[rush] Upgrade tar to 7.5.6 to fix security vulnerability#5573

Merged

iclanton merged 14 commits intomainfrom

copilot/update-tar-dependency

Jan 27, 2026

Commits on Jan 27, 2026

Initial plan

Copilot
authored and
iclanton
committed
Upgrade tar from 6.2.1 to 7.5.6 to fix security vulnerability

Copilot
and
iclanton
committed
Add integration tests for npm and yarn modes with tar 7.x

Copilot
and
iclanton
committed
Translate bash test scripts to TypeScript using @rushstack/node-core-library

Copilot
and
iclanton
committed
Address code review feedback - use rig.json, Terminal, async operations, and correct package manager versions

Copilot
and
iclanton
committed
Address final code review feedback and add tests to CI/CD pipelines

Copilot
and
iclanton
committed
Fix CI pipeline steps and move @microsoft/rush to nonbrowser-approved-packages.json

Copilot
and
iclanton
committed
Add changelog entry for tar upgrade

Copilot
and
iclanton
committed
Fix changelog entry - use @microsoft/rush with type 'none' for lockstep versioning

Copilot
and
iclanton
committed
Update repo README with new integration test project

Copilot
and
iclanton
committed
Fix Windows path handling in testBuiltCodeAsync

Copilot
and
iclanton
committed
Address code review feedback - use ensureEmptyFolderAsync, verify symlinks, and consolidate require statements

authored and
iclanton
committed
Rush update.
iclanton
committed
Fix Windows path issue - use os.tmpdir() instead of hardcoded /tmp

Copilot
and
iclanton
committed