-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 24 Jun 2026 15:02:58 +0200 Source: node-tar Architecture: source Version: 7.5.16+~4.0.1-1 Distribution: experimental Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Changes: node-tar (7.5.16+~4.0.1-1) experimental; urgency=medium . * Team upload * Drop component @types/tar, Embed component @isaacs/fs-minipass * New upstream version 7.5.16+~4.0.1 (Closes: CVE-2026-53655) * Patches: - drop all previous patches - do not point to (unbuilt) min bundles - workaround @types/node changes - tolerate GNU tar pax extended-header warning * Refresh test modules * Update build * Minimal test during build, real test during autopkgtest * Drop dependencies to node-mkdirp, node-safe-buffer, node-fs-minipass * Update copyright Checksums-Sha1: fa3d9741a3bf78468e94fdfa4af1e90a4cdb86a5 2437 node-tar_7.5.16+~4.0.1-1.dsc 3255b25ad5fde20429f5526179115e66da6ae8fe 6347 node-tar_7.5.16+~4.0.1.orig-isaacs-fs-minipass.tar.gz 583299eb6f92624cdbe88f49b62bab553b55f933 202690 node-tar_7.5.16+~4.0.1.orig.tar.gz 8992cd9ace2308ed947b90ab345be1d2748a5ab6 14760 node-tar_7.5.16+~4.0.1-1.debian.tar.xz Checksums-Sha256: 100e616c07746650149520122b6a3e450e45e8d0178026bb766571d0635d649c 2437 node-tar_7.5.16+~4.0.1-1.dsc c312189122ddb0c2f9aaeffbbcddb4015171539214ac589e56d7c72da261e4c7 6347 node-tar_7.5.16+~4.0.1.orig-isaacs-fs-minipass.tar.gz d7259fc285b50de435243ecee9c1006549aedc85b2003e09328113e22b21f989 202690 node-tar_7.5.16+~4.0.1.orig.tar.gz 22a2174255dbb8b19576a095d4453087fd30d4769dc9e190bf3935c74b34c006 14760 node-tar_7.5.16+~4.0.1-1.debian.tar.xz Files: 339a0d6e840b8fe216d143d6c5e7b6c4 2437 javascript optional node-tar_7.5.16+~4.0.1-1.dsc 94e9f0f8c8e8192f6fa6ecf41b4d2bc3 6347 javascript optional node-tar_7.5.16+~4.0.1.orig-isaacs-fs-minipass.tar.gz 502884992ae07deb369e9b686b21db51 202690 javascript optional node-tar_7.5.16+~4.0.1.orig.tar.gz b41f06cd239bad2184dd338827115dbb 14760 javascript optional node-tar_7.5.16+~4.0.1-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmo71d8ACgkQ9tdMp8mZ 7umymQ//asnwGraPpmoAHQUGljN+AXakrPcTp5h8wvcd/OuBDM/0uS1Vk+7T+o9n ACJ74zKVbSLbzT3AsYBeqRovfRRuiv0Adk9lUJUe9/oqA3oqsG9J4U0jrFGDg1n1 Z4xjHd61jdG6li27EIecHjNd5IElDdvbdCSPLYC1ssV4An+dvWxig9X/tXeGDauV /txrOYCLG9MfOwCTwMcpUdKPQxeO8NcECWtSEslS7Uk3o/MY1COvw8lVz8HUn6hJ PhcfyP0NTfYoi3GyEUhVwatX75qUuvXCr5jwbxRpKwmtTeg9zcegKQpzla7BRpF7 6C01sEEuAx7/ZTFMJw/TFUmwLzGzg/7EgNMnmPr1eA4HjXVA1/iGRr4JZxSo8mal 0GH6EfIlAxKCHn+KyKIOWi2MwEXWL441+7PeqMMOVnZ4acZ+bEP+WOsF4gey+Fqa D8p7iRffncSHlGl50QcdJyU3bDN/nUy4Wnf5YQPXqOY2qbkpje29+xocqTyUzo1n yVBzTlh8OJX2XfxYyut5n+mIU8KOIfFMY2xW2I3I7KJXb801M84l8S02rBUq02du e4HP8PMehm9DSJ8Ly95r5VPSSSGNfJ6WyxO6/JpuuVHe/qI921sCB45kF6/iUI6o liY7oiBB2mwbk/jM0bsoEaPOGoS1sAScXqpuDRfaKv25RFECzvU= =2ySt -----END PGP SIGNATURE-----