chore: bump tar with resolutions

[jsjoeio]

This fixes a vulnerability from tar, which comes from argon2.

• https://www.npmjs.com/advisories/1770
• https://www.npmjs.com/advisories/1771

[codecov]

Codecov Report

Merging #3899 (dbb8cfb) into main (570cb69) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #3899   +/-   ##
=======================================
  Coverage   63.51%   63.51%           
=======================================
  Files          36       36           
  Lines        1872     1872           
  Branches      379      379           
=======================================
  Hits         1189     1189           
  Misses        580      580           
  Partials      103      103           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 570cb69...dbb8cfb. Read the comment docs.