chore(deps): upgrade tar to 7.5.4 to address CVE-2026-23950 (#3271)

Copilot · cclauss · web-flow · commit 7bf371c4dd7c · 2026-01-26T09:09:16.000-05:00
Co-authored-by: copilot-swe-agent[bot] &lt;198982749+Copilot@users.noreply.github.com&gt;
Co-authored-by: cclauss &lt;3709715+cclauss@users.noreply.github.com&gt;
diff --git a/package.json b/package.json
@@ -29,7 +29,7 @@
     "nopt": "^9.0.0",
     "proc-log": "^6.0.0",
     "semver": "^7.3.5",
-    "tar": "^7.5.2",
+    "tar": "^7.5.4",
     "tinyglobby": "^0.2.12",
     "which": "^6.0.0"
   },
