CVE-2025-64118 - dependency and subdependency update request for node-tar

[Amndeep7]

This project uses node-tar as a dependency and as a subdependency. That project has recently gotten the following CVE: CVE-2025-64118.

That CVE only applies to version 7.5.1. The versions in use within this project are 6.2.1 and 7.4.3.

When possible, please update this dependency to the latest version. The contributor's guide says that dependency update PRs are not welcome due to the use of dependabot, so until this dependency is properly updated, please ensure that the automation does not update the dependency to 7.5.1.

[github-actions]

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 7 days.

[Amndeep7]

Bump