fix(deps): Bump tar resolution to 7.5.16

[jfox-box]

Summary by CodeRabbit

• Chores
  • Updated the enforced tar package dependency to a newer compatible version.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 49c78966-00e0-46e5-b42a-3eb3cb306a14

📥 Commits

Reviewing files that changed from the base of the PR and between 7415283 and decf472.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• package.json

🚧 Files skipped from review as they are similar to previous changes (1)

• package.json

---

Walkthrough

The resolutions field in package.json has the tar package version constraint updated from ^7.5.11 to ^7.5.16, enforcing the newer version range across the entire dependency tree.

Changes

tar resolution bump

Layer / File(s)	Summary
tar resolution version bump package.json	Updates resolutions.tar from ^7.5.11 to ^7.5.16 to enforce the newer version range across the dependency tree.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• box/box-ui-elements#4426: Modifies the same resolutions.tar entry in package.json to a different version range.
• box/box-ui-elements#4466: Directly bumps the same resolutions.tar entry in package.json.
• box/box-ui-elements#4479: A prior incremental bump to the same resolutions.tar entry in package.json.

Suggested reviewers

• jpan-box
• tjiang-box
• reneshen0328

Poem

🐇 A tiny hop, a version leap,
tar now wakes from older sleep.
From .11 to .16 we go,
Resolutions patched with a bow.
The dependency tree stays neat — hip hop! 🎉

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	The PR description contains only template boilerplate instructions and lacks specific details about the dependency update, its motivation, or impact.	Add substantive information explaining why the tar dependency was bumped, what issues it resolves, and any testing or validation performed.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: bumping the tar dependency resolution to version 7.5.16, which matches the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch resolve-tar-7.5.16

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-06-16 18:01 UTC · Rule: Automatic strict merge
• ✅ Checks passed · in-place
• ✅ Merged — 2026-06-16 18:13 UTC · at decf472e2de0b90fbca9036f8e0328521bfdc07e · squash

This pull request spent 12 minutes 6 seconds in the queue, including 11 minutes 44 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • fix(deps): Bump tar resolution to 7.5.16 #4634
• #review-threads-unresolved = 0 [🛡 GitHub branch protection]
  • fix(deps): Bump tar resolution to 7.5.16 #4634
• github-review-decision = APPROVED [🛡 GitHub branch protection]
  • fix(deps): Bump tar resolution to 7.5.16 #4634
• any of [🛡 GitHub branch protection]:
  • check-success = Summary
  • check-neutral = Summary
  • check-skipped = Summary
• any of [🛡 GitHub branch protection]:
  • check-success = lint_test_build
  • check-neutral = lint_test_build
  • check-skipped = lint_test_build
• any of [🛡 GitHub branch protection]:
  • check-success = license/cla
  • check-neutral = license/cla
  • check-skipped = license/cla
• any of [🛡 GitHub branch protection]:
  • check-success = lint_pull_request
  • check-neutral = lint_pull_request
  • check-skipped = lint_pull_request