build(deps): bump tar, npm and semantic-release

[dependabot[bot]]

Removes tar. It's no longer used after updating ancestor dependencies tar, npm and semantic-release. These dependencies need to be updated together.

Removes tar

Updates npm from 6.14.18 to 10.5.1

Release notes

Sourced from npm's releases.

libnpmhook: v10.0.2

10.0.2 (2024-04-03)

Dependencies

• 87a61fc #7334 [email protected]

libnpmhook: v10.0.1

10.0.1 (2023-12-06)

Chores

• f656b66 #7062 @npmcli/[email protected] (#7062) (@​lukekarrys)
• 9754b17 #7051 use global npm for workspace tests (@​lukekarrys)
• 3891757 #7051 @npmcli/[email protected] (@​lukekarrys)
• 0270a7d #6807 set workspace engines (@​lukekarrys)
• fec08ad #6807 @npmcli/[email protected] (@​lukekarrys)

libnpmpublish: v9.0.5

9.0.5 (2024-04-03)

Dependencies

• 87a61fc #7334 [email protected]

libnpmpublish: v9.0.4

9.0.4 (2024-01-24)

Dependencies

• a50b03b #7141 [email protected] (#7141) (@​bdehamer)

libnpmhook: v9.0.4

9.0.4 (2024-02-26)

Chores

• 1d4c464 #7252 @npmcli/[email protected] (@​lukekarrys)
• 608005d #6812 @npmcli/[email protected] (#6812) (@​wraithgar)
• 3829998 #6654 @npmcli/[email protected] (#6654) (@​wraithgar)
• 1c8d17a #6416 @npmcli/[email protected] (@​wraithgar)
• 99cf197 #6275 @npmcli/[email protected] (@​wraithgar)
• b48c43f #6229 @npmcli/[email protected] (#6229) (@​lukekarrys)

libnpmpublish: v9.0.3

9.0.3 (2023-12-06)

Chores

• f656b66 #7062 @npmcli/[email protected] (#7062) (@​lukekarrys)

... (truncated)

Changelog

Sourced from npm's changelog.

10.5.1 (2024-04-03)

Bug Fixes

• 17d97d2 #7334 use @​npmcli/redact for log redactions (@​lukekarrys)
• 8cab136 #7324 ensure maxSockets is respected (#7324) (@​lukekarrys)
• 9bffa13 #7320 query: properly return :missing nodes (#7320) (@​wraithgar)
• 9d4e85f #7297 search: include searchlimit option in help output (#7297) (@​10xLaCroixDrinker)
• bdb3c28 #7274 added check for dry-run (#7274) (@​cod1r)
• 7f1ab88 #7271 more lightweight npm bin discovery in windows (#7271) (@​wraithgar)

Documentation

• 1da5cf0 #7198 add link to engines section (#7198) (@​uiolee)
• 1114a12 #7307 fix incorrect npm audit key response link (#7307) (@​davidlj95)
• 9807caf #7304 update audit docs with provenance info (#7304) (@​bdehamer)
• e1ecfa7 #7285 Correct capitalization for URL (#7285) (@​coliff)

Dependencies

• 87a61fc #7334 [email protected]
• 5469614 #7327 [email protected]
• 5469614 #7327 [email protected]
• 5469614 #7327 [email protected] (#7327)
• 9ccff72 #7329 [email protected]
• 7201a00 #7329 [email protected]
• 6fd94f2 #7329 [email protected]
• b048592 #7329 [email protected]
• c54a84a #7329 [email protected]
• 6853531 #7329 [email protected]
• c9315cb #7329 [email protected]
• 5bb0031 #7329 @sigstore/[email protected]
• 8cab136 #7324 [email protected] (@​lukekarrys)
• workspace: @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]

Chores

• 8cab136 #7324 add smoke-test for large prod installs (@​lukekarrys)
• 0dab381 #7258 [email protected] (#7258) (@​wraithgar)

... (truncated)

Commits

• f84b753 chore: release 10.5.1
• 87a61fc deps: [email protected]
• 17d97d2 fix: use @​npmcli/redact for log redactions
• 5469614 deps: [email protected] (#7327)
• 9ccff72 deps: [email protected]
• 7201a00 deps: [email protected]
• 6fd94f2 deps: [email protected]
• b048592 deps: [email protected]
• c54a84a deps: [email protected]
• 6853531 deps: [email protected]
• Additional commits viewable in compare view

Updates semantic-release from 19.0.3 to 23.0.8

Release notes

Sourced from semantic-release's releases.

v23.0.8

23.0.8 (2024-04-09)

Bug Fixes

• deps: rename read-pkg-up -> read-package-up (4980cba)
• deps: rename read-pkg-up -> read-package-up (#3249) (95a8b9e)

v23.0.7

23.0.7 (2024-04-03)

Bug Fixes

• deps: update dependency find-versions to v6 (6a2b6bb)

v23.0.6

23.0.6 (2024-03-24)

Bug Fixes

• deps: update dependency @​semantic-release/release-notes-generator to v13 (#3237) (b7e08fc)

v23.0.5

23.0.5 (2024-03-18)

Bug Fixes

• deps: update dependency @​semantic-release/commit-analyzer to v12 (#3226) (29458a0)

v23.0.4

23.0.4 (2024-03-16)

Bug Fixes

• deps: update dependency @​semantic-release/npm to v12 (#3224) (7a50c8a)

v23.0.3

23.0.3 (2024-03-15)

Bug Fixes

• deps: update dependency @​semantic-release/github to v10 (#3222) (96d5aeb)

v23.0.2

... (truncated)

Commits

• 95a8b9e fix(deps): rename read-pkg-up -> read-package-up (#3249)
• 58bb46b Merge branch 'master' into master
• 356a7c7 chore(deps): lock file maintenance (#3250)
• 4980cba fix(deps): rename read-pkg-up -> read-package-up
• bad6a3a ci(action): update github/codeql-action action to v3.24.10 (#3248)
• 6a2b6bb fix(deps): update dependency find-versions to v6
• 4c94b64 chore(deps): update npm to v10.5.1
• 9fababa docs: add community plugin semantic-release-pull-request-analyzer (#3242)
• 0b0cf4c chore(deps): lock file maintenance (#3243)
• b3ebeb8 chore(deps): lock file maintenance (#3239)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.