build(deps): bump tar from 7.5.3 to 7.5.4 (#1658)

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.3 to 7.5.4.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.3...v7.5.4)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

diff --git a/package.json b/package.json
index 7995da8b5329c6e59c67ab404860ee1c1fc9e696..a41cddf46aba43dee5f88c4070eeb2df7a5ce069 100644 (file)
--- a/package.json
+++ b/package.json
@@ -89,7 +89,7 @@
     "mnemonist": "0.40.3",
     "mongodb": "^7.0.0",
     "poolifier": "^5.1.7",
-    "tar": "^7.5.2",
+    "tar": "^7.5.4",
     "winston": "^3.19.0",
     "winston-daily-rotate-file": "^5.0.0",
     "ws": "^8.19.0"

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8a58d29dd9b486820dd5e3fafc8b1d46c4c5e8a2..c79dc1fa572e973a76f1ba4827082f44bdfa3302 100644 (file)
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -61,8 +61,8 @@ importers:
         specifier: ^5.1.7
         version: 5.1.7
       tar:
-        specifier: ^7.5.2
-        version: 7.5.3
+        specifier: ^7.5.4
+        version: 7.5.4
       winston:
         specifier: ^3.19.0
         version: 3.19.0
@@ -5558,9 +5558,10 @@ packages:
   tar@6.2.1:
     resolution: {integrity: sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==}
     engines: {node: '>=10'}
+    deprecated: Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exhorbitant rates) by contacting i@izs.me
 
-  tar@7.5.3:
-    resolution: {integrity: sha512-ENg5JUHUm2rDD7IvKNFGzyElLXNjachNLp6RaGf4+JOgxXHkqA+gq81ZAMCUmtMtqBsoU62lcp6S27g1LCYGGQ==}
+  tar@7.5.4:
+    resolution: {integrity: sha512-AN04xbWGrSTDmVwlI4/GTlIIwMFk/XEv7uL8aa57zuvRy6s4hdBed+lVq2fAZ89XDa7Us3ANXcE3Tvqvja1kTA==}
     engines: {node: '>=18'}
 
   tarn@3.0.2:
@@ -12360,7 +12361,7 @@ snapshots:
       mkdirp: 1.0.4
       yallist: 4.0.0
 
-  tar@7.5.3:
+  tar@7.5.4:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0