chore: Update tar-fs, tmp subdependencies to address vulnerabilities

[camdecoster]

Description

Update tar-fs, tmp subdependencies to address vulnerabilities surfaced by npm audit.

Changes

• Update tar-fs to v2.1.4
• Update tmp to v0.2.5

Testing

CI passing should be a good enough check.

Notes

The audit report showed the following. The MathJax vulnerability is a known issue that we've chosen to not to address for now.

# npm audit report

mathjax  <=2.7.9
Severity: high
MathJax Regular expression Denial of Service (ReDoS) - https://github.com/advisories/GHSA-v638-q856-grg8
fix available via `npm audit fix --force`
Will install mathjax@4.0.0, which is a breaking change
node_modules/@plotly/mathjax-v2

tar-fs  2.0.0 - 2.1.3
Severity: high
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball - https://github.com/advisories/GHSA-vj76-c3g6-qr5v
fix available via `npm audit fix`
node_modules/tar-fs

tmp  <=0.2.3
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter - https://github.com/advisories/GHSA-52f5-9888-hmc6
fix available via `npm audit fix`
node_modules/tmp

3 vulnerabilities (1 low, 2 high)

To address issues that do not require attention, run:
  npm audit fix

To address all issues (including breaking changes), run:
  npm audit fix --force

[emilykl]

🚀