Bump tar

[szdziedzic]

Why

Resolve https://github.com/expo/eas-cli/security/dependabot/301 by upgrading tar to a patched version.

This also moves the related runtime tar@7 dependency paths to the current patched release.

How

Bumped the workspace tar pins to 7.5.19 and refreshed the Yarn lockfile so compatible runtime tar@7 paths resolve to the patched release.

Added a changelog entry for the dependency bump.

Test Plan

• corepack yarn fmt
• corepack yarn install --immutable
• git diff --check
• corepack yarn why tar
• corepack yarn lint-changelog

[github-actions]

✅ Thank you for adding the changelog entry!

[github-actions]

Subscribed to pull request

File Patterns	Mentions
**/*	@douglowder

Generated by CodeMention

Warning: The preamble and epilogue options in commentConfiguration are deprecated. Use template instead.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.32%. Comparing base (4855745) to head (474485a).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #3971   +/-   ##
=======================================
  Coverage   59.32%   59.32%           
=======================================
  Files         936      936           
  Lines       41169    41169           
  Branches     8670     8670           
=======================================
  Hits        24421    24421           
  Misses      16654    16654           
  Partials       94       94           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.