This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 3 |
| 🔧 System Dependencies | 1 |
| 🚀 GitHub Actions | 5 |
| Total | 9 |
📦 npm Dependencies
3 packages will be updated
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| nanotar (source) | 0.2.0 -> 0.3.0 | ||||
| @types/bun (source) | 1.3.3 -> 1.3.9 | ||||
| buddy-bot (source) | 0.9.12 -> 0.9.14 |
🔧 System Dependencies
| Package | Change | Type | File |
|---|---|---|---|
| bun.com | ^1.2.10 → ^1.3.2 | 🟡 minor | pkgx.yaml |
🚀 GitHub Actions
5 actions will be updated
| Action | Change | Type | Files |
|---|---|---|---|
| oven-sh/setup-bun | v2 → v2.1.2 | 🟢 patch | ci.yml |
| shivammathur/setup-php | v2 → v2.36.0 | 🟢 patch | buddy-bot.yml |
| actions/checkout | v6.0.1 → v6.0.2 | 🟢 patch | ci.yml |
| actions/checkout | v6 → v6.0.2 | 🟢 patch | buddy-bot.yml |
| stacksjs/action-releaser | v1.2.7 → v1.2.9 | 🟢 patch | release.yml |
Release Notes
unjs/nanotar (nanotar)
0.2.0 -> 0.3.0
v0.3.0
Changes in #31 also backported to v0.2.1; however, it WAS NOT a security issue (see #59 for appeal).
🚀 Enhancements
🩹 Fixes
- Sanitise paths (#58)
✅ Tests
❤️ Contributors
Released by pi0 on 2/11/2026
stacksjs/buddy-bot (buddy-bot)
0.9.12 -> 0.9.14
v0.9.14
Released by github-actions[bot] on 2/11/2026
v0.9.13
Released by github-actions[bot] on 2/10/2026
v0.9.9
Released by github-actions[bot] on 10/15/2025
📊 Package Statistics
- nanotar: 939,374 weekly downloads
- @types/bun: 4,932,006 weekly downloads
- buddy-bot: 112,312 weekly downloads
- bun.com: Popular JavaScript runtime and package manager
- oven-sh/setup-bun: GitHub Action for workflow automation
- shivammathur/setup-php: GitHub Action for workflow automation
- actions/checkout: GitHub Action for workflow automation
- actions/checkout: GitHub Action for workflow automation
- stacksjs/action-releaser: GitHub Action for workflow automation
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖