From a59f495212ce3871adcc0aefd6034ccdc945419e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Jan 2026 01:15:28 +0000 Subject: [PATCH 1/3] chore(deps): bump tar from 7.5.2 to 7.5.4 Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.4. - [Release notes](https://github.com/isaacs/node-tar/releases) - [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md) - [Commits](https://github.com/isaacs/node-tar/compare/v7.5.2...v7.5.4) --- updated-dependencies: - dependency-name: tar dependency-version: 7.5.4 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- pnpm-lock.yaml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5247fe0..987fb13 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -13,7 +13,7 @@ importers: version: 2.0.1 tar: specifier: ~7.5.2 - version: 7.5.2 + version: 7.5.4 devDependencies: '@commitlint/cli': specifier: ~20.1.0 @@ -3434,9 +3434,10 @@ packages: tar@6.2.1: resolution: {integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==} engines: {node: '>=10'} + deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me - tar@7.5.2: - resolution: {integrity: sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==} + tar@7.5.4: + resolution: {integrity: sha512-AN04xbWGrSTDmVwlI4/GTlIIwMFk/XEv7uL8aa57zuvRy6s4hdBed+lVq2fAZ89XDa7Us3ANXcE3Tvqvja1kTA==} engines: {node: '>=18'} temp-dir@1.0.0: @@ -5279,7 +5280,7 @@ snapshots: minipass-pipeline: 1.2.4 p-map: 7.0.3 ssri: 12.0.0 - tar: 7.5.2 + tar: 7.5.4 unique-filename: 4.0.0 cacache@20.0.1: @@ -6806,7 +6807,7 @@ snapshots: nopt: 8.1.0 proc-log: 5.0.0 semver: 7.7.3 - tar: 7.5.2 + tar: 7.5.4 tinyglobby: 0.2.15 which: 5.0.0 transitivePeerDependencies: @@ -7075,7 +7076,7 @@ snapshots: promise-retry: 2.0.1 sigstore: 4.0.0 ssri: 12.0.0 - tar: 7.5.2 + tar: 7.5.4 transitivePeerDependencies: - supports-color @@ -7570,7 +7571,7 @@ snapshots: mkdirp: 1.0.4 yallist: 4.0.0 - tar@7.5.2: + tar@7.5.4: dependencies: '@isaacs/fs-minipass': 4.0.1 chownr: 3.0.0 From 7113c993d810d211db3411f50c2e16755e033e15 Mon Sep 17 00:00:00 2001 From: ciesiolka <129899434+ciesiolka@users.noreply.github.com> Date: Fri, 16 Jan 2026 13:27:32 +0100 Subject: [PATCH 2/3] fix: exports for ESM consumers (#48) --- package.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 737e9db..5041651 100644 --- a/package.json +++ b/package.json @@ -22,14 +22,14 @@ "node": ">=20" }, "main": "./dist/index.cjs", - "module": "./dist/index.mjs", + "module": "./dist/index.js", "types": "./dist/index.d.ts", "exports": { ".": { "types": "./dist/index.d.ts", - "import": "./dist/index.mjs", + "import": "./dist/index.js", "require": "./dist/index.cjs", - "default": "./dist/index.mjs" + "default": "./dist/index.js" } }, "files": [ From 2c7b9b4930b7890ec840ae4dff4e797ab667b4d9 Mon Sep 17 00:00:00 2001 From: Jan Karres Date: Thu, 22 Jan 2026 11:19:41 +0100 Subject: [PATCH 3/3] fix: export seperate typings for CommonJS consumers (#48) --- package.json | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/package.json b/package.json index 5041651..295a27b 100644 --- a/package.json +++ b/package.json @@ -26,10 +26,14 @@ "types": "./dist/index.d.ts", "exports": { ".": { - "types": "./dist/index.d.ts", - "import": "./dist/index.js", - "require": "./dist/index.cjs", - "default": "./dist/index.js" + "import": { + "types": "./dist/index.d.ts", + "default": "./dist/index.js" + }, + "require": { + "types": "./dist/index.d.cts", + "default": "./dist/index.cjs" + } } }, "files": [