Upgrade tar to address security vulnerability

[iAmmar7]

Upgrade the tar dependency to the latest v7.0.1 to address the following security issue:

GHSA-f5x3-32g6-xq36

[cclauss]

Please insert the line - npm run update-crosswalk after line 26 of the file appveyor.yml so we can see if your tests pass.

[cclauss]

Great! Now set lines 5 thru 7 of appveyor.yml to

    - nodejs_version: 18
    - nodejs_version: 20
    - nodejs_version: 22

to match https://nodejs.org/en/about/previous-releases#release-schedule and your tests should be green. ✅

[iAmmar7]

The tests would be green because of the newer Node versions, but are you sure I should remove the older versions from the tests?

[iAmmar7]

Well, it did not pass for Node 20 and 21.

[benmccann]

looks like there's an explanation for that here: https://github.com/mapbox/node-pre-gyp/pull/712/files#diff-92ab9a36df5d8e9f7076f2fdec59492d1ac2d9cf27ea046767a7fc4d542ef3dcR11

[bensquire]

I'm out of my depth here, but just to say we're seeing pressure to also update our packages because of the above tar dependancy.

[cclauss]

@bensquire I would recommend dropping node-pre-gyp because it is unmaintained.

• Needed: New maintainership of node-pre-gyp #657

[bensquire]

Thanks @cclauss. Will look at what I need to tear out in turn :)

[benmccann]

node 22 is out now

Suggested change

	- nodejs_version: 21
	- nodejs_version: 22

[cclauss]

Git conflicts -- Please rebase.