Greptile Summary

This PR is a minimal, targeted security fix that bumps the pnpm.overrides entry for tar from 7.5.10 to 7.5.11 and regenerates the lockfile to resolve GHSA-9ppj-qmqm-q256 (high-severity vulnerability in the tar package). The change unblocks pnpm audit --prod --audit-level=high CI failures on origin/main.

• package.json: single-line change to the pnpm.overrides.tar field (7.5.10 → 7.5.11).
• pnpm-lock.yaml: all tar references (7.5.10) are consistently updated to 7.5.11 (overrides block, importer specifier/version, package resolution with updated sha512 integrity hash, and snapshot dependency entries). No unrelated package versions were modified.

Confidence Score: 5/5

• This PR is safe to merge — it is a focused, single-dependency version bump with no logic changes.
• The change is minimal and entirely mechanical: one version string updated in package.json and the corresponding lockfile entries regenerated by pnpm. All tar version references in pnpm-lock.yaml (overrides, importer, package resolution with integrity hash, and snapshots) are consistently updated to 7.5.11. No other packages were touched. The PR description accurately describes the change and its motivation (GHSA-9ppj-qmqm-q256).
• No files require special attention.

_{Last reviewed commit: a6e8590}

Closing this as superseded by current origin/main. I re-checked the latest main tip and pnpm audit --prod --audit-level=high no longer reports the previous tar high-severity finding, so the unblock has already landed upstream. Keeping this PR open would only duplicate the fix and keep a now-conflicting branch around.