From 94f09e2aa0f9ce0e5c00196578031e4e490b20c8 Mon Sep 17 00:00:00 2001
From: Marc LeBlanc <7050295+marcleblanc2@users.noreply.github.com>
Date: Tue, 3 Nov 2026 17:12:17 -0600
Subject: [PATCH] npm: drop stale overrides and the unused @types/tar
 devDependency

The overrides block was added in #1218 and #1219 to force patched
versions of cross-spawn, glob, and brace-expansion, which tar 7.1
pulled in through rimraf. tar 7.5 (#1319, #1357) dropped rimraf, so
none of those packages are in the dependency tree anymore and the
overrides have no effect. Renovate still reads them as declared
dependencies and keeps opening PRs to bump them (#1389, #1390, #1392,
#1393).

@types/tar is unused: npm-distribution has no TypeScript, and tar 7
ships its own types (#1391 would have replaced it with a deprecated
stub).

Co-authored-by: Amp <amp@ampcode.com>
Amp-Thread-ID: https://ampcode.com/threads/T-01a1a37e-8603-775d-bc85-c5677817f7a8
---
 npm-distribution/package-lock.json | 41 ------------------------------
 npm-distribution/package.json      |  8 ------
 2 files changed, 49 deletions(-)

diff --git a/npm-distribution/package-lock.json b/npm-distribution/package-lock.json
index 8a11a72602..3d74473744 100644
--- a/npm-distribution/package-lock.json
+++ b/npm-distribution/package-lock.json
@@ -14,9 +14,6 @@
       },
       "bin": {
         "src": "src.js"
-      },
-      "devDependencies": {
-        "@types/tar": "6.1.13"
       }
     },
     "node_modules/@isaacs/fs-minipass": {
@@ -40,27 +37,6 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
-    "node_modules/@types/node": {
-      "version": "24.10.1",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-24.10.1.tgz",
-      "integrity": "sha512-GNWcUTRBgIRJD5zj+Tq0fKOJ5XZajIiBroOF0yvj2bSU1WvNdYS/dn9UxwsujGW4JX06dnHyjV2y9rRaybH0iQ==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "undici-types": "~7.16.0"
-      }
-    },
-    "node_modules/@types/tar": {
-      "version": "6.1.13",
-      "resolved": "https://registry.npmjs.org/@types/tar/-/tar-6.1.13.tgz",
-      "integrity": "sha512-IznnlmU5f4WcGTh2ltRu/Ijpmk8wiWXfF0VA4s+HPjHZgvFggk1YaIkbo5krX/zUCzWF8N/l4+W/LNxnvAJ8nw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@types/node": "*",
-        "minipass": "^4.0.0"
-      }
-    },
     "node_modules/chownr": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/chownr/-/chownr-3.0.0.tgz",
@@ -70,16 +46,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/minipass": {
-      "version": "4.2.8",
-      "resolved": "https://registry.npmjs.org/minipass/-/minipass-4.2.8.tgz",
-      "integrity": "sha512-fNzuVyifolSLFL4NzpF+wEF4qrgqaaKX0haXPQEdQ7NKAN+WecoKMHV09YcuL/DHxrUsYQOK3MiuDf7Ip2OXfQ==",
-      "dev": true,
-      "license": "ISC",
-      "engines": {
-        "node": ">=8"
-      }
-    },
     "node_modules/minizlib": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-3.1.0.tgz",
@@ -126,13 +92,6 @@
         "node": ">=16 || 14 >=14.17"
       }
     },
-    "node_modules/undici-types": {
-      "version": "7.16.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
-      "integrity": "sha512-Zz+aZWSj8LE6zoxD+xrjh4VfkIG8Ya6LvYkZqtUQGJPZjYl53ypCaUwWqo7eI0x66KBGeRo+mlBEkMSeSZ38Nw==",
-      "dev": true,
-      "license": "MIT"
-    },
     "node_modules/yallist": {
       "version": "5.0.0",
       "resolved": "https://registry.npmjs.org/yallist/-/yallist-5.0.0.tgz",
diff --git a/npm-distribution/package.json b/npm-distribution/package.json
index c65849dac4..3521a70539 100644
--- a/npm-distribution/package.json
+++ b/npm-distribution/package.json
@@ -19,13 +19,5 @@
   "dependencies": {
     "tar": "^7.5.22"
   },
-  "overrides": {
-    "cross-spawn": "^7.0.5",
-    "glob": "^10.5.0",
-    "brace-expansion": "^2.0.2"
-  },
-  "devDependencies": {
-    "@types/tar": "6.1.13"
-  },
   "private": false
 }