From 7823a8e6b9b0e915f6bdcc334061a8093f6a5c45 Mon Sep 17 00:00:00 2001
From: Rodolfo Olivieri <rolivier@redhat.com>
Date: Mon, 23 Mar 2026 15:11:48 -0300
Subject: [PATCH] Update tar version to avoid CVE-2026-33056 (#8073)

Signed-off-by: Rodolfo Olivieri <rodolfo.olivieri3@gmail.com>
---
 crates/goose-cli/Cargo.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/crates/goose-cli/Cargo.toml b/crates/goose-cli/Cargo.toml
index e8dbfd4b..b0666212 100644
--- a/crates/goose-cli/Cargo.toml
+++ b/crates/goose-cli/Cargo.toml
@@ -48,7 +48,7 @@ shlex = "1.3.0"
 async-trait = { workspace = true }
 base64 = { workspace = true }
 regex = { workspace = true }
-tar = "0.4"
+tar = "0.4.45"
 reqwest = { workspace = true, features = ["blocking", "rustls"], default-features = false }
 zip = { workspace = true }
 bzip2 = "0.5"