic error in npm-dedupe docs (#8866) (@Schweinepriester)
5552e46 #8797 npm-install: explain package-lock.json behavior (#8797) (@MaxBlack-dev, Max Black)
Dependencies
f478ca0 #8919 postcss-selector-parser@7.1.1
2b6a71f #8919 path-scurry@2.0.1
19096f2 #8919 sigstore@4.1.0
e7f5d1e #8919 lru-cache@11.2.4
9e756ae #8919 ip-address@10.1.0
f951820 #8919 common-ancestor-path@2.0.0
7a949ad #8919 @sigstore/verify@3.1.0
6979ce1 #8919 @sigstore/sign@4.1.0
b4a6a41 #8919 @sigstore/core@3.1.0
dc8a8e8 #8919 @sigstore/tuf@4.0.1
be221ea #8919 validate-npm-package-name@7.0.2
149823d #8919 diff@8.0.3
32b2001 #8919 tar@7.5.4
Chores
8f599df #8919 pin jsdom to 27.0.0 (@wraithgar)
f4f1161 #8919 dev dependency updates (@wraithgar)
workspace: @npmcli/arborist@9.1.10
workspace: @npmcli/config@10.5.0
workspace: libnpmdiff@8.0.13
workspace: libnpmexec@10.1.12
workspace: libnpmfund@7.0.13
workspace: libnpmpack@9.0.13
Changelog
Sourced from npm's changelog.
11.8.0 (2026-01-21)
Features
545e861 #8828 show proxy environment variables in npm config list (Max Black)
Bug Fixes
c2f784d #8859 preserve serialNumber UUID in CycloneDX SBOM output #8837 (#8859) (@saksham-malhotra-27)
f2c3af7 #8840 more intuitive byte formatting boundaries for rounding (#8840) (@watilde)
Documentation
3474ec3 #8866 fix typo/logic error in npm-dedupe docs (#8866) (@Schweinepriester)
5552e46 #8797 npm-install: explain package-lock.json behavior (#8797) (@MaxBlack-dev, Max Black)
Dependencies
f478ca0 #8919 postcss-selector-parser@7.1.1
2b6a71f #8919 path-scurry@2.0.1
19096f2 #8919 sigstore@4.1.0
e7f5d1e #8919 lru-cache@11.2.4
9e756ae #8919 ip-address@10.1.0
f951820 #8919 common-ancestor-path@2.0.0
7a949ad #8919 @sigstore/verify@3.1.0
6979ce1 #8919 @sigstore/sign@4.1.0
b4a6a41 #8919 @sigstore/core@3.1.0
dc8a8e8 #8919 @sigstore/tuf@4.0.1
be221ea #8919 validate-npm-package-name@7.0.2
149823d #8919 diff@8.0.3
32b2001 #8919 tar@7.5.4
Chores
8f599df #8919 pin jsdom to 27.0.0 (@wraithgar)
f4f1161 #8919 dev dependency updates (@wraithgar)
workspace: @npmcli/arborist@9.1.10
workspace: @npmcli/config@10.5.0
workspace: libnpmdiff@8.0.13
workspace: libnpmexec@10.1.12
workspace: libnpmfund@7.0.13
workspace: libnpmpack@9.0.13
Commits
f8d25cd chore: release 11.8.0
8f599df chore: pin jsdom to 27.0.0
f4f1161 chore: dev dependency updates
f478ca0 deps: postcss-selector-parser@7.1.1
2b6a71f deps: path-scurry@2.0.1
19096f2 deps: sigstore@4.1.0
e7f5d1e deps: lru-cache@11.2.4
9e756ae deps: ip-address@10.1.0
f951820 deps: common-ancestor-path@2.0.0
7a949ad deps: @sigstore/verify@3.1.0
Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show
Open Graph Description: Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together. Removes tar Updates npm from 11.7.0 to 11.8.0 Release notes Sourced fro...
X Description: Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together. Removes tar Updates npm from 11.7.0 to 11.8.0 Release notes Sourced...
Opengraph URL: https://github.com/scriptcoded/sql-highlight/pull/266
X: @github
Domain: patch-diff.githubusercontent.com
| route-pattern | /:user_id/:repository/pull/:id/files(.:format) |
| route-controller | pull_requests |
| route-action | files |
| fetch-nonce | v2:acbcf311-fd12-f604-82f3-b9375b340a03 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 9802:18A8DE:1D960A:28AFFC:6981E1C1 |
| html-safe-nonce | e566aaab4c4fecf4c55640170a018a532d8849e1b0c5a2099dbd1b70ac872ff9 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5ODAyOjE4QThERToxRDk2MEE6MjhBRkZDOjY5ODFFMUMxIiwidmlzaXRvcl9pZCI6IjIwODc3OTA4MDI3MjA5MDc3MTMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 9eb8f309e46cb25c36fae66b6417815a6d92857fdfe0acc7ac45e4fbd05d4451 |
| hovercard-subject-tag | pull_request:3197272178 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/scriptcoded/sql-highlight/pull/266/files |
| twitter:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| twitter:card | summary_large_image |
| og:image | https://avatars.githubusercontent.com/in/29110?s=400&v=4 |
| og:image:alt | Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together. Removes tar Updates npm from 11.7.0 to 11.8.0 Release notes Sourced fro... |
| og:site_name | GitHub |
| og:type | object |
| hostname | github.com |
| expected-hostname | github.com |
| None | ebfdf8d3e0fd17b103f41cc6696d84938694ebebdfecaf11fe00dbe4a9785801 |
| turbo-cache-control | no-preview |
| diff-view | unified |
| go-import | github.com/scriptcoded/sql-highlight git https://github.com/scriptcoded/sql-highlight.git |
| octolytics-dimension-user_id | 6452991 |
| octolytics-dimension-user_login | scriptcoded |
| octolytics-dimension-repository_id | 147309066 |
| octolytics-dimension-repository_nwo | scriptcoded/sql-highlight |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 147309066 |
| octolytics-dimension-repository_network_root_nwo | scriptcoded/sql-highlight |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | true |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 471ae8701b77c1bf177c58019d2e6fd65ae89141 |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width