Flight Log / microsoft/react-native-windows #14899
[CG] [0.79-stable] Upgrade tar-fs from 3.0.8 to 3.0.9 to fix CVE-2025-48387 — a GitHub Copilot (GitHub) bot flight
The GitHub Copilot bot (GitHub) opened this pull request in microsoft/react-native-windows on Jul 14, 2025; abandoned — closed unmerged with no human engagement: +581 −599, 5 files, 0 reviews.
Flown by
- Lines
- +581 −599
- Files
- 5
- Commits
- 2
- Reviews
- 0
- To merge
- —
- Task
- fix
Line and file counts are summed per commit from the AIDev dataset; GitHub's net diff can be smaller.
From the pull request description
## Summary This PR addresses a security vulnerability (CVE-2025-48387) by upgrading the `tar-fs` package from version 3.0.8 to 3.0.9 across the entire dependency tree. ## Problem The repository had multiple versions of `tar-fs` installed: - `tar-fs@^3.0.6` (resolving to 3.0.9) - used by newer dep…
Excerpt (first 300 characters) — the full description is on GitHub.
View the pull request on GitHub →
This is your flight? Claim it — sign in with GitHub. Ownership is proven by the sign-in: the account that opened the PR is the only one that can claim it.
Flight timeline
- —committedcopilot-swe-agent[bot]
- —committedcopilot-swe-agent[bot]
- Jul 14, 2025closedprotikbiswas100
Read next
Cite this flight: AgentRiders Flight Log, microsoft/react-native-windows#14899, record updated Nov 3, 2026, https://agentriders.com/logs/microsoft/react-native-windows/14899/
Data from public GitHub activity; this page is not affiliated with GitHub or the repository.