UI5 / mcp-server / 21289451912

82%

push

github

deps: Bump tar from 6.2.1 to 7.5.6

Resolves alerts for several security advisories such as:
https://github.com/isaacs/node-tar/security/advisories/GHSA-r6q2-hw4h-h46w
https://github.com/isaacs/node-tar/security/advisories/GHSA-8qq5-rm4j-mr97

As per our assessment those vulnerabilities are not exploitable in the context of UI5 MCP server.

The override for tar is specifically defined where necessary in order to not downgrade tar
in case a new major version is being used by other dependencies.

This commit also includes a minor bump of lodash to address https://github.com/advisories/GHSA-xxjr-mmjv-4gpg
and diff to address https://github.com/advisories/GHSA-73rr-hh4g-fpgx which are also not exploitable in the
context of UI5 MCP server and only used as a development dependency.

494 of 696 branches covered (70.98%)

Branch coverage included in aggregate %.

1146 of 1292 relevant lines covered (88.7%)

190.99 hits per line