From a2fa244dfc03465e34f2180490297d7e63845d7a Mon Sep 17 00:00:00 2001
From: Arman Jivanyan <arman.jivanyan@devexpress.com>
Date: Tue, 14 Jul 2026 15:44:38 +0400
Subject: [PATCH] fix security alerts

---
 tools/make-sbom/pnpm-lock.yaml      | 19 +++++++++++--------
 tools/make-sbom/pnpm-workspace.yaml |  4 ++++
 2 files changed, 15 insertions(+), 8 deletions(-)

diff --git a/tools/make-sbom/pnpm-lock.yaml b/tools/make-sbom/pnpm-lock.yaml
index 7743eedca..cb3dcd68e 100644
--- a/tools/make-sbom/pnpm-lock.yaml
+++ b/tools/make-sbom/pnpm-lock.yaml
@@ -4,6 +4,9 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
+overrides:
+  tar@<=7.5.15: ^7.5.16
+
 importers:
 
   .:
@@ -785,8 +788,8 @@ packages:
     resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
     engines: {node: '>=12'}
 
-  tar@7.5.15:
-    resolution: {integrity: sha512-dzGK0boVlC4W5QFuQN1EFSl3bIDYsk7Tj40U6eIBnK2k/8ml7TZ5agbI5j5+qnoVcAA+rNtBml8SEiLxZpNqRQ==}
+  tar@7.5.20:
+    resolution: {integrity: sha512-9FcyK4PA6+WbzlTM9WhQm6vB5W7cP7dUiPsv1g7YDwEQnQ1CGpK3MGlKk/ITVWMk05kHZuBhmVhiv8LZoy/PFQ==}
     engines: {node: '>=18'}
 
   toidentifier@1.0.1:
@@ -810,8 +813,8 @@ packages:
     engines: {node: '>=14.17'}
     hasBin: true
 
-  undici@7.27.2:
-    resolution: {integrity: sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==}
+  undici@7.28.0:
+    resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
     engines: {node: '>=20.18.1'}
 
   unpipe@1.0.0:
@@ -1031,7 +1034,7 @@ snapshots:
       read-package-json-fast: 5.0.0
       semver: 7.8.1
       ssri: 13.0.1
-      tar: 7.5.15
+      tar: 7.5.20
       treeverse: 3.0.0
       uuid: 14.0.0
       walk-up-path: 4.0.0
@@ -1241,7 +1244,7 @@ snapshots:
       parse5: 7.3.0
       parse5-htmlparser2-tree-adapter: 7.1.0
       parse5-parser-stream: 7.1.2
-      undici: 7.27.2
+      undici: 7.28.0
       whatwg-mimetype: 4.0.0
 
   chownr@3.0.0: {}
@@ -1765,7 +1768,7 @@ snapshots:
     dependencies:
       ansi-regex: 6.2.2
 
-  tar@7.5.15:
+  tar@7.5.20:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
@@ -1790,7 +1793,7 @@ snapshots:
   typescript@6.0.3:
     optional: true
 
-  undici@7.27.2: {}
+  undici@7.28.0: {}
 
   unpipe@1.0.0:
     optional: true
diff --git a/tools/make-sbom/pnpm-workspace.yaml b/tools/make-sbom/pnpm-workspace.yaml
index 4a292d73d..9b6fe1211 100644
--- a/tools/make-sbom/pnpm-workspace.yaml
+++ b/tools/make-sbom/pnpm-workspace.yaml
@@ -1,2 +1,6 @@
 minimumReleaseAgeExclude:
   - '@devexpress/sbom-toolkit'
+  - tar@7.5.16
+  - undici@7.28.0
+overrides:
+  tar@<=7.5.15: ^7.5.16