[PR #1157] [MERGED] fix(security): update tar-fs and rollup #1268

Closed
opened 2026-02-15 20:15:02 -05:00 by yindo · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/langchain-ai/langgraphjs/pull/1157
Author: @dqbd
Created: 5/7/2025
Status: Merged
Merged: 5/7/2025
Merged by: @dqbd

Base: mainHead: dqbd/7may/dependabot


📝 Commits (1)

  • 56a2b8d fix(security): update tar-fs and rollup

📊 Changes

1 file changed (+68 additions, -221 deletions)

View changed files

📝 yarn.lock (+68 -221)

📄 Description

Pinning rollup@npm:^4.5.2 to 4.40.1 and tar-fs@npm:~2.0.1 to 2.1.2

tar-fs@~2.0.1 is used by dockerode, so feels safe to pin


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/langchain-ai/langgraphjs/pull/1157 **Author:** [@dqbd](https://github.com/dqbd) **Created:** 5/7/2025 **Status:** ✅ Merged **Merged:** 5/7/2025 **Merged by:** [@dqbd](https://github.com/dqbd) **Base:** `main` ← **Head:** `dqbd/7may/dependabot` --- ### 📝 Commits (1) - [`56a2b8d`](https://github.com/langchain-ai/langgraphjs/commit/56a2b8d7c706d2553827cbddb0d324ff4fab42bc) fix(security): update tar-fs and rollup ### 📊 Changes **1 file changed** (+68 additions, -221 deletions) <details> <summary>View changed files</summary> 📝 `yarn.lock` (+68 -221) </details> ### 📄 Description Pinning `rollup@npm:^4.5.2` to `4.40.1` and `tar-fs@npm:~2.0.1` to `2.1.2` `tar-fs@~2.0.1` is used by dockerode, so feels safe to pin --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
yindo added the pull-request label 2026-02-15 20:15:02 -05:00
yindo closed this issue 2026-02-15 20:15:02 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: langchain-ai/langgraphjs#1268