Fix tar 6.x vulnerabilities: upgrade ncu to v17 + override for @vvago/vale#26707

Closed

frankmueller-msft wants to merge 6 commits intomainfrom

fix/tar-override

Commits on Mar 14, 2026

Upgrade npm-check-updates to v17 in build-cli to eliminate tar 6.x at source

frankmueller-msft
and
claude
committed
Fix build-tools lockfile config mismatch

frankmueller-msft
and
claude
committed