diff --git a/package.json b/package.json
index 3d89f4d..99e2e4f 100644
--- a/package.json
+++ b/package.json
@@ -55,7 +55,7 @@
     "js-yaml": "4.1.1",
     "ky": "1.14.0",
     "micromatch": "4.0.8",
-    "tar": "7.5.2",
+    "tar": "7.5.3",
     "ts-custom-error": "3.3.1",
     "zod": "4.1.12"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4dc614c..f308c15 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -33,8 +33,8 @@ importers:
         specifier: 4.0.8
         version: 4.0.8
       tar:
-        specifier: 7.5.2
-        version: 7.5.2
+        specifier: 7.5.3
+        version: 7.5.3
       ts-custom-error:
         specifier: 3.3.1
         version: 3.3.1
@@ -2824,8 +2824,8 @@ packages:
     resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
     engines: {node: '>=20'}
 
-  tar@7.5.2:
-    resolution: {integrity: sha512-7NyxrTE4Anh8km8iEy7o0QYPs+0JKBTj5ZaqHg6B39erLg0qYXN3BijtShwbsNSvQ+LN75+KV+C4QR/f6Gwnpg==}
+  tar@7.5.3:
+    resolution: {integrity: sha512-ENg5JUHUm2rDD7IvKNFGzyElLXNjachNLp6RaGf4+JOgxXHkqA+gq81ZAMCUmtMtqBsoU62lcp6S27g1LCYGGQ==}
     engines: {node: '>=18'}
 
   temp-dir@3.0.0:
@@ -5978,7 +5978,7 @@ snapshots:
 
   tagged-tag@1.0.0: {}
 
-  tar@7.5.2:
+  tar@7.5.3:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0