From a7264165c210c133d36b456b03272201d0a71513 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Tue, 3 Feb 2026 08:41:38 +0000
Subject: [PATCH] fix: deps/npm/node_modules/libnpmdiff/package.json to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15127355
---
 deps/npm/node_modules/libnpmdiff/package.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/deps/npm/node_modules/libnpmdiff/package.json b/deps/npm/node_modules/libnpmdiff/package.json
index 8979bc919919ad..354c5a16f22ed6 100644
--- a/deps/npm/node_modules/libnpmdiff/package.json
+++ b/deps/npm/node_modules/libnpmdiff/package.json
@@ -47,15 +47,15 @@
     "tap": "^16.0.1"
   },
   "dependencies": {
-    "@npmcli/arborist": "^6.1.5",
+    "@npmcli/arborist": "^9.0.0",
     "@npmcli/disparity-colors": "^3.0.0",
     "@npmcli/installed-package-contents": "^2.0.0",
     "binary-extensions": "^2.2.0",
     "diff": "^5.1.0",
     "minimatch": "^5.1.1",
     "npm-package-arg": "^10.1.0",
-    "pacote": "^15.0.7",
-    "tar": "^6.1.13"
+    "pacote": "^21.0.1",
+    "tar": "^7.5.7"
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",