Update tar and minimatch version

[azmkercso]

Issue

V2104769527

Description of Changes

• Update tar to at least version 7.5.8`
• Override minimatch version to 10.2.1

Testing

• For tar: Low risk patch update of dependency, no additional testing was performed other than building and updating lock and license files. The dependency is used during the build process, so successful building in this case is sufficient to verify the update's correctness
• For minimatch: Inspected package-lock.json and verified that the override is properly in place. Tested with running ./scripts/generate-oss-attribution.sh --prepare-sources and verifying that there is no change in the generated attributions

Screenshots/Videos

• N/A

Additional Notes

• N/A

Backporting

• Yes, separate PRs are being created to update tar in 1.1, 1.0, main branches

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

[azmkercso]

Converted to draft as there is an additional finding triggering failure: https://github.com/azmkercso/code-editor/actions/runs/22176128034.