Release 1.10.5

semantic-release-bot · semantic-release-bot · commit 40d5f1fb77b4 · 2026-04-13T13:56:27.000Z
[skip ci] ## <small>1.10.5 (2026-04-13)</small> * fix: prevent symlink path traversal via pre-existing symlinks during tar extraction ([18def23](18def23))
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # Changelog
 
+## <small>1.10.5 (2026-04-13)</small>
+
+* fix: prevent symlink path traversal via pre-existing symlinks during tar extraction ([18def23](https://github.com/node-modules/compressing/commit/18def23))
+
 ## <small>1.10.4 (2026-01-28)</small>
 
 * fix: prevent arbitrary file write via symlink extraction (#133) ([8d16c19](https://github.com/node-modules/compressing/commit/8d16c19)), closes [#133](https://github.com/node-modules/compressing/issues/133)
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "compressing",
-  "version": "1.10.4",
+  "version": "1.10.5",
   "description": "Everything you need for compressing and uncompressing",
   "main": "index.js",
   "scripts": {

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "compressing",`
`3`		`- "version": "1.10.4",`
	`3`	`+ "version": "1.10.5",`
`4`	`4`	`"description": "Everything you need for compressing and uncompressing",`
`5`	`5`	`"main": "index.js",`
`6`	`6`	`"scripts": {`