[Manual Backport 2.19][CVE-2025-48387] Bump tar-fs from 2.1.2 to 2.1.3 and from 3.0.8 to 3.1.0 (#10227)

Manual backport part of changes in #10225

Signed-off-by: Anan Zhuang <[email protected]>
Co-authored-by: Rishabh Singh <[email protected]>

Author: ananzh

packages/osd-opensearch/package.json

@@ -23,7 +23,7 @@
     "glob": "^7.1.7",
     "node-fetch": "^2.6.7",
     "simple-git": "^3.16.0",
-    "tar-fs": "^2.1.0",
+    "tar-fs": "^2.1.3",
     "tree-kill": "^1.2.2",
     "yauzl": "^2.10.0"
   },

packages/osd-test/package.json

@@ -36,7 +36,7 @@
     "parse-link-header": "^2.0.0",
     "rxjs": "^6.5.5",
     "strip-ansi": "^6.0.0",
-    "tar-fs": "^2.1.0",
+    "tar-fs": "^2.1.3",
     "xml2js": "^0.5.0",
     "zlib": "^1.0.5"
   }

yarn.lock

@@ -16673,10 +16673,10 @@ tape@^5.0.1:
     string.prototype.trim "^1.2.5"
     through "^2.3.8"
 
-tar-fs@^2.1.0:
-  version "2.1.1"
-  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.1.tgz#489a15ab85f1f0befabb370b7de4f9eb5cbe8784"
-  integrity sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==
+tar-fs@^2.1.3:
+  version "2.1.3"
+  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.3.tgz#fb3b8843a26b6f13a08e606f7922875eb1fbbf92"
+  integrity sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==
   dependencies:
     chownr "^1.1.1"
     mkdirp-classic "^0.5.2"