From 692810ece0facfabfb405be7852903aca419da9a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 08:36:02 +0000
Subject: [PATCH] Bump tar from 7.5.7 to 7.5.8

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.7 to 7.5.8.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.7...v7.5.8)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.8
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/build-tools/package.json        |  2 +-
 packages/eas-cli/package.json            |  2 +-
 packages/local-build-plugin/package.json |  2 +-
 packages/worker/package.json             |  2 +-
 yarn.lock                                | 16 ++++++++--------
 5 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/packages/build-tools/package.json b/packages/build-tools/package.json
index dc81358a62..176fdd2f39 100644
--- a/packages/build-tools/package.json
+++ b/packages/build-tools/package.json
@@ -69,7 +69,7 @@
     "resolve-from": "^5.0.0",
     "retry": "^0.13.1",
     "semver": "^7.6.2",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "9.0.1",
     "yaml": "^2.8.1",
     "zod": "^4.3.5"
diff --git a/packages/eas-cli/package.json b/packages/eas-cli/package.json
index c2d8674855..7c74079d3d 100644
--- a/packages/eas-cli/package.json
+++ b/packages/eas-cli/package.json
@@ -117,7 +117,7 @@
     "semver": "7.5.4",
     "set-interval-async": "3.0.3",
     "slash": "3.0.0",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "tar-stream": "3.1.7",
     "terminal-link": "2.1.1",
     "ts-deepmerge": "6.2.0",
diff --git a/packages/local-build-plugin/package.json b/packages/local-build-plugin/package.json
index e59caa2eb0..ec6ee7715d 100644
--- a/packages/local-build-plugin/package.json
+++ b/packages/local-build-plugin/package.json
@@ -39,7 +39,7 @@
     "lodash": "^4.17.21",
     "nullthrows": "^1.1.1",
     "semver": "^7.6.2",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "^9.0.1"
   },
   "devDependencies": {
diff --git a/packages/worker/package.json b/packages/worker/package.json
index 35e84ec2be..562713f0af 100644
--- a/packages/worker/package.json
+++ b/packages/worker/package.json
@@ -47,7 +47,7 @@
     "node-os-utils": "1.3.7",
     "nullthrows": "1.1.1",
     "semver": "7.6.3",
-    "tar": "7.5.7",
+    "tar": "7.5.8",
     "uuid": "3.4.0",
     "uuidv7": "1.1.0",
     "ws": "8.18.0",
diff --git a/yarn.lock b/yarn.lock
index 60b51f3870..995975f908 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2074,7 +2074,7 @@ __metadata:
     resolve-from: "npm:^5.0.0"
     retry: "npm:^0.13.1"
     semver: "npm:^7.6.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:^29.1.4"
     ts-mockito: "npm:^2.6.1"
     tslib: "npm:^2.6.3"
@@ -2763,7 +2763,7 @@ __metadata:
     nullthrows: "npm:1.1.1"
     semver: "npm:7.6.3"
     supertest: "npm:7.2.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:29.1.4"
     typescript: "npm:5.5.4"
     uuid: "npm:3.4.0"
@@ -10141,7 +10141,7 @@ __metadata:
     lodash: "npm:^4.17.21"
     nullthrows: "npm:^1.1.1"
     semver: "npm:^7.6.2"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     ts-jest: "npm:^29.1.4"
     typescript: "npm:^5.5.4"
     uuid: "npm:^9.0.1"
@@ -10280,7 +10280,7 @@ __metadata:
     semver: "npm:7.5.4"
     set-interval-async: "npm:3.0.3"
     slash: "npm:3.0.0"
-    tar: "npm:7.5.7"
+    tar: "npm:7.5.8"
     tar-stream: "npm:3.1.7"
     terminal-link: "npm:2.1.1"
     ts-deepmerge: "npm:6.2.0"
@@ -20263,16 +20263,16 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:7.5.7":
-  version: 7.5.7
-  resolution: "tar@npm:7.5.7"
+"tar@npm:7.5.8":
+  version: 7.5.8
+  resolution: "tar@npm:7.5.8"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10c0/51f261afc437e1112c3e7919478d6176ea83f7f7727864d8c2cce10f0b03a631d1911644a567348c3063c45abdae39718ba97abb073d22aa3538b9a53ae1e31c
+  checksum: 10c0/8569db1b49f5d72084cbdcad9d2b39fcc115993186455aa052c1da0a2739b20e2d94af6a23609fc25d3ae63c9fed8b159f3b1d16b699e9ef25e3b8464603d153
   languageName: node
   linkType: hard