fix: Upgrade tar package to ^7.5.3 - CVE-2026-23745 - HIGH

[cclauss]

Fixes: #932

• Upgrade tar package to ^7.5.3 - CVE-2026-23745 - HIGH #932

[Copilot]

Pull request overview

This pull request upgrades the tar package from version ^7.4.0 to ^7.5.3 to address a security vulnerability referenced as CVE-2026-23745.

Changes:

• Upgrades tar package to version 7.5.3
• Upgrades minizlib dependency from 3.0.1 to 3.1.0
• Removes several transitive dependencies (jackspeak, @isaacs/cliui, mkdirp, rimraf, and others) that are no longer required

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
package.json	Updates tar dependency version from ^7.4.0 to ^7.5.3
package-lock.json	Updates tar to 7.5.3, minizlib to 3.1.0, removes obsolete transitive dependencies, and adjusts peer dependency markers

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cclauss]

% npm audit

aws-sdk >=2.0.1
JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3 - GHSA-j965-2qgj-vjmq
fix available via npm audit fix --force
Will install aws-sdk@1.18.0, which is a breaking change
node_modules/aws-sdk

1 low severity vulnerability

---

https://www.npmjs.com/package/aws-sdk -->

AWS SDK for JavaScript (v2)

🚫 End-of-support as of September 8, 2025

---

https://github.com/aws/aws-sdk-js
https://github.com/aws/aws-sdk-js-v3
@Mind0xP