yarnpkg · mhassan1 · Jan 20, 2026
diff --git a/.pnp.cjs b/.pnp.cjs
diff --git a/.yarn/cache/@gar-promisify-npm-1.1.3-ac1a325862-052dd23214.zip b/.yarn/cache/@gar-promisify-npm-1.1.3-ac1a325862-052dd23214.zip
diff --git a/.yarn/cache/@isaacs-balanced-match-npm-4.0.1-8965afafe6-102fbc6d2c.zip b/.yarn/cache/@isaacs-balanced-match-npm-4.0.1-8965afafe6-102fbc6d2c.zip
diff --git a/.yarn/cache/@isaacs-brace-expansion-npm-5.0.0-754d3cb3f5-cf3b7f206a.zip b/.yarn/cache/@isaacs-brace-expansion-npm-5.0.0-754d3cb3f5-cf3b7f206a.zip
diff --git a/.yarn/cache/@isaacs-fs-minipass-npm-4.0.1-677026e841-4412e9e671.zip b/.yarn/cache/@isaacs-fs-minipass-npm-4.0.1-677026e841-4412e9e671.zip
diff --git a/.yarn/cache/@npmcli-agent-npm-4.0.0-502e5ae4f0-1a81573bec.zip b/.yarn/cache/@npmcli-agent-npm-4.0.0-502e5ae4f0-1a81573bec.zip
diff --git a/.yarn/cache/@npmcli-fs-npm-2.1.2-08d434e77b-c5d4dfee80.zip b/.yarn/cache/@npmcli-fs-npm-2.1.2-08d434e77b-c5d4dfee80.zip
diff --git a/.yarn/cache/@npmcli-fs-npm-5.0.0-9d737ae2f3-4935c7719d.zip b/.yarn/cache/@npmcli-fs-npm-5.0.0-9d737ae2f3-4935c7719d.zip
diff --git a/.yarn/cache/@npmcli-move-file-npm-2.0.1-b593d8f741-52dc02259d.zip b/.yarn/cache/@npmcli-move-file-npm-2.0.1-b593d8f741-52dc02259d.zip
diff --git a/.yarn/cache/@tootallnate-once-npm-2.0.0-e36cf4f140-ad87447820.zip b/.yarn/cache/@tootallnate-once-npm-2.0.0-e36cf4f140-ad87447820.zip
diff --git a/.yarn/cache/@types-minipass-npm-2.2.0-78f6142b4d-1e97dab81c.zip b/.yarn/cache/@types-minipass-npm-2.2.0-78f6142b4d-1e97dab81c.zip
diff --git a/.yarn/cache/@types-tar-npm-4.0.4-378bee258e-d5cef507ad.zip b/.yarn/cache/@types-tar-npm-4.0.4-378bee258e-d5cef507ad.zip
diff --git a/.yarn/cache/abbrev-npm-4.0.0-7d848a1ef0-e2f0c6a670.zip b/.yarn/cache/abbrev-npm-4.0.0-7d848a1ef0-e2f0c6a670.zip
diff --git a/.yarn/cache/agent-base-npm-6.0.2-428f325a93-21fb903e09.zip b/.yarn/cache/agent-base-npm-6.0.2-428f325a93-21fb903e09.zip
diff --git a/.yarn/cache/agent-base-npm-7.1.4-cb8b4604d5-79bef16724.zip b/.yarn/cache/agent-base-npm-7.1.4-cb8b4604d5-79bef16724.zip
diff --git a/.yarn/cache/agentkeepalive-npm-4.2.1-b86a9fb343-63961cba1a.zip b/.yarn/cache/agentkeepalive-npm-4.2.1-b86a9fb343-63961cba1a.zip
diff --git a/.yarn/cache/aproba-npm-1.2.0-34129f0778-48def77733.zip b/.yarn/cache/aproba-npm-1.2.0-34129f0778-48def77733.zip
diff --git a/.yarn/cache/are-we-there-yet-npm-3.0.1-3395b1512f-390731720e.zip b/.yarn/cache/are-we-there-yet-npm-3.0.1-3395b1512f-390731720e.zip
diff --git a/.yarn/cache/cacache-npm-16.1.3-4e2088ed0d-a14524d90e.zip b/.yarn/cache/cacache-npm-16.1.3-4e2088ed0d-a14524d90e.zip
diff --git a/.yarn/cache/cacache-npm-20.0.3-5f244d5bdd-388a016997.zip b/.yarn/cache/cacache-npm-20.0.3-5f244d5bdd-388a016997.zip
diff --git a/.yarn/cache/chownr-npm-2.0.0-638f1c9c61-c57cf9dd07.zip b/.yarn/cache/chownr-npm-2.0.0-638f1c9c61-c57cf9dd07.zip
diff --git a/.yarn/cache/chownr-npm-3.0.0-5275e85d25-b63cb1f73d.zip b/.yarn/cache/chownr-npm-3.0.0-5275e85d25-b63cb1f73d.zip
diff --git a/.yarn/cache/color-support-npm-1.1.3-3be5c53455-4bcfe30eea.zip b/.yarn/cache/color-support-npm-1.1.3-3be5c53455-4bcfe30eea.zip
diff --git a/.yarn/cache/console-control-strings-npm-1.1.0-e3160e5275-27b5fa302b.zip b/.yarn/cache/console-control-strings-npm-1.1.0-e3160e5275-27b5fa302b.zip
diff --git a/.yarn/cache/delegates-npm-1.0.0-9b1942d75f-a51744d9b5.zip b/.yarn/cache/delegates-npm-1.0.0-9b1942d75f-a51744d9b5.zip
diff --git a/.yarn/cache/exponential-backoff-npm-3.1.3-28be78d98e-ca25962b4b.zip b/.yarn/cache/exponential-backoff-npm-3.1.3-28be78d98e-ca25962b4b.zip
diff --git a/.yarn/cache/fdir-npm-6.5.0-8814a0dec7-14ca1c9f0a.zip b/.yarn/cache/fdir-npm-6.5.0-8814a0dec7-14ca1c9f0a.zip
diff --git a/.yarn/cache/fs-minipass-npm-2.1.0-501ef87306-03191781e9.zip b/.yarn/cache/fs-minipass-npm-2.1.0-501ef87306-03191781e9.zip
diff --git a/.yarn/cache/fs-minipass-npm-3.0.3-d148d6ac19-af143246cf.zip b/.yarn/cache/fs-minipass-npm-3.0.3-d148d6ac19-af143246cf.zip
diff --git a/.yarn/cache/gauge-npm-4.0.4-8f878385e9-09535dd53b.zip b/.yarn/cache/gauge-npm-4.0.4-8f878385e9-09535dd53b.zip
diff --git a/.yarn/cache/glob-npm-13.0.0-8e50143ca8-de390721d2.zip b/.yarn/cache/glob-npm-13.0.0-8e50143ca8-de390721d2.zip
diff --git a/.yarn/cache/glob-npm-8.0.3-750f909025-cd002c0401.zip b/.yarn/cache/glob-npm-8.0.3-750f909025-cd002c0401.zip
diff --git a/.yarn/cache/has-unicode-npm-2.0.1-893adb4747-041b4293ad.zip b/.yarn/cache/has-unicode-npm-2.0.1-893adb4747-041b4293ad.zip
diff --git a/.yarn/cache/http-proxy-agent-npm-5.0.0-7f1f121b83-5ee19423bc.zip b/.yarn/cache/http-proxy-agent-npm-5.0.0-7f1f121b83-5ee19423bc.zip
diff --git a/.yarn/cache/http-proxy-agent-npm-7.0.2-643ed7cc33-d062acfa0c.zip b/.yarn/cache/http-proxy-agent-npm-7.0.2-643ed7cc33-d062acfa0c.zip
diff --git a/.yarn/cache/https-proxy-agent-npm-5.0.1-42d65f358e-f0dce7bdca.zip b/.yarn/cache/https-proxy-agent-npm-5.0.1-42d65f358e-f0dce7bdca.zip
diff --git a/.yarn/cache/https-proxy-agent-npm-7.0.6-27a95c2690-784b628cbd.zip b/.yarn/cache/https-proxy-agent-npm-7.0.6-27a95c2690-784b628cbd.zip
diff --git a/.yarn/cache/humanize-ms-npm-1.2.1-e942bd7329-9c7a74a282.zip b/.yarn/cache/humanize-ms-npm-1.2.1-e942bd7329-9c7a74a282.zip
diff --git a/.yarn/cache/infer-owner-npm-1.0.4-685ac3d2af-181e732764.zip b/.yarn/cache/infer-owner-npm-1.0.4-685ac3d2af-181e732764.zip
diff --git a/.yarn/cache/ip-address-npm-10.1.0-d5d5693401-a6979629d1.zip b/.yarn/cache/ip-address-npm-10.1.0-d5d5693401-a6979629d1.zip
diff --git a/.yarn/cache/ip-npm-2.0.0-204facb3cc-1270b11e53.zip b/.yarn/cache/ip-npm-2.0.0-204facb3cc-1270b11e53.zip
diff --git a/.yarn/cache/is-lambda-npm-1.0.1-7ab55bc8a8-93a32f0194.zip b/.yarn/cache/is-lambda-npm-1.0.1-7ab55bc8a8-93a32f0194.zip
diff --git a/.yarn/cache/isexe-npm-3.1.1-9c0061eead-7fe1931ee4.zip b/.yarn/cache/isexe-npm-3.1.1-9c0061eead-7fe1931ee4.zip
diff --git a/.yarn/cache/lru-cache-npm-11.2.5-a56eb40aef-be50f66c6e.zip b/.yarn/cache/lru-cache-npm-11.2.5-a56eb40aef-be50f66c6e.zip
diff --git a/.yarn/cache/lru-cache-npm-7.14.0-354cf654ec-f8e0100971.zip b/.yarn/cache/lru-cache-npm-7.14.0-354cf654ec-f8e0100971.zip
diff --git a/.yarn/cache/make-fetch-happen-npm-10.2.1-f1cc7cd2df-fef5acb865.zip b/.yarn/cache/make-fetch-happen-npm-10.2.1-f1cc7cd2df-fef5acb865.zip
diff --git a/.yarn/cache/make-fetch-happen-npm-15.0.3-10a832fcad-78da4fc1df.zip b/.yarn/cache/make-fetch-happen-npm-15.0.3-10a832fcad-78da4fc1df.zip
diff --git a/.yarn/cache/minimatch-npm-10.1.1-453db4ee1a-110f38921e.zip b/.yarn/cache/minimatch-npm-10.1.1-453db4ee1a-110f38921e.zip
diff --git a/.yarn/cache/minimatch-npm-5.1.0-34f6240621-3bcc271af1.zip b/.yarn/cache/minimatch-npm-5.1.0-34f6240621-3bcc271af1.zip
diff --git a/.yarn/cache/minipass-collect-npm-1.0.2-3b4676eab5-14df761028.zip b/.yarn/cache/minipass-collect-npm-1.0.2-3b4676eab5-14df761028.zip
diff --git a/.yarn/cache/minipass-collect-npm-2.0.1-73d3907e40-b251bceea6.zip b/.yarn/cache/minipass-collect-npm-2.0.1-73d3907e40-b251bceea6.zip
diff --git a/.yarn/cache/minipass-fetch-npm-2.1.2-9b21a5c930-8cfc589563.zip b/.yarn/cache/minipass-fetch-npm-2.1.2-9b21a5c930-8cfc589563.zip
diff --git a/.yarn/cache/minipass-fetch-npm-5.0.0-e53c2bae4c-4fb7dca630.zip b/.yarn/cache/minipass-fetch-npm-5.0.0-e53c2bae4c-4fb7dca630.zip
diff --git a/.yarn/cache/minizlib-npm-2.1.2-ea89cd0cfb-ae0f45436f.zip b/.yarn/cache/minizlib-npm-2.1.2-ea89cd0cfb-ae0f45436f.zip
diff --git a/.yarn/cache/minizlib-npm-3.1.0-6680befdba-f47365cc2c.zip b/.yarn/cache/minizlib-npm-3.1.0-6680befdba-f47365cc2c.zip
diff --git a/.yarn/cache/mkdirp-npm-1.0.4-37f6ef56b9-d71b8dcd4b.zip b/.yarn/cache/mkdirp-npm-1.0.4-37f6ef56b9-d71b8dcd4b.zip
diff --git a/.yarn/cache/negotiator-npm-1.0.0-47d727e27e-b5734e8729.zip b/.yarn/cache/negotiator-npm-1.0.0-47d727e27e-b5734e8729.zip
diff --git a/.yarn/cache/node-gyp-npm-12.1.0-0690767ce9-d93079236c.zip b/.yarn/cache/node-gyp-npm-12.1.0-0690767ce9-d93079236c.zip
diff --git a/.yarn/cache/node-gyp-npm-9.1.0-2091059b31-b9dddbe965.zip b/.yarn/cache/node-gyp-npm-9.1.0-2091059b31-b9dddbe965.zip
diff --git a/.yarn/cache/nopt-npm-5.0.0-304b40fbfe-00f9bb2d16.zip b/.yarn/cache/nopt-npm-5.0.0-304b40fbfe-00f9bb2d16.zip
diff --git a/.yarn/cache/nopt-npm-9.0.0-81316ec15c-56a1ccd2ad.zip b/.yarn/cache/nopt-npm-9.0.0-81316ec15c-56a1ccd2ad.zip
diff --git a/.yarn/cache/npmlog-npm-6.0.2-e0e69455c7-82b123677e.zip b/.yarn/cache/npmlog-npm-6.0.2-e0e69455c7-82b123677e.zip
diff --git a/.yarn/cache/p-map-npm-7.0.4-39386109d0-ef48c3b2e4.zip b/.yarn/cache/p-map-npm-7.0.4-39386109d0-ef48c3b2e4.zip
diff --git a/.yarn/cache/path-scurry-npm-2.0.1-7744619e5d-1e9c74e9cc.zip b/.yarn/cache/path-scurry-npm-2.0.1-7744619e5d-1e9c74e9cc.zip
diff --git a/.yarn/cache/proc-log-npm-6.1.0-84e609b3f4-9033f30f16.zip b/.yarn/cache/proc-log-npm-6.1.0-84e609b3f4-9033f30f16.zip
diff --git a/.yarn/cache/promise-inflight-npm-1.0.1-5bb925afac-1560d413ea.zip b/.yarn/cache/promise-inflight-npm-1.0.1-5bb925afac-1560d413ea.zip
diff --git a/.yarn/cache/set-blocking-npm-2.0.0-49e2cffa24-8980ebf7ae.zip b/.yarn/cache/set-blocking-npm-2.0.0-49e2cffa24-8980ebf7ae.zip
diff --git a/.yarn/cache/socks-npm-2.7.0-cc1cb019db-984a700cc0.zip b/.yarn/cache/socks-npm-2.7.0-cc1cb019db-984a700cc0.zip
diff --git a/.yarn/cache/socks-npm-2.8.7-d1d20aae19-d19366c959.zip b/.yarn/cache/socks-npm-2.8.7-d1d20aae19-d19366c959.zip
diff --git a/.yarn/cache/socks-proxy-agent-npm-7.0.0-7aacf32ea0-26c75d9c62.zip b/.yarn/cache/socks-proxy-agent-npm-7.0.0-7aacf32ea0-26c75d9c62.zip
diff --git a/.yarn/cache/socks-proxy-agent-npm-8.0.5-24d77a90dc-ee99e1daca.zip b/.yarn/cache/socks-proxy-agent-npm-8.0.5-24d77a90dc-ee99e1daca.zip
diff --git a/.../ssri-npm-9.0.1-33ce27f4f8-7638a61e91.zip → ...ssri-npm-13.0.0-f5fa93375d-fd59bfedf0.zip b/.../ssri-npm-9.0.1-33ce27f4f8-7638a61e91.zip → ...ssri-npm-13.0.0-f5fa93375d-fd59bfedf0.zip
diff --git a/.yarn/cache/tar-npm-6.1.11-e6ac3cba9c-0e6789e664.zip b/.yarn/cache/tar-npm-6.1.11-e6ac3cba9c-0e6789e664.zip
diff --git a/.yarn/cache/tar-npm-7.5.7-053aec5a88-0d6938dd32.zip b/.yarn/cache/tar-npm-7.5.7-053aec5a88-0d6938dd32.zip
diff --git a/.yarn/cache/tinyglobby-npm-0.2.15-0e783aadbd-d72bd826a8.zip b/.yarn/cache/tinyglobby-npm-0.2.15-0e783aadbd-d72bd826a8.zip
diff --git a/...ename-npm-2.0.1-183c6c7c2b-807acf3381.zip → ...ename-npm-5.0.0-605f54f18e-a5f67085ca.zip b/...ename-npm-2.0.1-183c6c7c2b-807acf3381.zip → ...ename-npm-5.0.0-605f54f18e-a5f67085ca.zip
diff --git a/.yarn/cache/unique-slug-npm-3.0.0-0b82e51577-26fc5bc209.zip b/.yarn/cache/unique-slug-npm-3.0.0-0b82e51577-26fc5bc209.zip
diff --git a/.yarn/cache/unique-slug-npm-6.0.0-f26b186e99-b78ed9d5b0.zip b/.yarn/cache/unique-slug-npm-6.0.0-f26b186e99-b78ed9d5b0.zip
diff --git a/.yarn/cache/which-npm-6.0.0-48f25f0ec8-df19b2cd8a.zip b/.yarn/cache/which-npm-6.0.0-48f25f0ec8-df19b2cd8a.zip
diff --git a/.yarn/cache/wide-align-npm-1.1.5-889d77e592-d5f8027b9a.zip b/.yarn/cache/wide-align-npm-1.1.5-889d77e592-d5f8027b9a.zip
diff --git a/.yarn/cache/yallist-npm-5.0.0-8732dd9f1c-1884d272d4.zip b/.yarn/cache/yallist-npm-5.0.0-8732dd9f1c-1884d272d4.zip
diff --git a/.yarn/versions/9d84698e.yml b/.yarn/versions/9d84698e.yml
@@ -0,0 +1,36 @@
+releases:
+  "@yarnpkg/core": patch
+
+declined:
+  - "@yarnpkg/plugin-catalog"
+  - "@yarnpkg/plugin-compat"
+  - "@yarnpkg/plugin-constraints"
+  - "@yarnpkg/plugin-dlx"
+  - "@yarnpkg/plugin-essentials"
+  - "@yarnpkg/plugin-exec"
+  - "@yarnpkg/plugin-file"
+  - "@yarnpkg/plugin-git"
+  - "@yarnpkg/plugin-github"
+  - "@yarnpkg/plugin-http"
+  - "@yarnpkg/plugin-init"
+  - "@yarnpkg/plugin-interactive-tools"
+  - "@yarnpkg/plugin-jsr"
+  - "@yarnpkg/plugin-link"
+  - "@yarnpkg/plugin-nm"
+  - "@yarnpkg/plugin-npm"
+  - "@yarnpkg/plugin-npm-cli"
+  - "@yarnpkg/plugin-pack"
+  - "@yarnpkg/plugin-patch"
+  - "@yarnpkg/plugin-pnp"
+  - "@yarnpkg/plugin-pnpm"
+  - "@yarnpkg/plugin-stage"
+  - "@yarnpkg/plugin-typescript"
+  - "@yarnpkg/plugin-version"
+  - "@yarnpkg/plugin-workspace-tools"
+  - "@yarnpkg/builder"
+  - "@yarnpkg/cli"
+  - "@yarnpkg/doctor"
+  - "@yarnpkg/extensions"
+  - "@yarnpkg/nm"
+  - "@yarnpkg/pnpify"
+  - "@yarnpkg/sdks"
diff --git a/packages/acceptance-tests/pkg-tests-specs/package.json b/packages/acceptance-tests/pkg-tests-specs/package.json
@@ -14,7 +14,6 @@
   },
   "devDependencies": {
     "@types/lodash": "^4.14.136",
-    "@types/tar": "^4.0.4",
     "@yarnpkg/cli": "workspace:^",
     "@yarnpkg/core": "workspace:^",
     "@yarnpkg/fslib": "workspace:^",
@@ -23,7 +22,7 @@
     "@yarnpkg/pnp": "workspace:^",
     "es-toolkit": "^1.39.7",
     "pkg-tests-core": "workspace:^",
-    "tar": "^6.0.5",
+    "tar": "^7.5.3",
     "tslib": "^2.4.0"
   },
   "engines": {

diff --git a/packages/acceptance-tests/pkg-tests-specs/sources/commands/pack.test.js b/packages/acceptance-tests/pkg-tests-specs/sources/commands/pack.test.js
@@ -1,6 +1,6 @@
 import {xfs, npath}          from '@yarnpkg/fslib';
 import {fs as fsUtils, misc} from 'pkg-tests-core';
-import tar                   from 'tar';
+import * as tar              from 'tar';
 
 async function genPackList(run) {
   const {stdout} = await run(`pack`, `--dry-run`, `--json`);

diff --git a/packages/yarnpkg-core/package.json b/packages/yarnpkg-core/package.json
@@ -33,7 +33,7 @@
     "p-limit": "^2.2.0",
     "semver": "^7.1.2",
     "strip-ansi": "^6.0.0",
-    "tar": "^6.0.5",
+    "tar": "^7.5.3",
     "tinylogic": "^2.0.0",
     "treeify": "^1.1.0",
     "tslib": "^2.4.0"
@@ -48,7 +48,6 @@
     "@types/diff": "^5.0.0",
     "@types/micromatch": "^4.0.1",
     "@types/node": "^18.19.124",
-    "@types/tar": "^4.0.4",
     "@yarnpkg/cli": "workspace:^",
     "@yarnpkg/plugin-link": "workspace:^",
     "@yarnpkg/plugin-npm": "workspace:^",

diff --git a/packages/yarnpkg-core/sources/tgzUtils.ts b/packages/yarnpkg-core/sources/tgzUtils.ts
@@ -2,7 +2,7 @@ import {Configuration, nodeUtils}                                              f
 import {FakeFS, PortablePath, NodeFS, ppath, xfs, npath, constants, statUtils} from '@yarnpkg/fslib';
 import {ZipCompression, ZipFS}                                                 from '@yarnpkg/libzip';
 import {PassThrough, Readable}                                                 from 'stream';
-import tar                                                                     from 'tar';
+import * as tar                                                                from 'tar';
 
 import {AsyncPool, TaskPool, WorkerPool}                                       from './TaskPool';
 import * as miscUtils                                                          from './miscUtils';
@@ -133,8 +133,7 @@ export async function convertToZip(tgz: Buffer, opts: ConvertToZipOptions = {})
 }
 
 async function * parseTar(tgz: Buffer) {
-  // @ts-expect-error - Types are wrong about what this function returns
-  const parser: tar.ParseStream = new tar.Parse();
+  const parser = new tar.Parser();
 
   const passthrough = new PassThrough({objectMode: true, autoDestroy: true, emitClose: true});