From c5d5e60c9188c43caa6b7118cce8d18644518202 Mon Sep 17 00:00:00 2001
From: Jean Paul Elisa NIYOKWIZERWA <niyokwizerwajeanpaulelisa@gmail.com>
Date: Fri, 31 Jul 2026 18:54:02 +0200
Subject: [PATCH] chore(deps): bump tar from 7.5.11 to 7.5.22 across 3
 lockfiles
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Closes 12 Dependabot alerts (#62, #66, #70, #88-#99, #105-#107) covering
6 advisories, including the critical GHSA-23hp-3jrh-7fpw (CVE-2026-59873).

Required floor was 7.5.21; 7.5.22 is the current release. Lockfile-only —
tar is transitive via node-gyp under the existing `^7.5.4` range, so no
manifest change is needed and tar's own dependency ranges are unchanged.

Verified: yarn build + 286 tests pass.
---
 examples/react-demo/yarn.lock | 6 +++---
 playground/yarn.lock          | 6 +++---
 yarn.lock                     | 6 +++---
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/examples/react-demo/yarn.lock b/examples/react-demo/yarn.lock
index 572714f..dccf12c 100644
--- a/examples/react-demo/yarn.lock
+++ b/examples/react-demo/yarn.lock
@@ -2160,15 +2160,15 @@ __metadata:
   linkType: hard
 
 "tar@npm:^7.5.4":
-  version: 7.5.11
-  resolution: "tar@npm:7.5.11"
+  version: 7.5.22
+  resolution: "tar@npm:7.5.22"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
+  checksum: 10c0/1311f6be85a8157ac4c9147bae43e13923d2a1aae15e4aa1bd5239e4e03d2cf53cfe103dde7f35832fbb4c938b042856bc8e9a0afd29abd05e2d1608788c4fea
   languageName: node
   linkType: hard
 
diff --git a/playground/yarn.lock b/playground/yarn.lock
index b1e6813..c21fb16 100644
--- a/playground/yarn.lock
+++ b/playground/yarn.lock
@@ -1576,15 +1576,15 @@ __metadata:
   linkType: hard
 
 "tar@npm:^7.5.4":
-  version: 7.5.11
-  resolution: "tar@npm:7.5.11"
+  version: 7.5.22
+  resolution: "tar@npm:7.5.22"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
+  checksum: 10c0/1311f6be85a8157ac4c9147bae43e13923d2a1aae15e4aa1bd5239e4e03d2cf53cfe103dde7f35832fbb4c938b042856bc8e9a0afd29abd05e2d1608788c4fea
   languageName: node
   linkType: hard
 
diff --git a/yarn.lock b/yarn.lock
index dda8cf1..8af68ed 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -6962,15 +6962,15 @@ __metadata:
   linkType: hard
 
 "tar@npm:^7.5.4":
-  version: 7.5.11
-  resolution: "tar@npm:7.5.11"
+  version: 7.5.22
+  resolution: "tar@npm:7.5.22"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/b6bb420550ef50ef23356018155e956cd83282c97b6128d8d5cfe5740c57582d806a244b2ef0bf686a74ce526babe8b8b9061527623e935e850008d86d838929
+  checksum: 10c0/1311f6be85a8157ac4c9147bae43e13923d2a1aae15e4aa1bd5239e4e03d2cf53cfe103dde7f35832fbb4c938b042856bc8e9a0afd29abd05e2d1608788c4fea
   languageName: node
   linkType: hard