From 75c6cf51e8c0db7a3b87d8011ba4d03605383673 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 25 Jul 2026 13:55:30 +0000
Subject: [PATCH] Bump tar from 7.5.12 to 7.5.20

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.12 to 7.5.20.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.12...v7.5.20)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 packages/uppy/package.json |  2 +-
 yarn.lock                  | 17 +++++++++++++++--
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/packages/uppy/package.json b/packages/uppy/package.json
index a98a0bc195..45d2b01c63 100644
--- a/packages/uppy/package.json
+++ b/packages/uppy/package.json
@@ -89,7 +89,7 @@
     "postcss": "^8.5.15",
     "postcss-cli": "^11.0.1",
     "sass": "^1.89.2",
-    "tar": "^7.5.7",
+    "tar": "^7.5.20",
     "typescript": "^5.8.3"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 2bd66dd77f..5937170cf5 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -27161,7 +27161,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"tar@npm:^7.4.3, tar@npm:^7.5.7":
+"tar@npm:^7.4.3":
   version: 7.5.12
   resolution: "tar@npm:7.5.12"
   dependencies:
@@ -27174,6 +27174,19 @@ __metadata:
   languageName: node
   linkType: hard
 
+"tar@npm:^7.5.20":
+  version: 7.5.20
+  resolution: "tar@npm:7.5.20"
+  dependencies:
+    "@isaacs/fs-minipass": "npm:^4.0.0"
+    chownr: "npm:^3.0.0"
+    minipass: "npm:^7.1.2"
+    minizlib: "npm:^3.1.0"
+    yallist: "npm:^5.0.0"
+  checksum: 10/90a0fe423ac921197ad5eefc5e5f7ad7f42b06e80444c8c347c1e4112384cbe9cb53ade3ef71748eed3684888756869c2aeef6b6303c766101f3217e254d4be9
+  languageName: node
+  linkType: hard
+
 "tar@npm:^7.5.4":
   version: 7.5.15
   resolution: "tar@npm:7.5.15"
@@ -28114,7 +28127,7 @@ __metadata:
     postcss: "npm:^8.5.15"
     postcss-cli: "npm:^11.0.1"
     sass: "npm:^1.89.2"
-    tar: "npm:^7.5.7"
+    tar: "npm:^7.5.20"
     typescript: "npm:^5.8.3"
   languageName: unknown
   linkType: soft