fix(security): bump tar to 7.5.11 and tornado to 6.5.5#23602

Merged

krrishdholakia merged 3 commits intoBerriAI:mainfrom

joereyna:fix/security-cve-tar-7.5.11-tornado-6.5.5

Mar 14, 2026

Commits on Mar 14, 2026

fix(security): bump tar to 7.5.11 and tornado to 6.5.5

joereyna
and
claude
committed
fix: document tar override is enforced via Dockerfile, not npm
joereyna
committed
fix: revert invalid JSON comment in package.json tar override
joereyna
committed