From 22df92232d0fa7c31dcb7a51853ca053b9685d41 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Apr 2026 23:16:31 +0000
Subject: [PATCH] Bump tar from 7.5.12 to 7.5.13 in the npm-production group
 across 1 directory (#925)

Bump tar in the npm-production group across 1 directory

Bumps the npm-production group with 1 update in the / directory: [tar](https://github.com/isaacs/node-tar).


Updates `tar` from 7.5.12 to 7.5.13
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.12...v7.5.13)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm-production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 package-lock.json | 30 +++++++++++-------------------
 package.json      |  4 ++--
 2 files changed, 13 insertions(+), 21 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 572c7b8..08c2bee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -13,14 +13,14 @@
         "@actions/io": "^1.1.3",
         "minimatch": "^10.2.5",
         "node-stream-zip": "^1.15.0",
-        "tar": "^7.4.3",
+        "tar": "^7.5.13",
         "typed-rest-client": "^2.1.0"
       },
       "devDependencies": {
         "@jest/globals": "^29.7.0",
         "@types/jest": "^29.5.14",
         "@types/node": "^25.5.2",
-        "@types/tar": "^6.1.13",
+        "@types/tar": "^7.0.87",
         "@typescript-eslint/eslint-plugin": "^8.57.1",
         "@typescript-eslint/parser": "^8.57.1",
         "@vercel/ncc": "^0.38.3",
@@ -1638,13 +1638,14 @@
       "dev": true
     },
     "node_modules/@types/tar": {
-      "version": "6.1.13",
-      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-6.1.13.tgz",
-      "integrity": "sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==",
+      "version": "7.0.87",
+      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-7.0.87.tgz",
+      "integrity": "sha512-3IxNBV8LeY5oi2ZFpvAhOtW1+mHswkzM7BuisVrwJgPv67GBO2rkLPQlEKtzfHuLdhDDczhkCZeT+RuizMay4A==",
+      "deprecated": "This is a stub types definition. tar provides its own type definitions, so you do not need this installed.",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
-        "@types/node": "*",
-        "minipass": "^4.0.0"
+        "tar": "*"
       }
     },
     "node_modules/@types/yargs": {
@@ -6351,15 +6352,6 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
-    "node_modules/minipass": {
-      "version": "4.2.8",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz",
-      "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==",
-      "dev": true,
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/minizlib": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
@@ -7908,9 +7900,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.12",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.12.tgz",
-      "integrity": "sha512-9TsuLcdhOn4XztcQqhNyq1KOwOOED/3k58JAvtULiYqbO8B/0IBAAIE1hj0Svmm58k27TmcigyDI0deMlgG3uw==",
+      "version": "7.5.13",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.13.tgz",
+      "integrity": "sha512-tOG/7GyXpFevhXVh8jOPJrmtRpOTsYqUIkVdVooZYJS/z8WhfQUX8RJILmeuJNinGAMSu1veBr4asSHFt5/hng==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index d48db71..50aab38 100644
--- a/package.json
+++ b/package.json
@@ -75,14 +75,14 @@
     "@actions/io": "^1.1.3",
     "minimatch": "^10.2.5",
     "node-stream-zip": "^1.15.0",
-    "tar": "^7.4.3",
+    "tar": "^7.5.13",
     "typed-rest-client": "^2.1.0"
   },
   "devDependencies": {
     "@jest/globals": "^29.7.0",
     "@types/jest": "^29.5.14",
     "@types/node": "^25.5.2",
-    "@types/tar": "^6.1.13",
+    "@types/tar": "^7.0.87",
     "@typescript-eslint/eslint-plugin": "^8.57.1",
     "@typescript-eslint/parser": "^8.57.1",
     "@vercel/ncc": "^0.38.3",