fix: Backport transitive dependency bumps to 1.x (#26260)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Author: shortstacked

package.json

@@ -119,15 +119,22 @@
       "validator": "13.15.26",
       "zod": "3.25.67",
       "js-yaml": "4.1.1",
-      "tar": "7.5.7",
+      "tar": "^7.5.8",
       "lodash": "4.17.23",
       "lodash-es": "4.17.23",
       "undici@6": "6.23.0",
       "undici@7": "7.18.2",
       "node-forge": "1.3.2",
       "body-parser": "2.2.1",
       "@isaacs/brace-expansion@5": "5.0.1",
-      "fast-xml-parser@5": "5.3.4",
+      "fast-xml-parser": "5.3.6",
+      "ajv@6": "6.14.0",
+      "ajv@7": "8.18.0",
+      "ajv@8": "8.18.0",
+      "bn.js@4": "5.2.3",
+      "bn.js@5": "5.2.3",
+      "minimatch@9": "10.2.1",
+      "minimatch@10": "10.2.1",
       "diff@5": "5.2.2",
       "glob@10": "10.5.0",
       "glob@7": "7.2.3",