fix: bump tape from 5.9.0 to 5.10.1

[dependabot]

Bumps tape from 5.9.0 to 5.10.1.

Changelog

Sourced from tape's changelog.

v5.10.1 - 2026-06-11

Commits

• [Fix] types: export Test and the callback types from the tape namespace 7ebe323

v5.10.0 - 2026-06-09

Fixed

• [New] opts.timeout: add ignoreSyncTimeout to optionally fail blocking tests that exceed the timeout [#623](https://github.com/tape-testing/tape/issues/623)

Commits

• [New] add types 3bd17c3
• [Tests] use string encoding with concat-stream and exec d8d42b6
• [Dev Deps] update eslint 4447d26
• [actions] update workflows 1d79ea3
• [eslint] fix array bracket spacing 011fa27
• [Refactor] minor cleanups 39470e7
• [Tests] avoid relying on implicit toStrings ceca8d5
• [Refactor] avoid needing a call-bound push 0f12b31
• [actions] split out node 10-20, and 20+ 7b291f5
• [Refactor] use es-object-atoms 6b20c90
• [Dev Deps] update @ljharb/eslint-config, auto-changelog, eslint, npmignore cf20e24
• [Deps] update call-bind, hasown, resolve, string.prototype.trim ffce2c3
• [Deps] update call-bound, has-dynamic-import, is-regex, object.assign f7630c3
• [Deps] update array.prototype.every, call-bind, string.prototype.trim 3d0107a
• [Refactor] use call-bound directly 658126c
• [patch] remove never-published helper file c28f3c7
• [Deps] update for-each, object-inspect be106fd
• [Deps] update @ljharb/now 2d757f0
• [Tests] actually invoke Math.random 85ddba3
• [Deps] update call-bound ec3faf9
• [Deps] update for-each 861c17c
• [Deps] update @ljharb/through f7d074e
• [Dev Deps] update es-value-fixtures 5c133bb
• [Dev Deps] update array.prototype.flatmap 33a1036
• [Deps] update is-regex d7c9ad3
• [Deps] update object-inspect ed50350
• [Dev Deps] update es-value-fixtures 4bcfc8b

Commits

• c4a7b4a v5.10.1
• 7ebe323 [Fix] types: export Test and the callback types from the tape namespace
• a2ecfa2 v5.10.0
• c28f3c7 [patch] remove never-published helper file
• 2d757f0 [Deps] update @ljharb/now
• 3bd17c3 [New] add types
• 4447d26 [Dev Deps] update eslint
• 6b20c90 [Refactor] use es-object-atoms
• 1d79ea3 [actions] update workflows
• 0212325 [New] opts.timeout: add ignoreSyncTimeout to optionally fail blocking tes...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	tape@​5.10.1

View full report

[socket-security]

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert  (click "▶" to expand/collapse)
Warn		Obfuscated code: npm es-abstract is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: pnpm-lock.yaml → npm/tape@5.10.1 → npm/es-abstract@1.24.2 ℹ Read more on: This package | This alert | What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/es-abstract@1.24.2. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report