Docs npm-tar vulnerability

[evantahler]

Update tar package to version 7.5.4 to remediate CVE-2026-23745, a high-severity vulnerability in npm-tar <= 7.5.2.

The vulnerability was in the tar package, a transitive dependency of @tailwindcss/oxide. A pnpm override was added to package.json and pnpm-lock.yaml to force the use of tar >= 7.5.3, which updated it to 7.5.4.

---

Linear Issue: TOO-351

 

---

Note

Aligns transitive dependency resolution to a secure tar version.

• Adds pnpm.overrides.tar: ">=7.5.3" in package.json
• Updates pnpm-lock.yaml to resolve tar to 7.5.4 and adjusts related entries (e.g., @tailwindcss/oxide now referencing tar@7.5.4)

^{Written by Cursor Bugbot for commit 8c9ce00. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
docs	Ready	Preview, Comment	Jan 20, 2026 11:13pm