From 4e1724d506c91f64e89a23001988ded399116ed3 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 23 Jan 2026 05:58:22 +0000
Subject: [PATCH] fix: cli/package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15038581
---
 cli/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cli/package.json b/cli/package.json
index 5034e1b1ae1..f122d0b1295 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -22,7 +22,7 @@
     "front-matter": "^4.0.2",
     "minimatch": "^9.0.3",
     "minipass": "^7.0.4",
-    "pacote": "^18.0.3",
+    "pacote": "^21.0.1",
     "proc-log": "^4.2.0",
     "semver": "^7.5.4",
     "tar": "^7.0.1",