From 8785862a700d07e6f50eaad08166d2f7a743ad3d Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Wed, 21 Jan 2026 07:47:44 +0000
Subject: [PATCH] fix: deps/npm/node_modules/libnpmdiff/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15038581
---
 deps/npm/node_modules/libnpmdiff/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/deps/npm/node_modules/libnpmdiff/package.json b/deps/npm/node_modules/libnpmdiff/package.json
index ce6eb3531b32ed..4eb61a339d889b 100644
--- a/deps/npm/node_modules/libnpmdiff/package.json
+++ b/deps/npm/node_modules/libnpmdiff/package.json
@@ -46,15 +46,15 @@
     "tap": "^16.3.4"
   },
   "dependencies": {
-    "@npmcli/arborist": "^6.3.0",
+    "@npmcli/arborist": "^9.0.0",
     "@npmcli/disparity-colors": "^3.0.0",
     "@npmcli/installed-package-contents": "^2.0.2",
     "binary-extensions": "^2.2.0",
     "diff": "^5.1.0",
     "minimatch": "^9.0.0",
     "npm-package-arg": "^10.1.0",
-    "pacote": "^15.0.8",
-    "tar": "^6.1.13"
+    "pacote": "^21.0.1",
+    "tar": "^7.5.4"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",