chore(deps): bump tar and @asyncapi/cli

[dependabot]

Bumps tar to 7.5.21 and updates ancestor dependency @asyncapi/cli. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.21

Changelog

Sourced from tar's changelog.

Changelog

7.5

• Added zstd compression support.
• Consistent TOCTOU behavior in sync t.list
• Only read from ustar block if not specified in Pax
• Fix sync tar.list when file size reduces while reading
• Sanitize absolute linkpaths properly
• Prevent writing hardlink entries to the archive ahead of their file target

7.4

• Deprecate onentry in favor of onReadEntry for clarity.

7.3

• Add onWriteEntry option

7.2

• DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

• Update minipass to v7.1.0
• Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

• Drop support for node <18
• Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
• Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
• Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
• Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

• 0cd9cc3 7.5.21
• 631ae59 list: prevent unbounded recursion
• ebbb720 7.5.20
• 2f27196 fix: fully disable and dispose of unzip when aborting parser
• be440da 7.5.19
• 2812e93 add maxDecompressionRatio guard against explosive decompression
• 9ecd4d2 7.5.18
• 9e78bf0 refuse to let header size be less than 0
• e02a4e9 pax: parse values according to known types
• 9cbdb31 7.5.17
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @asyncapi/cli from 3.6.0 to 6.0.2

Release notes

Sourced from @​asyncapi/cli's releases.

v6.0.2

Patch Changes

• c3a77ba: fix: skip request body validation gracefully instead of throwing error for unsupported paths

v6.0.1

Patch Changes

• e6e6c95: Fix GitHub URL parsing for branches with slashes and file extension detection for multi-dot filenames

v6.0.0

Major Changes

• 7580cee: Removal of postman -> asyncapi conversion functionality

  ⚠ BREAKING CHANGES

  Remove postman conversion utilities due to unmaintained dependencies and compatibility issues.

  Why this change?

  • The postman2openapi dependency causes multiple issues due to its WASM involvement
  • WASM file loading causes browser compatibility issues after webpack updates
  • Alternative libraries like postman-to-openapi did not provide adequate functionality
  • The underlying dependencies are unmaintained and pose long-term maintenance risks

  Impact:

  • The convert command no longer supports postman format conversion
  • Users relying on postman conversion will need to find alternative solutions

  Future: We can consider re-adding this feature after community discussion and establishing a sustainable maintenance plan with actively maintained dependencies.

  Related: asyncapi/converter-js#311

v5.0.7

Patch Changes

• 72fd21f: Bump @​asyncapi/generator from v3.1.0 → v3.1.1

v5.0.6

Patch Changes

• a414293: - Updated @asyncapi/generator from 3.0.1 → 3.1.0

v5.0.5

Patch Changes

• be7c41d: chore: bump Node.js version to 24 in remaining Dockerfiles

... (truncated)

Changelog

Sourced from @​asyncapi/cli's changelog.

6.0.2

Patch Changes

• c3a77ba: fix: skip request body validation gracefully instead of throwing error for unsupported paths

6.0.1

Patch Changes

• e6e6c95: Fix GitHub URL parsing for branches with slashes and file extension detection for multi-dot filenames

6.0.0

Major Changes

• 7580cee: Removal of postman -> asyncapi conversion functionality

  ⚠ BREAKING CHANGES

  Remove postman conversion utilities due to unmaintained dependencies and compatibility issues.

  Why this change?

  • The postman2openapi dependency causes multiple issues due to its WASM involvement
  • WASM file loading causes browser compatibility issues after webpack updates
  • Alternative libraries like postman-to-openapi did not provide adequate functionality
  • The underlying dependencies are unmaintained and pose long-term maintenance risks

  Impact:

  • The convert command no longer supports postman format conversion
  • Users relying on postman conversion will need to find alternative solutions

  Future: We can consider re-adding this feature after community discussion and establishing a sustainable maintenance plan with actively maintained dependencies.

  Related: asyncapi/converter-js#311

5.0.7

Patch Changes

• 72fd21f: Bump @​asyncapi/generator from v3.1.0 → v3.1.1

5.0.6

Patch Changes

• a414293: - Updated @asyncapi/generator from 3.0.1 → 3.1.0

5.0.5

... (truncated)

Commits

• fb73ff3 chore(release): release and bump versions of packages (#2234)
• c3a77ba fix: request body validation is skipped for some paths or HTTP methods (#2205)
• 6cc220f chore(release): release and bump versions of packages (#2233)
• 204343d chore(deps): bump @​actions/core from 1.6.0 to 1.9.1 in /.github/workflows/scr...
• 14a66db chore(deps): bump path-to-regexp from 8.3.0 to 8.4.2 (#2100)
• e6e6c95 fix: cli fails when with slash-based branches (#2216)
• 5236126 ci: update of files from global .github repo (#2232)
• 68ecaca ci: update of files from global .github repo (#2231)
• ca8a24e ci: update of files from global .github repo (#2230)
• 1142aa5 ci: update of files from global .github repo (#2220)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​asyncapi/cli since your current version.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud