From bece8e383bf81df054b02de257c2b362558b7bf3 Mon Sep 17 00:00:00 2001
From: Sarah Backhouse <sarah.backhouse@jadu.net>
Date: Wed, 5 Nov 2025 15:23:46 +0000
Subject: [PATCH] Force use of a minimum version of tar-fs

---
 package-lock.json | 6 +++---
 package.json      | 3 ++-
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 50b1fa346..8ab8e9405 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15968,9 +15968,9 @@
       }
     },
     "node_modules/tar-fs": {
-      "version": "2.1.1",
-      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.1.tgz",
-      "integrity": "sha512-V0r2Y9scmbDRLCNex/+hYzvp/zyYjvFbHPNgVTKfQvVrb6guiE/fxP+XblDNR011utopbkex2nM4dHNV6GDsng==",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
+      "integrity": "sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 1c00c7d70..7f3693cdf 100644
--- a/package.json
+++ b/package.json
@@ -22,7 +22,8 @@
 },
 "overrides": {
   "minimist": "^1.2.6",
-  "form-data": "2.5.5"
+  "form-data": "2.5.5",
+  "tar-fs": "2.1.4"
 },
   "scripts": {
     "start": "docker compose up -d && grunt",