chore(deps): bump tar from 7.5.13 to 7.5.19

[dependabot]

Bumps tar from 7.5.13 to 7.5.19.

Commits

• be440da 7.5.19
• 2812e93 add maxDecompressionRatio guard against explosive decompression
• 9ecd4d2 7.5.18
• 9e78bf0 refuse to let header size be less than 0
• e02a4e9 pax: parse values according to known types
• 9cbdb31 7.5.17
• 7a635c2 terminate pax strings on nul bytes
• cf21338 7.5.16
• 21a8220 do not apply PAX header fields to meta entries
• 52632cf update project deps
• Additional commits viewable in compare view

[changeset-bot]

⚠️ No Changeset found

Latest commit: c7a4039

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[pkg-pr-new]

Open in StackBlitz

@trigger.dev/build

npm i https://pkg.pr.new/@trigger.dev/build@c7a4039

trigger.dev

npm i https://pkg.pr.new/trigger.dev@c7a4039

@trigger.dev/core

npm i https://pkg.pr.new/@trigger.dev/core@c7a4039

@trigger.dev/python

npm i https://pkg.pr.new/@trigger.dev/python@c7a4039

@trigger.dev/react-hooks

npm i https://pkg.pr.new/@trigger.dev/react-hooks@c7a4039

@trigger.dev/redis-worker

npm i https://pkg.pr.new/@trigger.dev/redis-worker@c7a4039

@trigger.dev/rsc

npm i https://pkg.pr.new/@trigger.dev/rsc@c7a4039

@trigger.dev/schema-to-json

npm i https://pkg.pr.new/@trigger.dev/schema-to-json@c7a4039

@trigger.dev/sdk

npm i https://pkg.pr.new/@trigger.dev/sdk@c7a4039

commit: c7a4039

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

🟡 Dependency update to a published package ships without a release note

The published CLI package's dependency is updated (tar bumped to ^7.5.19 at packages/cli-v3/package.json:143) without adding the required changeset, so this change to a public package will not appear in the user-facing release notes.
Impact: The version bump merges without generating a changelog entry, breaking the repository's release-notes process for public package changes.

Missing changeset for public package change

Both CONTRIBUTING.md and AGENTS.md state that any change to a package under packages/* requires a changeset (pnpm run changeset:add). packages/cli-v3 is the published trigger.dev package. The PR only touches packages/cli-v3/package.json and pnpm-lock.yaml; no file was added under .changeset/ for this change.

---

Was this helpful? React with 👍 or 👎 to provide feedback.