Dependency security updates

[dmattia]

This PR updates tar and lodash to address multiple Dependabot security advisories.

Yarn resolutions were used to force the minimum required versions for these transitive dependencies.

• tar is now resolved to 7.5.9 (addresses advisories requiring >=7.5.3, >=7.5.4, >=7.5.7, >=7.5.8).
• lodash is now resolved to 4.17.23 (addresses advisory requiring >=4.17.23).

All tests (yarn test) and build (yarn build) passed after the update.

Related Issues

• [none]

Security Implications

[none]

System Availability

[none]

---

 

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}