bump tar to 7.5.8 to fix GHSA-83g3-92jg-28cx

sbouchet · sbouchet · commit 43252f8471c9 · 2026-02-18T13:00:44.000+01:00
Signed-off-by: Stephane Bouchet &lt;sbouchet@redhat.com&gt;
diff --git a/.rebase/add/code/build/npm/gyp/package.json b/.rebase/add/code/build/npm/gyp/package.json
@@ -1,6 +1,6 @@
 {
     "overrides": {
         "glob": "10.5.0",
-        "tar": "^7.5.7" 
+        "tar": "^7.5.8" 
     }
 }
diff --git a/.rebase/add/code/package.json b/.rebase/add/code/package.json
@@ -33,6 +33,6 @@
             "form-data": "4.0.4"
         },
         "lodash": "^4.17.23",
-        "tar": "^7.5.7"
+        "tar": "^7.5.8"
     }
 }
diff --git a/code/build/npm/gyp/package-lock.json b/code/build/npm/gyp/package-lock.json
diff --git a/code/build/npm/gyp/package.json b/code/build/npm/gyp/package.json
@@ -8,7 +8,7 @@
   },
   "overrides": {
     "glob": "10.5.0",
-    "tar": "^7.5.7"
+    "tar": "^7.5.8"
   },
   "scripts": {}
 }
diff --git a/code/package-lock.json b/code/package-lock.json
diff --git a/code/package.json b/code/package.json
@@ -254,7 +254,7 @@
     "@azure/core-http": {
       "form-data": "4.0.4"
     },
-    "tar": "^7.5.7",
+    "tar": "^7.5.8",
     "lodash": "^4.17.23"
   },
   "repository": {
