deps: pacote@15.1.1

wraithgar · wraithgar · commit f7a520072f3d · 2023-02-21T14:00:56.000-08:00
diff --git a/node_modules/pacote/lib/fetcher.js b/node_modules/pacote/lib/fetcher.js
@@ -425,7 +425,7 @@ class FetcherBase {
     return ((mode | m) & ~this.umask) | exe | 0o600
   }
 
-  [_tarxOptions] ({ cwd, uid, gid }) {
+  [_tarxOptions] ({ cwd }) {
     const sawIgnores = new Set()
     return {
       cwd,
@@ -460,9 +460,9 @@ class FetcherBase {
         log.warn('tar', code, msg)
         log.silly('tar', code, msg, data)
       },
-      uid,
-      gid,
       umask: this.umask,
+      // always ignore ownership info from tarball metadata
+      preserveOwner: false,
     }
   }
 }
diff --git a/node_modules/pacote/package.json b/node_modules/pacote/package.json
@@ -1,6 +1,6 @@
 {
   "name": "pacote",
-  "version": "15.1.0",
+  "version": "15.1.1",
   "description": "JavaScript package downloader",
   "author": "GitHub Inc.",
   "bin": {
diff --git a/package-lock.json b/package-lock.json
@@ -133,7 +133,7 @@
         "npm-user-validate": "^2.0.0",
         "npmlog": "^7.0.1",
         "p-map": "^4.0.0",
-        "pacote": "^15.1.0",
+        "pacote": "^15.1.1",
         "parse-conflict-json": "^3.0.0",
         "proc-log": "^3.0.0",
         "qrcode-terminal": "^0.12.0",
@@ -9870,9 +9870,9 @@
       }
     },
     "node_modules/pacote": {
-      "version": "15.1.0",
-      "resolved": "https://registry.npmjs.org/pacote/-/pacote-15.1.0.tgz",
-      "integrity": "sha512-FFcjtIl+BQNfeliSm7MZz5cpdohvUV1yjGnqgVM4UnVF7JslRY0ImXAygdaCDV0jjUADEWu4y5xsDV8brtrTLg==",
+      "version": "15.1.1",
+      "resolved": "https://registry.npmjs.org/pacote/-/pacote-15.1.1.tgz",
+      "integrity": "sha512-eeqEe77QrA6auZxNHIp+1TzHQ0HBKf5V6c8zcaYZ134EJe1lCi+fjXATkNiEEfbG+e50nu02GLvUtmZcGOYabQ==",
       "inBundle": true,
       "dependencies": {
         "@npmcli/git": "^4.0.0",
diff --git a/package.json b/package.json
@@ -102,7 +102,7 @@
     "npm-user-validate": "^2.0.0",
     "npmlog": "^7.0.1",
     "p-map": "^4.0.0",
-    "pacote": "^15.1.0",
+    "pacote": "^15.1.1",
     "parse-conflict-json": "^3.0.0",
     "proc-log": "^3.0.0",
     "qrcode-terminal": "^0.12.0",

Original file line number	Diff line number	Diff line change
`@@ -425,7 +425,7 @@ class FetcherBase {`
`425`	`425`	`return ((mode \| m) & ~this.umask) \| exe \| 0o600`
`426`	`426`	`}`
`427`	`427`
`428`		`- [_tarxOptions] ({ cwd, uid, gid }) {`
	`428`	`+ [_tarxOptions] ({ cwd }) {`
`429`	`429`	`const sawIgnores = new Set()`
`430`	`430`	`return {`
`431`	`431`	`cwd,`
`@@ -460,9 +460,9 @@ class FetcherBase {`
`460`	`460`	`log.warn('tar', code, msg)`
`461`	`461`	`log.silly('tar', code, msg, data)`
`462`	`462`	`},`
`463`		`- uid,`
`464`		`- gid,`
`465`	`463`	`umask: this.umask,`
	`464`	`+ // always ignore ownership info from tarball metadata`
	`465`	`+ preserveOwner: false,`
`466`	`466`	`}`
`467`	`467`	`}`
`468`	`468`	`}`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "pacote",`
`3`		`- "version": "15.1.0",`
	`3`	`+ "version": "15.1.1",`
`4`	`4`	`"description": "JavaScript package downloader",`
`5`	`5`	`"author": "GitHub Inc.",`
`6`	`6`	`"bin": {`