Bump tar from 7.4.3 to 7.5.8

packages/build-infra/test/validate-checkpoints.mts

@@ -48,16 +48,20 @@ function isCheckpointFile(filename: string): boolean {
 }
 
 /**
- * Validates a single tar archive using tar -tzf command.
+ * Validates a single tar archive using tar command.
  * Checks both integrity (readable) and that it contains files.
  */
 function validateTarArchive(tarPath: string): boolean {
   try {
     // Check if file exists and is readable.
     accessSync(tarPath, constants.R_OK)
 
-    // Use tar -tzf to list contents (validates archive integrity).
-    const result = spawnSync('tar', ['-tzf', tarPath], {
+    // Use tar -tf for .tar files, tar -tzf for compressed files.
+    // The -z flag is for gzip compression (.tar.gz, .tgz).
+    const isCompressed = tarPath.endsWith('.tar.gz') || tarPath.endsWith('.tgz')
+    const flags = isCompressed ? '-tzf' : '-tf'
+
+    const result = spawnSync('tar', [flags, tarPath], {
       encoding: 'utf8',
       stdio: ['ignore', 'pipe', 'pipe'],
     })

pnpm-workspace.yaml

@@ -17,6 +17,6 @@ catalog:
   magic-string: 0.30.19
   octokit: 5.0.5
   postject: 1.0.0-alpha.6
-  tar: 7.4.3
+  tar: 7.5.8
   vitest: 4.0.3
   yoctocolors-cjs: 2.1.3