chore: update dependency tar-fs@>=2.0.0 <2.1.3 to >=3.1.1 [security] - autoclosed

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
tar-fs@>=2.0.0 <2.1.3	[>=3.1.0 -> >=3.1.1](https://renovatebot.com/diffs/npm/tar-fs@&gt;&#x3D;2.0.0 <2.1.3/3.1.0/3.1.1)

GitHub Vulnerability Alerts

CVE-2025-59343

Impact

v3.1.0, v2.1.3, v1.16.5 and below

Patches

Has been patched in 3.1.1, 2.1.4, and 1.16.6

Workarounds

You can use the ignore option to ignore non files/directories.

  ignore (_, header) {
    // pass files & directories, ignore e.g. symlinks
    return header.type !== 'file' && header.type !== 'directory'
  }

Credit

Reported by: Mapta / BugBunny_ai

---

Release Notes

mafintosh/tar-fs (tar-fs@>=2.0.0 <2.1.3)

v3.1.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/kufu/smarthr-ui@5849

commit: e8a3dc2