From 9e1b2b69ae1ee79405b96b498cfc4f5fbb4c563d Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 27 Aug 2026 19:47:49 +0000
Subject: [PATCH] chore(repo): Update dependency tar@<7.5.11 to v7.5.21
 [SECURITY]

---
 package.json        |  2 +-
 pnpm-lock.yaml      | 12 ++++++------
 pnpm-workspace.yaml |  2 ++
 3 files changed, 9 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index fc491f26024..012ad6bcc9c 100644
--- a/package.json
+++ b/package.json
@@ -185,7 +185,7 @@
       "smol-toml@<1.6.1": "1.6.1",
       "socket.io-parser@>=4.0.0 <4.2.6": "4.2.6",
       "svgo@>=3.0.0 <3.3.3": "3.3.3",
-      "tar@<7.5.11": "7.5.11",
+      "tar@<7.5.11": "7.5.21",
       "tmp@<0.2.6": "0.2.6",
       "undici-types@<7.16.0": "7.24.8",
       "utf-8-validate": "5.0.10"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 45745b15a08..374fbe29e38 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -102,7 +102,7 @@ overrides:
   smol-toml@<1.6.1: 1.6.1
   socket.io-parser@>=4.0.0 <4.2.6: 4.2.6
   svgo@>=3.0.0 <3.3.3: 3.3.3
-  tar@<7.5.11: 7.5.11
+  tar@<7.5.11: 7.5.21
   tmp@<0.2.6: 0.2.6
   undici-types@<7.16.0: 7.24.8
   utf-8-validate: 5.0.10
@@ -14171,8 +14171,8 @@ packages:
   tar-stream@3.1.7:
     resolution: {integrity: sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ==}
 
-  tar@7.5.11:
-    resolution: {integrity: sha512-ChjMH33/KetonMTAtpYdgUFr0tbz69Fp2v7zWxQfYZX4g5ZN2nOBXm1R2xyA+lMIKrLKIoKAwFj93jE/avX9cQ==}
+  tar@7.5.21:
+    resolution: {integrity: sha512-XdhtCvlMywwxpCW8YEq3lOXBJpUPTR2OHHcwLPO3HwsJqOHa2Ok/oJ7ruGzp+JrKoRPVCzJwAdEjqLW/vNRPHA==}
     engines: {node: '>=18'}
 
   term-size@2.2.1:
@@ -17599,7 +17599,7 @@ snapshots:
       source-map-support: 0.5.21
       stacktrace-parser: 0.1.11
       structured-headers: 0.4.1
-      tar: 7.5.11
+      tar: 7.5.21
       terminal-link: 2.1.1
       undici: 6.22.0
       wrap-ansi: 7.0.0
@@ -18281,7 +18281,7 @@ snapshots:
       node-fetch: 2.7.0
       nopt: 8.1.0
       semver: 7.7.4
-      tar: 7.5.11
+      tar: 7.5.21
     transitivePeerDependencies:
       - encoding
       - supports-color
@@ -31194,7 +31194,7 @@ snapshots:
       - bare-abort-controller
       - react-native-b4a
 
-  tar@7.5.11:
+  tar@7.5.21:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 8f3b74fa8bd..5288751a938 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -55,6 +55,8 @@ minimumReleaseAgeExclude:
   - fast-uri@3.1.5
   # Renovate security update: hono@4.12.34
   - hono@4.12.34
+  # Renovate security update: tar@7.5.21
+  - tar@7.5.21
 
 trustPolicy: no-downgrade
 trustPolicyExclude: