From 10a03b8c255bc5c1e2f05ca09d592c39970fbdf1 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 26 Jul 2026 21:09:35 +0000
Subject: [PATCH 1/2] build(deps): bump tar from 7.5.19 to 7.5.22 in /webui

Bumps [tar](https://github.com/isaacs/node-tar) from 7.5.19 to 7.5.22.
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.19...v7.5.22)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.22
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 webui/yarn.lock | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/webui/yarn.lock b/webui/yarn.lock
index 93d3a2c54..3de5c858e 100644
--- a/webui/yarn.lock
+++ b/webui/yarn.lock
@@ -6503,15 +6503,15 @@ __metadata:
   linkType: hard
 
 "tar@npm:^7.5.4":
-  version: 7.5.19
-  resolution: "tar@npm:7.5.19"
+  version: 7.5.22
+  resolution: "tar@npm:7.5.22"
   dependencies:
     "@isaacs/fs-minipass": "npm:^4.0.0"
     chownr: "npm:^3.0.0"
     minipass: "npm:^7.1.2"
     minizlib: "npm:^3.1.0"
     yallist: "npm:^5.0.0"
-  checksum: 10/0b06a0917fe68a4dff361e147db30fd67ae2ee85ab2863d62046a6ccef46f0d1906eed20f92277a436300eaaa0e3cd31d8763d7f02fa389f41d7966e58388db8
+  checksum: 10/129606384b3c895f422aaca48bf316357be6dc7aa35c1066c3f06c28acfff0be5b356e1b0a0be7c53a7a8945534ac06cec6d8e296d170d8a09c8bff67b29300e
   languageName: node
   linkType: hard
 

From 1a25ef139e96481b8a9891599eae15570849cfaa Mon Sep 17 00:00:00 2001
From: Thomas Neidhart <thomas.neidhart@eclipse-foundation.org>
Date: Mon, 27 Jul 2026 09:31:58 +0200
Subject: [PATCH 2/2] Update CHANGELOG.md

Signed-off-by: Thomas Neidhart <thomas.neidhart@eclipse-foundation.org>
---
 webui/CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webui/CHANGELOG.md b/webui/CHANGELOG.md
index 3611f6ffe..d8f67674e 100644
--- a/webui/CHANGELOG.md
+++ b/webui/CHANGELOG.md
@@ -34,7 +34,7 @@ This change log covers only the frontend library (webui) of Open VSX.
 - Bump brace-expansion from `1.1.11` to `1.1.16` ([#1981](https://github.com/eclipse-openvsx/openvsx/pull/1981))
 - Bump brace-expansion from `2.0.2` to `2.1.2` ([#1944](https://github.com/eclipse-openvsx/openvsx/pull/1944))
 - Bump brace-expansion from `5.0.3` to `5.0.7` ([#1944](https://github.com/eclipse-openvsx/openvsx/pull/1944))
-- Bump tar from `7.5.16` to `7.5.19` ([#1959](https://github.com/eclipse-openvsx/openvsx/pull/1959))
+- Bump tar from `7.5.16` to `7.5.22` ([#1994](https://github.com/eclipse-openvsx/openvsx/pull/1994))
 - Bump js-yaml from `4.2.0` to `4.3.0` ([#1976](https://github.com/eclipse-openvsx/openvsx/pull/1976))
 - Bump dompurify from `3.4.11` to `3.4.12` ([#1984](https://github.com/eclipse-openvsx/openvsx/pull/1984))