Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: isaacs/node-tar
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v7.5.7
Choose a base ref
...
head repository: isaacs/node-tar
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v7.5.9
Choose a head ref
  • 5 commits
  • 8 files changed
  • 2 contributors

Commits on Feb 13, 2026

  1. fix: do not write linkpaths through symlinks

    Prevent any `Link` or `SymbolicLink` entry from being created if its
    `linkpath` would target a location that is through a symbolic link from
    the current working directory.
    
    This matches the behavior of `bsdtar` for hard links, and is somewhat
    more restrictive in applying the same logic to symbolic links as well.
    
    Unpacking links with targets that extend through symlink folders is
    allowed if `preservePaths` option is enabled, as this disables all
    protective link checking by design, and is only designed for use with
    trusted input.
    
    Fix: GHSA-83g3-92jg-28cx
    isaacs committed Feb 13, 2026
    Configuration menu
    Copy the full SHA
    d18e4e1 View commit details
    Browse the repository at this point in the history

Commits on Feb 16, 2026

  1. fix(unpack): improve UnpackSync symlink error "into" path accuracy

    UnpackSync[ENSURE_NO_SYMLINK] previously constructed SymlinkError's
    "into" path using the full original linkpath parts array, which could
    produce misleading diagnostics.
    
    Build the "into" path from the original `cwd` value and the `parts`
    list.
    scumfrog authored and isaacs committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    2cb1120 View commit details
    Browse the repository at this point in the history
  2. 7.5.8

    isaacs committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    6b8eba0 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    fbb0851 View commit details
    Browse the repository at this point in the history
  4. 7.5.9

    isaacs committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    1f0c2c9 View commit details
    Browse the repository at this point in the history
Loading