From 6d99ea17dca02082db572c31177dde8450dec503 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 30 Jul 2026 01:03:48 +0000
Subject: [PATCH] Bump tar and npm in /web

Bumps [tar](https://github.com/isaacs/node-tar) to 7.5.22 and updates ancestor dependency [npm](https://github.com/npm/cli). These dependencies need to be updated together.


Updates `tar` from 7.5.11 to 7.5.22
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.11...v7.5.22)

Updates `npm` from 10.9.8 to 10.9.9
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v10.9.9/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/compare/v10.9.8...v10.9.9)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: indirect
- dependency-name: npm
  dependency-version: 10.9.9
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 web/package-lock.json | 12 ++++++------
 web/package.json      |  2 +-
 2 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/web/package-lock.json b/web/package-lock.json
index b8abe518fd2..44de8f92947 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -29,7 +29,7 @@
         "lodash": "^4.17.21",
         "mdast-util-find-and-replace": "^3.0.1",
         "next": "^14.2.35",
-        "npm": "^10.8.0",
+        "npm": "^10.9.9",
         "postcss": "^8.4.31",
         "prismjs": "^1.29.0",
         "react": "^18.3.1",
@@ -8012,9 +8012,9 @@
       }
     },
     "node_modules/npm": {
-      "version": "10.9.8",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-10.9.8.tgz",
-      "integrity": "sha512-fYwb6ODSmHkqrJQQaCxY3M2lPf/mpgC7ik0HSzzIwG5CGtabRp4bNqikatvCoT42b5INQSqudVH0R7yVmC9hVg==",
+      "version": "10.9.9",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-10.9.9.tgz",
+      "integrity": "sha512-1g+6jLQvaIuB4zwvHL7yrXuXcWZwDsCtBX8bbWDqbvJSSr9nPiDDWTHNgwXR27iIcTTW7v3A57hDW9RYv2W4Yg==",
       "bundleDependencies": [
         "@isaacs/string-locale-compare",
         "@npmcli/arborist",
@@ -8155,7 +8155,7 @@
         "spdx-expression-parse": "^4.0.0",
         "ssri": "^12.0.0",
         "supports-color": "^9.4.0",
-        "tar": "^7.5.11",
+        "tar": "^7.5.22",
         "text-table": "~0.2.0",
         "tiny-relative-date": "^1.3.0",
         "treeverse": "^3.0.0",
@@ -10100,7 +10100,7 @@
       }
     },
     "node_modules/npm/node_modules/tar": {
-      "version": "7.5.11",
+      "version": "7.5.22",
       "inBundle": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
diff --git a/web/package.json b/web/package.json
index f47495d3d87..bbcd70fa9ee 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "lodash": "^4.17.21",
     "mdast-util-find-and-replace": "^3.0.1",
     "next": "^14.2.35",
-    "npm": "^10.8.0",
+    "npm": "^10.9.9",
     "postcss": "^8.4.31",
     "prismjs": "^1.29.0",
     "react": "^18.3.1",