Skip to content

Conversation

@protikbiswas100
Copy link
Contributor

@protikbiswas100 protikbiswas100 commented Jul 17, 2025

Updated the following packages:

Type of Change

  • Bug fix (non-breaking change which fixes an issue)

Why

To resolve Component Governance alerts.

What

(GHSA-8cj5-5rvv-wf4v)

Screenshots

Screenshot 2025-07-22 134015

Testing

Local build

Changelog

Should this change be included in the release notes: yes
Add a brief summary of the change to use in the release notes for the next release.

@HariniMalothu17 HariniMalothu17 self-assigned this Jul 21, 2025
Copy link
Contributor

@HariniMalothu17 HariniMalothu17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@protikbiswas100 protikbiswas100 requested a review from satkh July 21, 2025 06:39
@satkh
Copy link
Contributor

satkh commented Jul 21, 2025

Good to understand, which component uses this package and impact of changing on the component.

@protikbiswas100 protikbiswas100 changed the title Updating tar-fs package [version] Bump tar-fs from 3.0.8 to 3.0.9 for component governance Jul 21, 2025
@HariniMalothu17 HariniMalothu17 changed the title [version] Bump tar-fs from 3.0.8 to 3.0.9 for component governance [0.79] Bump tar-fs from 3.0.8 to 3.0.9 for component governance Jul 21, 2025
Copy link
Contributor

@sharath2727 sharath2727 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Update the screenshot section with yarn why tar-fs output.

Approving with suggestions.

@protikbiswas100 protikbiswas100 changed the title [0.79] Bump tar-fs from 3.0.8 to 3.0.9 for component governance [0.79] Bump tar-fs from 3.0.8 to 3.1.0 for component governance Jul 22, 2025
@protikbiswas100 protikbiswas100 merged commit 36dd634 into microsoft:0.79-stable Jul 22, 2025
91 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants