UI5 / cli / 33746836102

94%

push

github

build(deps): Bump the npm group with 4 updates (#1545)

Bumps [pacote](https://github.com/npm/pacote) from 21.5.1 to 22.0.0,
[make-fetch-happen](https://github.com/npm/make-fetch-happen) from
15.0.6 to 16.0.1,
[@npmcli/arborist](https://github.com/npm/arborist) from 9.9.0 to
10.0.2, and
[licensee](https://github.com/licensee/licensee) from 12.0.1 to 12.0.2.

All four packages now require Node `^22.22.2 || ^24.15.0 || >=26.0.0`.
The engine
constraint in the root `package.json` has been updated accordingly, and
the `overrides`
block that patched `tar` into security-safe versions for older
`pacote`/`cacache`/`node-gyp`
has been removed — it is no longer needed with these updated versions.

---

### pacote 21.5.1 → 22.0.0

<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/npm/pacote/releases">pacote's
releases</a>.</em></p>
<blockquote>
<h2>v22.0.0</h2>
<h3>⚠️ BREAKING CHANGES</h3>
<ul>
<li><code>pacote</code> now supports node <code>^22.22.2 || ^24.15.0 ||
&gt;=26.0.0</code></li>
<li>git specs using the <code>https</code> or <code>git+https</code>
protocol now resolve to <code>git+https</code> URLs instead of being
switched to <code>git+ssh</code>. Shortcut specs (e.g.
<code>github:user/repo</code>, <code>user/repo</code>) and
<code>git+ssh</code>/<code>git://</code> specs are unchanged.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><a
href="https://github.com/npm/pacote/commit/ce804fb"><code>ce804fb</code></a>
avoid ReDoS in <code>addGitSha</code> committish stripping (<a
href="https://redirect.github.com/npm/pacote/pull/498">#498</a>)</li>
<li><a
href="https://github.com/npm/pacote/commit/1f5f131"><code>1f5f131</code></a>
pass <code>--global=false</code> when preparing git dependencies</li>
<li><a
href="https://github.com/npm/pacote/commit/e0af7f6"><code>e0af7f6</code></a>
respect <code>ignoreScripts</code> option for git dependencies</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><code>ssri@14.0.0</code>, <code>sigstore@5.... (continued)

7312 of 8054 branches covered (90.79%)

Branch coverage included in aggregate %.

13989 of 14589 relevant lines covered (95.89%)

5251.44 hits per line