fix(deps): upgrade tar-stream to 3.2.0

[pavel-snyk]

Snyk has created this PR to upgrade tar-stream from 3.1.7 to 3.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: tar-stream

• 3.2.0 - 2026-04-29
  

  3.2.0

• 3.1.9 - 2026-04-29
  

  3.1.9

• 3.1.8 - 2026-02-28
  

  3.1.8

• 3.1.7 - 2024-01-19
  

  3.1.7

from tar-stream GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Snyk has automatically assigned this pull request, set who gets assigned.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 👩‍💻 Set who automatically gets assigned
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[pavel-snyk]

This minor version upgrade for tar-stream introduces a behavioral change that could impact applications relying on the stream's event emissions.

Key Change:

• In version 3.2.0, the Extract stream will now emit the header event a second time just before the finish event occurs. Previously, the header event was only emitted once per entry.

This change could affect logic that assumes the header event is emitted only once. It is a subtle but potentially breaking behavioral modification.

Recommendation:
Review any code that uses the Extract stream to ensure that it can handle a repeated header event before the stream finishes. No other breaking changes were identified.

Source: Commit history for the mafintosh/tar-stream repository.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.