phlax

@dependabot rebase

this works/around ```bash cat my.tar.zst \ | zstd --stdout -d - \ | tar -xf - -C . ```

```console -f : overwrite output without prompting and (de)compress links ``` this `-f` ? i added the workaround when hitting the issue described here - it its possible to do...

i adjusted my invokation so ... ```diff - cat $(location :sources) \ - | $(location @envoy//tools/zstd) --stdout -d - \ + $(location @envoy//tools/zstd) --stdout -fd - \ | tar -xf...

for ref ```console $ bazel run @envoy//tools/zstd -- --version INFO: Analyzed target @envoy//tools/zstd:zstd (0 packages loaded, 0 targets configured). INFO: Found 1 target... Target @envoy//tools/zstd:zstd up-to-date: bazel-bin/external/envoy/tools/zstd/zstd INFO: Elapsed time:...

> The version is not the problem, its something else on your setup: sure quite possibly - i have a working solution tho, and everything else is working as expected...

ah i see why - in my diff i forgot to give it the path to the tarball

confirming, this works as expected: ```bash - cat $(location :sources) \ - | $(location @envoy//tools/zstd) --stdout -d - \ + $(location @envoy//tools/zstd) --stdout -fd $(location :sources) \ | tar -xf...

it _is_ working with symlinks (its bazel runfiles which often are)

@aallrd envoy has a bazel target that produces a json representation of the dependencies including license info ```console bazel build //bazel:all_repository_locations ```