Bump tar and npm #346

New Issue

MrUnknownDE · 2026-04-05T17:06:58+02:00

MrUnknownDE commented

2026-04-05 17:06:58 +02:00

Originally created by @dependabot[bot] on 1/22/2026

Removes tar. It's no longer used after updating ancestor dependency npm. These dependencies need to be updated together.

Removes tar

Updates npm from 11.7.0 to 11.8.0

Release notes

Sourced from npm's releases.

v11.8.0

11.8.0 (2026-01-21)

Features

545e861 #8828 show proxy environment variables in npm config list (Max Black)

Bug Fixes

c2f784d #8859 preserve serialNumber UUID in CycloneDX SBOM output #8837 (#8859) (@saksham-malhotra-27)

f2c3af7 #8840 more intuitive byte formatting boundaries for rounding (#8840) (@watilde)

Documentation

3474ec3 #8866 fix typo/logic error in npm-dedupe docs (#8866) (@Schweinepriester)

5552e46 #8797 npm-install: explain package-lock.json behavior (#8797) (@MaxBlack-dev, Max Black)

Dependencies

f478ca0 #8919 postcss-selector-parser@7.1.1

2b6a71f #8919 path-scurry@2.0.1

19096f2 #8919 sigstore@4.1.0

e7f5d1e #8919 lru-cache@11.2.4

9e756ae #8919 ip-address@10.1.0

f951820 #8919 common-ancestor-path@2.0.0

7a949ad #8919 @sigstore/verify@3.1.0

6979ce1 #8919 @sigstore/sign@4.1.0

b4a6a41 #8919 @sigstore/core@3.1.0

dc8a8e8 #8919 @sigstore/tuf@4.0.1

be221ea #8919 validate-npm-package-name@7.0.2

149823d #8919 diff@8.0.3

32b2001 #8919 tar@7.5.4

Chores

8f599df #8919 pin jsdom to 27.0.0 (@wraithgar)

f4f1161 #8919 dev dependency updates (@wraithgar)

workspace: @npmcli/arborist@9.1.10

workspace: @npmcli/config@10.5.0

workspace: libnpmdiff@8.0.13

workspace: libnpmexec@10.1.12

workspace: libnpmfund@7.0.13

workspace: libnpmpack@9.0.13

Changelog

Sourced from npm's changelog.

11.8.0 (2026-01-21)

Features

545e861 #8828 show proxy environment variables in npm config list (Max Black)

Bug Fixes

c2f784d #8859 preserve serialNumber UUID in CycloneDX SBOM output #8837 (#8859) (@saksham-malhotra-27)

f2c3af7 #8840 more intuitive byte formatting boundaries for rounding (#8840) (@watilde)

Documentation

3474ec3 #8866 fix typo/logic error in npm-dedupe docs (#8866) (@Schweinepriester)

5552e46 #8797 npm-install: explain package-lock.json behavior (#8797) (@MaxBlack-dev, Max Black)

Dependencies

f478ca0 #8919 postcss-selector-parser@7.1.1

2b6a71f #8919 path-scurry@2.0.1

19096f2 #8919 sigstore@4.1.0

e7f5d1e #8919 lru-cache@11.2.4

9e756ae #8919 ip-address@10.1.0

f951820 #8919 common-ancestor-path@2.0.0

7a949ad #8919 @sigstore/verify@3.1.0

6979ce1 #8919 @sigstore/sign@4.1.0

b4a6a41 #8919 @sigstore/core@3.1.0

dc8a8e8 #8919 @sigstore/tuf@4.0.1

be221ea #8919 validate-npm-package-name@7.0.2

149823d #8919 diff@8.0.3

32b2001 #8919 tar@7.5.4

Chores

8f599df #8919 pin jsdom to 27.0.0 (@wraithgar)

f4f1161 #8919 dev dependency updates (@wraithgar)

workspace: @npmcli/arborist@9.1.10

workspace: @npmcli/config@10.5.0

workspace: libnpmdiff@8.0.13

workspace: libnpmexec@10.1.12

workspace: libnpmfund@7.0.13

workspace: libnpmpack@9.0.13

Commits

f8d25cd chore: release 11.8.0
8f599df chore: pin jsdom to 27.0.0
f4f1161 chore: dev dependency updates
f478ca0 deps: postcss-selector-parser@7.1.1
2b6a71f deps: path-scurry@2.0.1
19096f2 deps: sigstore@4.1.0
e7f5d1e deps: lru-cache@11.2.4
9e756ae deps: ip-address@10.1.0
f951820 deps: common-ancestor-path@2.0.0
7a949ad deps: @sigstore/verify@3.1.0
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

*Originally created by @dependabot[bot] on 1/22/2026* Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [npm](https://github.com/npm/cli). These dependencies need to be updated together. Removes `tar` Updates `npm` from 11.7.0 to 11.8.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/releases">npm's releases</a>.</em></p> <blockquote> <h2>v11.8.0</h2> <h2><a href="https://github.com/npm/cli/compare/v11.7.0...v11.8.0">11.8.0</a> (2026-01-21)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/545e86154cc847766ceb356c3b1229d0573314c0"><code>545e861</code></a> <a href="https://redirect.github.com/npm/cli/pull/8828">#8828</a> show proxy environment variables in npm config list (Max Black)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/c2f784dbb5a83106558ff6ee7cc60bfc088ee9ed"><code>c2f784d</code></a> <a href="https://redirect.github.com/npm/cli/pull/8859">#8859</a> preserve serialNumber UUID in CycloneDX SBOM output <a href="https://redirect.github.com/npm/cli/issues/8837">#8837</a> (<a href="https://redirect.github.com/npm/cli/issues/8859">#8859</a>) (<a href="https://github.com/saksham-malhotra-27"><code>@saksham-malhotra-27</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/f2c3af7de1906b0517bba1e7e5b9247d57960d99"><code>f2c3af7</code></a> <a href="https://redirect.github.com/npm/cli/pull/8840">#8840</a> more intuitive byte formatting boundaries for rounding (<a href="https://redirect.github.com/npm/cli/issues/8840">#8840</a>) (<a href="https://github.com/watilde"><code>@watilde</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3474ec35fb579873d20a4b6747983ca369d61592"><code>3474ec3</code></a> <a href="https://redirect.github.com/npm/cli/pull/8866">#8866</a> fix typo/logic error in npm-dedupe docs (<a href="https://redirect.github.com/npm/cli/issues/8866">#8866</a>) (<a href="https://github.com/Schweinepriester"><code>@Schweinepriester</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/5552e465125c72e5d591fb6dff76c450e78c7c70"><code>5552e46</code></a> <a href="https://redirect.github.com/npm/cli/pull/8797">#8797</a> npm-install: explain package-lock.json behavior (<a href="https://redirect.github.com/npm/cli/issues/8797">#8797</a>) (<a href="https://github.com/MaxBlack-dev"><code>@MaxBlack-dev</code></a>, Max Black)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f478ca0efb6e3dd7b32a3d7b51c896fdd5f5cd90"><code>f478ca0</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>postcss-selector-parser@7.1.1</code></li> <li><a href="https://github.com/npm/cli/commit/2b6a71fae386e76e142dbab8e1bbc368d5ef0487"><code>2b6a71f</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>path-scurry@2.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/19096f28883706a96a5146d4ec313dffbcc148f7"><code>19096f2</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>sigstore@4.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/e7f5d1e445f599c60791a849484c4c0167392d10"><code>e7f5d1e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>lru-cache@11.2.4</code></li> <li><a href="https://github.com/npm/cli/commit/9e756ae2b51b8ae6b4661ab47a1401690b82ce31"><code>9e756ae</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>ip-address@10.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/f95182001771ad5d52dfc57934d7ce1b97055b70"><code>f951820</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>common-ancestor-path@2.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/7a949ad8967c93c6b38ed9d4ee469703d269eea5"><code>7a949ad</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/verify@3.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/6979ce1e0455042038d953d1631eaf8ed5cbb90a"><code>6979ce1</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/sign@4.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/b4a6a41bcc17694047c85fd71b3155ab0cb29302"><code>b4a6a41</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/core@3.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/dc8a8e8090deffc244f836fde2328d6444fc8ffc"><code>dc8a8e8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/tuf@4.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/be221eae2974a04fadb1c80fc423eb949e4df723"><code>be221ea</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>validate-npm-package-name@7.0.2</code></li> <li><a href="https://github.com/npm/cli/commit/149823de9a920e8ea25ed11399d79d3758f592ef"><code>149823d</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>diff@8.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/32b2001f552078eac8f4ec863d704fc91346efe3"><code>32b2001</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>tar@7.5.4</code></li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/8f599df6a3888fd9a06a5c17748657cbb45076c3"><code>8f599df</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> pin jsdom to 27.0.0 (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/f4f1161520e6c2b4b9038d4bd723ccef235e4273"><code>f4f1161</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> dev dependency updates (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.1.10">workspace</a>: <code>@npmcli/arborist@9.1.10</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.5.0">workspace</a>: <code>@npmcli/config@10.5.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.0.13">workspace</a>: <code>libnpmdiff@8.0.13</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.1.12">workspace</a>: <code>libnpmexec@10.1.12</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.13">workspace</a>: <code>libnpmfund@7.0.13</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.0.13">workspace</a>: <code>libnpmpack@9.0.13</code></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/blob/latest/CHANGELOG.md">npm's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/cli/compare/v11.7.0...v11.8.0">11.8.0</a> (2026-01-21)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/545e86154cc847766ceb356c3b1229d0573314c0"><code>545e861</code></a> <a href="https://redirect.github.com/npm/cli/pull/8828">#8828</a> show proxy environment variables in npm config list (Max Black)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/c2f784dbb5a83106558ff6ee7cc60bfc088ee9ed"><code>c2f784d</code></a> <a href="https://redirect.github.com/npm/cli/pull/8859">#8859</a> preserve serialNumber UUID in CycloneDX SBOM output <a href="https://redirect.github.com/npm/cli/issues/8837">#8837</a> (<a href="https://redirect.github.com/npm/cli/issues/8859">#8859</a>) (<a href="https://github.com/saksham-malhotra-27"><code>@saksham-malhotra-27</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/f2c3af7de1906b0517bba1e7e5b9247d57960d99"><code>f2c3af7</code></a> <a href="https://redirect.github.com/npm/cli/pull/8840">#8840</a> more intuitive byte formatting boundaries for rounding (<a href="https://redirect.github.com/npm/cli/issues/8840">#8840</a>) (<a href="https://github.com/watilde"><code>@watilde</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3474ec35fb579873d20a4b6747983ca369d61592"><code>3474ec3</code></a> <a href="https://redirect.github.com/npm/cli/pull/8866">#8866</a> fix typo/logic error in npm-dedupe docs (<a href="https://redirect.github.com/npm/cli/issues/8866">#8866</a>) (<a href="https://github.com/Schweinepriester"><code>@Schweinepriester</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/5552e465125c72e5d591fb6dff76c450e78c7c70"><code>5552e46</code></a> <a href="https://redirect.github.com/npm/cli/pull/8797">#8797</a> npm-install: explain package-lock.json behavior (<a href="https://redirect.github.com/npm/cli/issues/8797">#8797</a>) (<a href="https://github.com/MaxBlack-dev"><code>@MaxBlack-dev</code></a>, Max Black)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f478ca0efb6e3dd7b32a3d7b51c896fdd5f5cd90"><code>f478ca0</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>postcss-selector-parser@7.1.1</code></li> <li><a href="https://github.com/npm/cli/commit/2b6a71fae386e76e142dbab8e1bbc368d5ef0487"><code>2b6a71f</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>path-scurry@2.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/19096f28883706a96a5146d4ec313dffbcc148f7"><code>19096f2</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>sigstore@4.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/e7f5d1e445f599c60791a849484c4c0167392d10"><code>e7f5d1e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>lru-cache@11.2.4</code></li> <li><a href="https://github.com/npm/cli/commit/9e756ae2b51b8ae6b4661ab47a1401690b82ce31"><code>9e756ae</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>ip-address@10.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/f95182001771ad5d52dfc57934d7ce1b97055b70"><code>f951820</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>common-ancestor-path@2.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/7a949ad8967c93c6b38ed9d4ee469703d269eea5"><code>7a949ad</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/verify@3.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/6979ce1e0455042038d953d1631eaf8ed5cbb90a"><code>6979ce1</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/sign@4.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/b4a6a41bcc17694047c85fd71b3155ab0cb29302"><code>b4a6a41</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/core@3.1.0</code></li> <li><a href="https://github.com/npm/cli/commit/dc8a8e8090deffc244f836fde2328d6444fc8ffc"><code>dc8a8e8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>@sigstore/tuf@4.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/be221eae2974a04fadb1c80fc423eb949e4df723"><code>be221ea</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>validate-npm-package-name@7.0.2</code></li> <li><a href="https://github.com/npm/cli/commit/149823de9a920e8ea25ed11399d79d3758f592ef"><code>149823d</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>diff@8.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/32b2001f552078eac8f4ec863d704fc91346efe3"><code>32b2001</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> <code>tar@7.5.4</code></li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/8f599df6a3888fd9a06a5c17748657cbb45076c3"><code>8f599df</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> pin jsdom to 27.0.0 (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/f4f1161520e6c2b4b9038d4bd723ccef235e4273"><code>f4f1161</code></a> <a href="https://redirect.github.com/npm/cli/pull/8919">#8919</a> dev dependency updates (<a href="https://github.com/wraithgar"><code>@wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.1.10">workspace</a>: <code>@npmcli/arborist@9.1.10</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.5.0">workspace</a>: <code>@npmcli/config@10.5.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.0.13">workspace</a>: <code>libnpmdiff@8.0.13</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.1.12">workspace</a>: <code>libnpmexec@10.1.12</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.13">workspace</a>: <code>libnpmfund@7.0.13</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.0.13">workspace</a>: <code>libnpmpack@9.0.13</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/cli/commit/f8d25cd00132c8c7798a3f982a8da38ceed81e6b"><code>f8d25cd</code></a> chore: release 11.8.0</li> <li><a href="https://github.com/npm/cli/commit/8f599df6a3888fd9a06a5c17748657cbb45076c3"><code>8f599df</code></a> chore: pin jsdom to 27.0.0</li> <li><a href="https://github.com/npm/cli/commit/f4f1161520e6c2b4b9038d4bd723ccef235e4273"><code>f4f1161</code></a> chore: dev dependency updates</li> <li><a href="https://github.com/npm/cli/commit/f478ca0efb6e3dd7b32a3d7b51c896fdd5f5cd90"><code>f478ca0</code></a> deps: postcss-selector-parser@7.1.1</li> <li><a href="https://github.com/npm/cli/commit/2b6a71fae386e76e142dbab8e1bbc368d5ef0487"><code>2b6a71f</code></a> deps: path-scurry@2.0.1</li> <li><a href="https://github.com/npm/cli/commit/19096f28883706a96a5146d4ec313dffbcc148f7"><code>19096f2</code></a> deps: sigstore@4.1.0</li> <li><a href="https://github.com/npm/cli/commit/e7f5d1e445f599c60791a849484c4c0167392d10"><code>e7f5d1e</code></a> deps: lru-cache@11.2.4</li> <li><a href="https://github.com/npm/cli/commit/9e756ae2b51b8ae6b4661ab47a1401690b82ce31"><code>9e756ae</code></a> deps: ip-address@10.1.0</li> <li><a href="https://github.com/npm/cli/commit/f95182001771ad5d52dfc57934d7ce1b97055b70"><code>f951820</code></a> deps: common-ancestor-path@2.0.0</li> <li><a href="https://github.com/npm/cli/commit/7a949ad8967c93c6b38ed9d4ee469703d269eea5"><code>7a949ad</code></a> deps: <code>@sigstore/verify</code><a href="https://github.com/3"><code>@3</code></a>.1.0</li> <li>Additional commits viewable in <a href="https://github.com/npm/cli/compare/v11.7.0...v11.8.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fosrl/pangolin/network/alerts). </details>

MrUnknownDE closed this issue

2026-04-05 17:06:58 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies dependencies javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript javascript

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#346