build(deps): bump tar and electron-builder

[dependabot]

Bumps tar to 7.5.20 and updates ancestor dependency electron-builder. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.20

Changelog

Sourced from tar's changelog.

Changelog

7.5

• Added zstd compression support.
• Consistent TOCTOU behavior in sync t.list
• Only read from ustar block if not specified in Pax
• Fix sync tar.list when file size reduces while reading
• Sanitize absolute linkpaths properly
• Prevent writing hardlink entries to the archive ahead of their file target

7.4

• Deprecate onentry in favor of onReadEntry for clarity.

7.3

• Add onWriteEntry option

7.2

• DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

• Update minipass to v7.1.0
• Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

• Drop support for node <18
• Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
• Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
• Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
• Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

• ebbb720 7.5.20
• 2f27196 fix: fully disable and dispose of unzip when aborting parser
• be440da 7.5.19
• 2812e93 add maxDecompressionRatio guard against explosive decompression
• 9ecd4d2 7.5.18
• 9e78bf0 refuse to let header size be less than 0
• e02a4e9 pax: parse values according to known types
• 9cbdb31 7.5.17
• 7a635c2 terminate pax strings on nul bytes
• cf21338 7.5.16
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates electron-builder from 25.1.8 to 26.15.3

Release notes

Sourced from electron-builder's releases.

electron-builder@26.15.3

What's Changed

• fix: add ELECTRON_BUILDER_BINARIES_ALLOW_HTTP opt-in for parsing env vars targeting non-localhost HTTP by @​mmaietta in electron-userland/electron-builder#9856
• docs: update docs and add build lifecycle page by @​mmaietta in electron-userland/electron-builder#9857
• chore(test): update vitest by @​mmaietta in electron-userland/electron-builder#9859
• fix(download): persist toolset archives in a predictable cache path by @​mmaietta in electron-userland/electron-builder#9861
• fix(publish): set x-amz-content-sha256: UNSIGNED-PAYLOAD before SigV4 signing by @​mmaietta in electron-userland/electron-builder#9863
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9858

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.2...electron-builder@26.15.3

electron-builder@26.15.2

What's Changed

• fix(mac): use native zip for macOS zip target to preserve .framework symlinks by @​mmaietta in electron-userland/electron-builder#9847
• fix: retry package install on transient network errors by @​mmaietta in electron-userland/electron-builder#9850
• fix(icons): replace png2icons with wasm-vips Lanczos3 resampling for high-quality icon conversion by @​mmaietta in electron-userland/electron-builder#9851
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9848

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.1...electron-builder@26.15.2

electron-builder@26.15.1

What's Changed

• fix: validate packages by @​regnete in electron-userland/electron-builder#9838
• chore: ci:validate, ci:test:fetch-cache simplification, and code cleanup by @​mmaietta in electron-userland/electron-builder#9840
• chore(tests): embed platform markers in generated test filenames to eliminate "unknown" timing in shard plan by @​mmaietta in electron-userland/electron-builder#9843
• chore(deps): update and unpin @​electron/rebuild package by @​mmaietta in electron-userland/electron-builder#9845
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9842

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.15.0...electron-builder@26.15.1

electron-builder@26.15.0

What's Changed

• chore(pr-labeler): force run to only pull_request on core repo (ignore forks) by @​mmaietta in electron-userland/electron-builder#9821
• fix(mac): skip signing when no certificate found; warn on ad-hoc + hardenedRuntime by @​mmaietta in electron-userland/electron-builder#9822
• fix: use bash instead of sh in package.json by @​mmaietta in electron-userland/electron-builder#9823
• chore: replace app-builder-bin node-dep-tree and rebuild-node-modules by @​mmaietta in electron-userland/electron-builder#9828
• feat(node-module-collector): invoke package managers via PowerShell -EncodedCommand on Windows by @​mmaietta in electron-userland/electron-builder#9827
• feat(migration): fully replace Go binary app-builder-bin with TS implementation by @​mmaietta in electron-userland/electron-builder#9829
• chore(test): print out shard duration calculation results during shard-count step by @​mmaietta in electron-userland/electron-builder#9831
• feat(linux): add syncDesktopName option to align installed .desktop filename with StartupWMClass by @​mmaietta in electron-userland/electron-builder#9832
• fix(smart-cache): deep-merge shard caches so linux timing data survives across runs by @​mmaietta in electron-userland/electron-builder#9833
• fix: holistic field detection for <text> (sha256 hash) redaction by @​mmaietta in electron-userland/electron-builder#9834
• fix(mac/pkg): explicitly pass --version to pkgbuild by @​mmaietta in electron-userland/electron-builder#9835
• chore(deploy): Release (next) by @​electron-builder-release-bot[bot] in electron-userland/electron-builder#9825

Full Changelog: https://github.com/electron-userland/electron-builder/compare/electron-builder@26.14.0...electron-builder@26.15.0

... (truncated)

Changelog

Sourced from electron-builder's changelog.

26.15.3

Patch Changes

35bfdeb 9097daf

• builder-util@26.15.3
• app-builder-lib@26.15.3
• dmg-builder@26.15.3

26.15.2

Patch Changes

e25f967 f5ae163 3951024

• app-builder-lib@26.15.2
• dmg-builder@26.15.2

26.15.1

Patch Changes

588ff48 db5d2f4

• app-builder-lib@26.15.1
• dmg-builder@26.15.1

... (truncated)

Commits

• 512a57e chore(deploy): Release v26.15.3 (#9858)
• a6117b3 chore(deploy): Release v26.15.2 (#9848)
• d57f094 chore(deploy): Release v26.15.1 (#9842)
• bed3a9c chore(deploy): Release v26.15.0 (electron-updater@6.8.9) (#9825)
• 198c10c chore: replace app-builder-bin node-dep-tree and rebuild-node-modules (#9...
• e236392 chore(deploy): Release v26.14.0 (#9812)
• 72d298c chore(deploy): Release v26.13.1 (#9805)
• ffd11c7 chore(deploy): Release v26.13.0 (electron-updater@6.8.8) (#9793)
• 2c8c71a chore(deploy): Release v26.12.1 (electron-updater@6.8.7) (#9782)
• d6a5aee fix: harden generated-file output, argument construction, and download valida...
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for electron-builder since your current version.

[dependabot]

Superseded by #10.