From 624179f8b0b280598e164af86baea908d2c178bd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 22 Jun 2026 23:25:25 +0000
Subject: [PATCH] chore(deps): bump tar from 7.5.2 to 7.5.16

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.2 to 7.5.16.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.2...v7.5.16)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.16
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json                | 53 +++++++++++---------------------
 packages/a2a-server/package.json |  2 +-
 packages/cli/package.json        |  2 +-
 3 files changed, 20 insertions(+), 37 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 47c9b7977..8f2ac7f17 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18766,6 +18766,22 @@
         "url": "https://opencollective.com/webpack"
       }
     },
+    "node_modules/tar": {
+      "version": "7.5.16",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.16.tgz",
+      "integrity": "sha512-56adEpPMouktRlBLXiaYFFzZ/3+JXa8P9n7WbR+ibIjtviN55mEaOkiysCnPnWm+7kkui1Dn8J9l+g6zV8731w==",
+      "license": "BlueOak-1.0.0",
+      "dependencies": {
+        "@isaacs/fs-minipass": "^4.0.0",
+        "chownr": "^3.0.0",
+        "minipass": "^7.1.2",
+        "minizlib": "^3.1.0",
+        "yallist": "^5.0.0"
+      },
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/tar-fs": {
       "version": "2.1.4",
       "resolved": "https://registry.npmjs.org/tar-fs/-/tar-fs-2.1.4.tgz",
@@ -20814,7 +20830,7 @@
         "dotenv": "^16.4.5",
         "express": "^5.1.0",
         "fs-extra": "^11.3.0",
-        "tar": "^7.5.2",
+        "tar": "^7.5.16",
         "uuid": "^11.1.0",
         "winston": "^3.17.0",
         "ws": "^8.18.3"
@@ -21073,22 +21089,6 @@
         "node": ">= 18"
       }
     },
-    "packages/a2a-server/node_modules/tar": {
-      "version": "7.5.2",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/fs-minipass": "^4.0.0",
-        "chownr": "^3.0.0",
-        "minipass": "^7.1.2",
-        "minizlib": "^3.1.0",
-        "yallist": "^5.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "packages/a2a-server/node_modules/type-is": {
       "version": "2.0.1",
       "resolved": "https://registry.npmjs.org/type-is/-/type-is-2.0.1.tgz",
@@ -22229,7 +22229,6 @@
     "packages/cli": {
       "name": "@terminai/cli",
       "version": "0.28.0",
-      "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@agentclientprotocol/sdk": "^0.11.0",
@@ -22266,7 +22265,7 @@
         "string-width": "^8.1.0",
         "strip-ansi": "^7.1.0",
         "strip-json-comments": "^3.1.1",
-        "tar": "^7.5.2",
+        "tar": "^7.5.16",
         "tinygradient": "^1.1.5",
         "undici": "^7.10.0",
         "wrap-ansi": "9.0.2",
@@ -22329,22 +22328,6 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
-    "packages/cli/node_modules/tar": {
-      "version": "7.5.2",
-      "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.2.tgz",
-      "integrity": "sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==",
-      "license": "BlueOak-1.0.0",
-      "dependencies": {
-        "@isaacs/fs-minipass": "^4.0.0",
-        "chownr": "^3.0.0",
-        "minipass": "^7.1.2",
-        "minizlib": "^3.1.0",
-        "yallist": "^5.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
     "packages/cli/node_modules/undici-types": {
       "version": "6.21.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
diff --git a/packages/a2a-server/package.json b/packages/a2a-server/package.json
index ab084b3cd..6c9258c61 100644
--- a/packages/a2a-server/package.json
+++ b/packages/a2a-server/package.json
@@ -32,7 +32,7 @@
     "dotenv": "^16.4.5",
     "express": "^5.1.0",
     "fs-extra": "^11.3.0",
-    "tar": "^7.5.2",
+    "tar": "^7.5.16",
     "uuid": "^11.1.0",
     "winston": "^3.17.0",
     "ws": "^8.18.3"
diff --git a/packages/cli/package.json b/packages/cli/package.json
index 208cd53e7..8fd1f44b6 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -67,7 +67,7 @@
     "string-width": "^8.1.0",
     "strip-ansi": "^7.1.0",
     "strip-json-comments": "^3.1.1",
-    "tar": "^7.5.2",
+    "tar": "^7.5.16",
     "tinygradient": "^1.1.5",
     "undici": "^7.10.0",
     "wrap-ansi": "9.0.2",