From 9b10bab85b9f83fabe31d28b19812d045144cbee Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 1 Jul 2026 23:03:57 +0000
Subject: [PATCH] chore(deps): bump tar and @types/tar

Bumps [tar](https://github.com/isaacs/node-tar) and [@types/tar](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/tar). These dependencies needed to be updated together.

Updates `tar` from 7.5.9 to 7.5.19
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.9...v7.5.19)

Updates `@types/tar` from 6.1.13 to 7.0.87
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/tar)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: "@types/tar"
  dependency-version: 7.0.87
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 33 +++++++++++++--------------------
 package.json      |  4 ++--
 2 files changed, 15 insertions(+), 22 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index c2f8276d0f..12d73658c5 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7,6 +7,9 @@
     "": {
       "name": "nativescript",
       "version": "9.0.6",
+      "bundleDependencies": [
+        "universal-analytics"
+      ],
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -55,7 +58,7 @@
         "simple-git": "3.30.0",
         "simple-plist": "1.4.0",
         "source-map": "0.7.6",
-        "tar": "7.5.9",
+        "tar": "7.5.19",
         "ts-morph": "25.0.1",
         "tunnel": "0.0.6",
         "typescript": "5.7.3",
@@ -93,7 +96,7 @@
         "@types/shelljs": "^0.8.11",
         "@types/sinon": "^17.0.3",
         "@types/tabtab": "^3.0.2",
-        "@types/tar": "6.1.13",
+        "@types/tar": "7.0.87",
         "@types/tunnel": "0.0.7",
         "@types/universal-analytics": "0.4.8",
         "@types/uuid": "^10.0.0",
@@ -1851,24 +1854,14 @@
       }
     },
     "node_modules/@types/tar": {
-      "version": "6.1.13",
-      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-6.1.13.tgz",
-      "integrity": "sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==",
+      "version": "7.0.87",
+      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-7.0.87.tgz",
+      "integrity": "sha512-3IxNBV8LeY5oi2ZFpvAhOtW1+mHswkzM7BuisVrwJgPv67GBO2rkLPQlEKtzfHuLdhDDczhkCZeT+RuizMay4A==",
+      "deprecated": "This is a stub types definition. tar provides its own type definitions, so you do not need this installed.",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "@types/node": "*",
-        "minipass": "^4.0.0"
-      }
-    },
-    "node_modules/@types/tar/node_modules/minipass": {
-      "version": "4.2.8",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz",
-      "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==",
-      "dev": true,
-      "license": "ISC",
-      "engines": {
-        "node": ">=8"
+        "tar": "*"
       }
     },
     "node_modules/@types/tunnel": {
@@ -11500,9 +11493,9 @@
       }
     },
     "node_modules/tar": {
-      "version": "7.5.9",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.9.tgz",
-      "integrity": "sha512-BTLcK0xsDh2+PUe9F6c2TlRp4zOOBMTkoQHQIWSIzI0R7KG46uEwq4OPk2W7bZcprBMsuaeFsqwYr7pjh6CuHg==",
+      "version": "7.5.19",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.19.tgz",
+      "integrity": "sha512-4LeEWl96twnS2Q7Bz4MGqgazLqO+hJN63GZxXoIqh1T3VweYD997gbU1ItNsQafqqXTXd5WFyFdReLtwvRBNiw==",
       "license": "BlueOak-1.0.0",
       "dependencies": {
         "@isaacs/fs-minipass": "^4.0.0",
diff --git a/package.json b/package.json
index 11a87e98c9..4594fd93d7 100644
--- a/package.json
+++ b/package.json
@@ -99,7 +99,7 @@
     "simple-git": "3.30.0",
     "simple-plist": "1.4.0",
     "source-map": "0.7.6",
-    "tar": "7.5.9",
+    "tar": "7.5.19",
     "ts-morph": "25.0.1",
     "tunnel": "0.0.6",
     "typescript": "5.7.3",
@@ -131,7 +131,7 @@
     "@types/shelljs": "^0.8.11",
     "@types/sinon": "^17.0.3",
     "@types/tabtab": "^3.0.2",
-    "@types/tar": "6.1.13",
+    "@types/tar": "7.0.87",
     "@types/tunnel": "0.0.7",
     "@types/universal-analytics": "0.4.8",
     "@types/uuid": "^10.0.0",