[Snyk] Security upgrade tar from 6.2.1 to 7.5.21

[winjer]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Uncontrolled Recursion SNYK-JS-TAR-18319500	738

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Recursion

[winjer]

This is a major version upgrade from v6 to v7 which introduces significant breaking changes.

Key Breaking Changes:

• Node.js Version Support: Support for Node.js versions below 18.0 has been dropped. [1]
• File Mode Permissions (chmod): The default behavior for setting file permissions during extraction has been reversed. The chmod option now defaults to false, meaning file modes from the archive are not applied by default. The previous noChmod option is deprecated. [1]
• TypeScript Rewrite: The package has been rewritten in TypeScript and now provides a hybrid ESM/CJS interface. This could affect how the module is imported or used in certain build tools. [1]

Recommendation:
Review any code that uses tar.extract() or tar.x(). If your application relies on file permissions being restored from the archive, you must now explicitly pass the { chmod: true } option to maintain the previous behavior. [1]

Source: Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.