This PR contains the following updates:
Package Updates Summary
| Type | Count |
|---|---|
| 📦 NPM Packages | 3 |
| 🔧 System Dependencies | 1 |
| Total | 4 |
📦 npm Dependencies
3 packages will be updated
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| nanotar (source) | 0.2.1 -> 0.3.0 | ||||
| @types/bun (source) | 1.3.3 -> 1.3.10 | ||||
| buddy-bot (source) | 0.9.12 -> 0.9.17 |
🔧 System Dependencies
| Package | Change | Type | File |
|---|---|---|---|
| bun.com | ^1.2.10 → ^1.3.4 | 🟡 minor | pkgx.yaml |
Release Notes
unjs/nanotar (nanotar)
0.2.1 -> 0.3.0
v0.3.0
Changes in #31 also backported to v0.2.1; however, it WAS NOT a security issue (see #59 for appeal).
🚀 Enhancements
🩹 Fixes
- Sanitise paths (
#58)
✅ Tests
❤️ Contributors
Released by pi0 on 2/11/2026
stacksjs/buddy-bot (buddy-bot)
0.9.12 -> 0.9.17
v0.9.17
Released by github-actions[bot] on 3/4/2026
v0.9.16
Released by github-actions[bot] on 2/16/2026
v0.9.15
Released by github-actions[bot] on 2/16/2026
📊 Package Statistics
- nanotar: 1,083,373 weekly downloads
- @types/bun: 5,482,167 weekly downloads
- buddy-bot: 101,960 weekly downloads
- bun.com: Popular JavaScript runtime and package manager
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
- If you want to rebase/retry this PR, check this box
This PR was generated by Buddy 🤖