Bump tar and @angular/cli in /editor

[dependabot]

Bumps tar to 7.5.22 and updates ancestor dependency @angular/cli. These dependencies need to be updated together.

Updates tar from 6.2.1 to 7.5.22

Changelog

Sourced from tar's changelog.

Changelog

7.5

• Added zstd compression support.
• Consistent TOCTOU behavior in sync t.list
• Only read from ustar block if not specified in Pax
• Fix sync tar.list when file size reduces while reading
• Sanitize absolute linkpaths properly
• Prevent writing hardlink entries to the archive ahead of their file target

7.4

• Deprecate onentry in favor of onReadEntry for clarity.

7.3

• Add onWriteEntry option

7.2

• DRY the command definitions into a single makeCommand method, and update the type signatures to more appropriately infer the return type from the options and arguments provided.

7.1

• Update minipass to v7.1.0
• Update the type definitions of write() and end() methods on Unpack and Parser classes to be compatible with the NodeJS.WritableStream type in the latest versions of @types/node.

7.0

• Drop support for node <18
• Rewrite in TypeScript, provide ESM and CommonJS hybrid interface
• Add tree-shake friendly exports, like import('tar/create') and import('tar/read-entry') to get individual functions or classes.
• Add chmod option that defaults to false, and deprecate noChmod. That is, reverse the default option regarding explicitly setting file system modes to match tar entry settings.
• Add processUmask option to avoid having to call process.umask() when chmod: true (or noChmod: false) is set.

... (truncated)

Commits

• 2a22bfc 7.5.22
• df1cd8d Allow transform to be falsey
• 0cd9cc3 7.5.21
• 631ae59 list: prevent unbounded recursion
• ebbb720 7.5.20
• 2f27196 fix: fully disable and dispose of unzip when aborting parser
• be440da 7.5.19
• 2812e93 add maxDecompressionRatio guard against explosive decompression
• 9ecd4d2 7.5.18
• 9e78bf0 refuse to let header size be less than 0
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by isaacs, a new releaser for tar since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @angular/cli from 20.3.4 to 20.3.36

Release notes

Sourced from @​angular/cli's releases.

20.3.36

@​angular-devkit/build-angular

Commit	Description
	update less to 4.9.0

@​angular/ssr

Commit	Description
	ensure public directory containment in CommonEngine

20.3.35

@​angular-devkit/build-angular

Commit	Description
	update webpack-dev-server to 5.2.6

20.3.34

@​angular/cli

Commit	Description
	update dependency @​modelcontextprotocol/sdk to v1.30.0

@​angular-devkit/build-angular

Commit	Description
	bump undici to 7.29.0

20.3.33

@​angular-devkit/build-angular

Commit	Description
	upgrade postcss to 8.5.23

@​angular/build

Commit	Description
	upgrade postcss to 8.5.23

20.3.32

@​angular-devkit/build-angular

Commit	Description
	update http-proxy-middleware to 3.0.7

20.3.31

@​angular-devkit/build-angular

Commit	Description
	bump undici to 7.28.0

@​angular/build

Commit	Description

... (truncated)

Changelog

Sourced from @​angular/cli's changelog.

20.3.36 (2026-09-02)

@​angular-devkit/build-angular

Commit	Type	Description
b4059cdc7	fix	update less to 4.9.0

@​angular/ssr

Commit	Type	Description
c3e5982e4	fix	ensure public directory containment in CommonEngine

22.2.0-next.5 (2026-08-26)

@​angular/build

Commit	Type	Description
4d0be683b7	fix	ignore side-effect annotations in unit test builds
e4111ae818	fix	prevent memory leaks in parallel compilation and caches
62999cabf4	perf	batch prerender routes and share in-memory server bundles
0589edd9cd	perf	consolidate component stylesheet bundling with shared load result cache
a877aa7ebd	perf	implement SharedArrayBuffer translation dictionaries for zero-copy worker access
f1cc959439	perf	implement sliding-window batching and worker translation eviction
f4dad31cce	perf	unify Oxc linking and optimization AST traversal passes

@​angular/ssr

Commit	Type	Description
f8576e3c8b	fix	abort web request signal when node request is aborted

22.1.6 (2026-08-26)

@​angular/build

Commit	Type	Description
3f132eaa97	fix	ignore side-effect annotations in unit test builds
5b1028936f	perf	batch prerender routes and share in-memory server bundles

... (truncated)

Commits

• a9f4dae release: cut the v20.3.36 release
• c3e5982 fix(@​angular/ssr): ensure public directory containment in CommonEngine
• b4059cd fix(@​angular-devkit/build-angular): update less to 4.9.0
• c17729f release: cut the v20.3.35 release
• 94b620a fix(@​angular-devkit/build-angular): update webpack-dev-server to 5.2.6
• 40c30ba release: cut the v20.3.34 release
• f348efe fix(@​angular-devkit/build-angular): bump undici to 7.29.0
• 3962517 fix(@​angular/cli): update dependency @​modelcontextprotocol/sdk to v1.30.0
• 1bd120b release: cut the v20.3.33 release
• 0b4008f fix(@​angular-devkit/build-angular): upgrade postcss to 8.5.23
• Additional commits viewable in compare view

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[uldisrudzitis]

@dependabot rebase