Chore: Bump tar to 6.2.1

[jackw]

What is this feature?

This PR updates the npm package tar to 6.2.1

Why do we need this feature?

To stop dependabot complaining about this.

Who is this feature for?

Security minded folk

Which issue(s) does this PR fix?:

Fixes #

Special notes for your reviewer:

Please check that:

• It works as expected from a user's perspective.
• If this is a pre-GA feature, it is behind a feature toggle.
• The docs are updated, and if this is a notable improvement, it's added to our What's New doc.

[ashharrison90]

i know there's no other way of doing this, but...

that resolutions list only ever grows 😅 given we're not vulnerable to this at all (build time devdep), is there any point, or should we just wait for lerna to bump? 🤔

[jackw]

i know there's no other way of doing this, but...

that resolutions list only ever grows 😅 given we're not vulnerable to this at all (build time devdep), is there any point, or should we just wait for lerna to bump? 🤔

Sure, we can leave this open for a while (a couple of weeks) and see if the lerna bump gets merged. I'm pretty sure they'll have it sorted by then. 👍

[jackw]

closing in favour of #87699