Merge pull request #2457 from GSA/dependabot/npm_and_yarn/tar-fs-3.0.8

Bump tar-fs from 3.0.6 to 3.0.8
Merge pull request #2459 from GSA/dependabot/pip/click-8.1.8
2026-08-23 15:57:23 -04:00 · 2025-03-29 08:48:34 -04:00 · 2025-03-29 08:48:17 -04:00 · 2025-03-29 12:24:29 +00:00 · 2025-03-29 08:22:37 -04:00 · 2025-03-28 22:19:50 +00:00
3 changed files with 72 additions and 47 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -3866,50 +3866,80 @@
      "dev": true
    },
    "node_modules/bare-events": {
-      "version": "2.4.2",
-      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.4.2.tgz",
-      "integrity": "sha512-qMKFd2qG/36aA4GwvKq8MxnPgCQAmBWmSyLWsJcbn8v03wvIPQ/hG1Ms8bPzndZxMDoHpxez5VOS+gC9Yi24/Q==",
+      "version": "2.5.4",
+      "resolved": "https://registry.npmjs.org/bare-events/-/bare-events-2.5.4.tgz",
+      "integrity": "sha512-+gFfDkR8pj4/TrWCGUGWmJIkBwuxPS5F+a5yWjOHQt2hHvNZd5YLzadjmDUtFmMM4y429bnKLa8bYBMHcYdnQA==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true
    },
    "node_modules/bare-fs": {
-      "version": "2.3.4",
-      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-2.3.4.tgz",
-      "integrity": "sha512-7YyxitZEq0ey5loOF5gdo1fZQFF7290GziT+VbAJ+JbYTJYaPZwuEz2r/Nq23sm4fjyTgUf2uJI2gkT3xAuSYA==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/bare-fs/-/bare-fs-4.0.2.tgz",
+      "integrity": "sha512-S5mmkMesiduMqnz51Bfh0Et9EX0aTCJxhsI4bvzFFLs8Z1AV8RDHadfY5CyLwdoLHgXbNBEN1gQcbEtGwuvixw==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "bare-events": "^2.0.0",
-        "bare-path": "^2.0.0",
-        "bare-stream": "^2.0.0"
+        "bare-events": "^2.5.4",
+        "bare-path": "^3.0.0",
+        "bare-stream": "^2.6.4"
+      },
+      "engines": {
+        "bare": ">=1.16.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        }
      }
    },
    "node_modules/bare-os": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-2.4.3.tgz",
-      "integrity": "sha512-FjkNiU3AwTQNQkcxFOmDcCfoN1LjjtU+ofGJh5DymZZLTqdw2i/CzV7G0h3snvh6G8jrWtdmNSgZPH4L2VOAsQ==",
+      "version": "3.6.1",
+      "resolved": "https://registry.npmjs.org/bare-os/-/bare-os-3.6.1.tgz",
+      "integrity": "sha512-uaIjxokhFidJP+bmmvKSgiMzj2sV5GPHaZVAIktcxcpCyBFFWO+YlikVAdhmUo2vYFvFhOXIAlldqV29L8126g==",
      "dev": true,
-      "optional": true
+      "license": "Apache-2.0",
+      "optional": true,
+      "engines": {
+        "bare": ">=1.14.0"
+      }
    },
    "node_modules/bare-path": {
-      "version": "2.1.3",
-      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-2.1.3.tgz",
-      "integrity": "sha512-lh/eITfU8hrj9Ru5quUp0Io1kJWIk1bTjzo7JH1P5dWmQ2EL4hFUlfI8FonAhSlgIfhn63p84CDY/x+PisgcXA==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/bare-path/-/bare-path-3.0.0.tgz",
+      "integrity": "sha512-tyfW2cQcB5NN8Saijrhqn0Zh7AnFNsnczRcuWODH0eYAXBsJ5gVxAUuNr7tsHSC6IZ77cA0SitzT+s47kot8Mw==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "bare-os": "^2.1.0"
+        "bare-os": "^3.0.1"
      }
    },
    "node_modules/bare-stream": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.3.0.tgz",
-      "integrity": "sha512-pVRWciewGUeCyKEuRxwv06M079r+fRjAQjBEK2P6OYGrO43O+Z0LrPZZEjlc4mB6C2RpZ9AxJ1s7NLEtOHO6eA==",
+      "version": "2.6.5",
+      "resolved": "https://registry.npmjs.org/bare-stream/-/bare-stream-2.6.5.tgz",
+      "integrity": "sha512-jSmxKJNJmHySi6hC42zlZnq00rga4jjxcgNZjY9N5WlOe/iOoGRtdwGsHzQv2RlH2KOYMwGUXhf2zXd32BA9RA==",
      "dev": true,
+      "license": "Apache-2.0",
      "optional": true,
      "dependencies": {
-        "b4a": "^1.6.6",
-        "streamx": "^2.20.0"
+        "streamx": "^2.21.0"
+      },
+      "peerDependencies": {
+        "bare-buffer": "*",
+        "bare-events": "*"
+      },
+      "peerDependenciesMeta": {
+        "bare-buffer": {
+          "optional": true
+        },
+        "bare-events": {
+          "optional": true
+        }
      }
    },
    "node_modules/base64-js": {
@@ -11156,12 +11186,6 @@
        }
      ]
    },
-    "node_modules/queue-tick": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/queue-tick/-/queue-tick-1.0.1.tgz",
-      "integrity": "sha512-kJt5qhMxoszgU/62PLP1CJytzd2NKetjSRnyuj31fDd3Rlcz3fzlFdFLD1SItunPwyqEOkca6GbV612BWfaBag==",
-      "dev": true
-    },
    "node_modules/range-parser": {
      "version": "1.2.1",
      "resolved": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz",
@@ -12457,13 +12481,13 @@
      "dev": true
    },
    "node_modules/streamx": {
-      "version": "2.20.0",
-      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.20.0.tgz",
-      "integrity": "sha512-ZGd1LhDeGFucr1CUCTBOS58ZhEendd0ttpGT3usTvosS4ntIwKN9LJFp+OeCSprsCPL14BXVRZlHGRY1V9PVzQ==",
+      "version": "2.22.0",
+      "resolved": "https://registry.npmjs.org/streamx/-/streamx-2.22.0.tgz",
+      "integrity": "sha512-sLh1evHOzBy/iWRiR6d1zRcLao4gGZr3C1kzNz4fopCOKJb6xD9ub8Mpi9Mr1R6id5o43S+d93fI48UC5uM9aw==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
        "fast-fifo": "^1.3.2",
-        "queue-tick": "^1.0.1",
        "text-decoder": "^1.1.0"
      },
      "optionalDependencies": {
@@ -12643,17 +12667,18 @@
      }
    },
    "node_modules/tar-fs": {
-      "version": "3.0.6",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.6.tgz",
-      "integrity": "sha512-iokBDQQkUyeXhgPYaZxmczGPhnhXZ0CmrqI+MOb/WFGS9DW5wnfrLgtjUJBvz50vQ3qfRwJ62QVoCFu8mPVu5w==",
+      "version": "3.0.8",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-3.0.8.tgz",
+      "integrity": "sha512-ZoROL70jptorGAlgAYiLoBLItEKw/fUxg9BSYK/dF/GAGYFJOJJJMvjPAKDJraCXFwadD456FCuvLWgfhMsPwg==",
      "dev": true,
+      "license": "MIT",
      "dependencies": {
        "pump": "^3.0.0",
        "tar-stream": "^3.1.5"
      },
      "optionalDependencies": {
-        "bare-fs": "^2.1.1",
-        "bare-path": "^2.1.0"
+        "bare-fs": "^4.0.1",
+        "bare-path": "^3.0.0"
      }
    },
    "node_modules/tar-fs/node_modules/pump": {
--- a/poetry.lock
+++ b/poetry.lock
@@ -492,14 +492,14 @@ files = [

 [[package]]
 name = "click"
-version = "8.1.7"
+version = "8.1.8"
 description = "Composable command line interface toolkit"
 optional = false
 python-versions = ">=3.7"
 groups = ["main", "dev"]
 files = [
-    {file = "click-8.1.7-py3-none-any.whl", hash = "sha256:ae74fb96c20a0277a1d615f1e4d73c8414f5a98db8b799a7931d1582f3390c28"},
-    {file = "click-8.1.7.tar.gz", hash = "sha256:ca9853ad459e787e2192211578cc907e7594e294c7ccc834310722b41b9ca6de"},
+    {file = "click-8.1.8-py3-none-any.whl", hash = "sha256:63c132bbbed01578a06712a2d1f497bb62d9c1c0d329b7903a866228027263b2"},
+    {file = "click-8.1.8.tar.gz", hash = "sha256:ed53c9d8990d83c2a27deae68e4ee337473f6330c040a31d4225c9574d16096a"},
 ]

 [package.dependencies]
@@ -860,18 +860,18 @@ pyflakes = ">=3.2.0,<3.3.0"

 [[package]]
 name = "flake8-bugbear"
-version = "24.8.19"
+version = "24.12.12"
 description = "A plugin for flake8 finding likely bugs and design problems in your program. Contains warnings that don't belong in pyflakes and pycodestyle."
 optional = false
 python-versions = ">=3.8.1"
 groups = ["dev"]
 files = [
-    {file = "flake8_bugbear-24.8.19-py3-none-any.whl", hash = "sha256:25bc3867f7338ee3b3e0916bf8b8a0b743f53a9a5175782ddc4325ed4f386b89"},
-    {file = "flake8_bugbear-24.8.19.tar.gz", hash = "sha256:9b77627eceda28c51c27af94560a72b5b2c97c016651bdce45d8f56c180d2d32"},
+    {file = "flake8_bugbear-24.12.12-py3-none-any.whl", hash = "sha256:1b6967436f65ca22a42e5373aaa6f2d87966ade9aa38d4baf2a1be550767545e"},
+    {file = "flake8_bugbear-24.12.12.tar.gz", hash = "sha256:46273cef0a6b6ff48ca2d69e472f41420a42a46e24b2a8972e4f0d6733d12a64"},
 ]

 [package.dependencies]
-attrs = ">=19.2.0"
+attrs = ">=22.2.0"
 flake8 = ">=6.0.0"

 [package.extras]
@@ -3297,4 +3297,4 @@ files = [
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.12.2"
-content-hash = "ee8b9764c81916879e6d68b2a80a43e41dc072a1d4abd8653cd3a989be5d25ab"
+content-hash = "de927a2573d395cf3063c46e62e79b710e4bf32830c1310f9fd34b649c7b1d2f"
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -60,7 +60,7 @@ shapely = "^2.0.5"
 smartypants = "^2.0.1"
 certifi = "^2025.1.31"
 charset-normalizer = "^3.4.1"
-click = "^8.1.7"
+click = "^8.1.8"
 idna = "^3.7"
 markupsafe = "^2.1.5"
 python-dateutil = "^2.9.0.post0"
@@ -79,7 +79,7 @@ coverage = "*"
 detect-secrets = "^1.5.0"
 freezegun = "^1.5.1"
 flake8 = "^7.1.2"
-flake8-bugbear = "^24.1.17"
+flake8-bugbear = "^24.12.12"
 flake8-print = "^5.0.0"
 flake8-pytest-style = "^2.1.0"
 isort = "^5.13.2"
Author	SHA1	Message	Date
Alex Janousek	bbe1e44366	Merge pull request #2457 from GSA/dependabot/npm_and_yarn/tar-fs-3.0.8 Bump tar-fs from 3.0.6 to 3.0.8	2025-03-29 08:48:34 -04:00
Alex Janousek	685deebae4	Merge pull request #2459 from GSA/dependabot/pip/click-8.1.8 Bump click from 8.1.7 to 8.1.8	2025-03-29 08:48:17 -04:00
dependabot[bot]	918016d4af	Bump click from 8.1.7 to 8.1.8 Bumps [click](https://github.com/pallets/click) from 8.1.7 to 8.1.8. - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](https://github.com/pallets/click/compare/8.1.7...8.1.8) --- updated-dependencies: - dependency-name: click dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-29 12:24:29 +00:00
Alex Janousek	f87f0a1c9e	Merge pull request #2454 from GSA/dependabot/pip/flake8-bugbear-24.12.12 Bump flake8-bugbear from 24.8.19 to 24.12.12	2025-03-29 08:22:37 -04:00
dependabot[bot]	869f76c846	Bump tar-fs from 3.0.6 to 3.0.8 Bumps [tar-fs](https://github.com/mafintosh/tar-fs) from 3.0.6 to 3.0.8. - [Commits](https://github.com/mafintosh/tar-fs/compare/v3.0.6...v3.0.8) --- updated-dependencies: - dependency-name: tar-fs dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 22:19:50 +00:00
dependabot[bot]	3946e7bb3a	Bump flake8-bugbear from 24.8.19 to 24.12.12 Bumps [flake8-bugbear](https://github.com/PyCQA/flake8-bugbear) from 24.8.19 to 24.12.12. - [Release notes](https://github.com/PyCQA/flake8-bugbear/releases) - [Commits](https://github.com/PyCQA/flake8-bugbear/compare/24.8.19...24.12.12) --- updated-dependencies: - dependency-name: flake8-bugbear dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2025-03-28 19:06:58 +00:00