From 4e30a1da49682c3dccaf6335ffa059e3be3b5f42 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 16 Jan 2026 21:33:54 +0000
Subject: [PATCH] chore(deps): update dependency tar to v7.5.3 [security]

---
 packages/cli/package/package.json |  2 +-
 packages/cli/package/yarn.lock    | 36 +++++++++++++++++++++++++------
 2 files changed, 30 insertions(+), 8 deletions(-)

diff --git a/packages/cli/package/package.json b/packages/cli/package/package.json
index b7830ffd4..57fbb1fe2 100644
--- a/packages/cli/package/package.json
+++ b/packages/cli/package/package.json
@@ -121,7 +121,7 @@
     "oclif": "patch:oclif@patch%3Aoclif@npm%253A4.15.9%23~/.yarn/patches/oclif-npm-4.15.9-f51cd140c1.patch%3A%3Aversion=4.15.9&hash=ce7fb7#~/.yarn/patches/oclif-patch-c5b232dd7e.patch",
     "proper-lockfile": "4.1.2",
     "shx": "0.3.4",
-    "tar": "7.4.3",
+    "tar": "7.5.3",
     "ts-prune": "0.10.3",
     "ts-unused-exports": "10.1.0",
     "tslib": "2.8.0",
diff --git a/packages/cli/package/yarn.lock b/packages/cli/package/yarn.lock
index 93029f0ff..1c463fe2a 100644
--- a/packages/cli/package/yarn.lock
+++ b/packages/cli/package/yarn.lock
@@ -2022,7 +2022,7 @@ __metadata:
     proper-lockfile: "npm:4.1.2"
     shx: "npm:0.3.4"
     strip-ansi: "npm:^7.1.0"
-    tar: "npm:7.4.3"
+    tar: "npm:7.5.3"
     ts-prune: "npm:0.10.3"
     ts-unused-exports: "npm:10.1.0"
     tslib: "npm:2.8.0"
@@ -10381,6 +10381,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"minizlib@npm:^3.1.0":
+  version: 3.1.0
+  resolution: "minizlib@npm:3.1.0"
+  dependencies:
+    minipass: "npm:^7.1.2"
+  checksum: 10c0/5aad75ab0090b8266069c9aabe582c021ae53eb33c6c691054a13a45db3b4f91a7fb1bd79151e6b4e9e9a86727b522527c0a06ec7d45206b745d54cd3097bcec
+  languageName: node
+  linkType: hard
+
 "mkdirp-classic@npm:^0.5.2":
   version: 0.5.3
   resolution: "mkdirp-classic@npm:0.5.3"
@@ -12951,17 +12960,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:7.4.3, tar@npm:^7.0.0":
-  version: 7.4.3
-  resolution: "tar@npm:7.4.3"
+"tar@npm:7.5.3":
+  version: 7.5.3
+  resolution: "tar@npm:7.5.3"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
-    minizlib: "npm:^3.0.1"
-    mkdirp: "npm:^3.0.1"
+    minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/d4679609bb2a9b48eeaf84632b6d844128d2412b95b6de07d53d8ee8baf4ca0857c9331dfa510390a0727b550fd543d4d1a10995ad86cdf078423fbb8d99831d
+  checksum: 10c0/e5e3237bca325fbb33282d92d9807f4c8d81abaf71bf2627efdf93bd5610c146460c78fc7e9767d4ab5ae3c0b18af8197314c964f8cbd23b30b25bf4d42d7cb4
   languageName: node
   linkType: hard
 
@@ -12979,6 +12987,20 @@ __metadata:
   languageName: node
   linkType: hard
 
+"tar@npm:^7.0.0":
+  version: 7.4.3
+  resolution: "tar@npm:7.4.3"
+  dependencies:
+    "@isaacs/fs-minipass": "npm:^4.0.0"
+    chownr: "npm:^3.0.0"
+    minipass: "npm:^7.1.2"
+    minizlib: "npm:^3.0.1"
+    mkdirp: "npm:^3.0.1"
+    yallist: "npm:^5.0.0"
+  checksum: 10c0/d4679609bb2a9b48eeaf84632b6d844128d2412b95b6de07d53d8ee8baf4ca0857c9331dfa510390a0727b550fd543d4d1a10995ad86cdf078423fbb8d99831d
+  languageName: node
+  linkType: hard
+
 "text-table@npm:^0.2.0":
   version: 0.2.0
   resolution: "text-table@npm:0.2.0"