[FAI-16898] Vuln fix: tar-fs

[jeniii]

This pull request updates several dependencies in airbyte-local-cli-nodejs/package-lock.json to newer versions, primarily focusing on the brace-expansion and tar-fs libraries. These updates improve security and compatibility by incorporating the latest changes from upstream.

Dependency updates:

• Updated brace-expansion from version 1.1.11 to 1.1.12 in multiple nested dependencies, including @eslint/eslintrc, @humanwhocodes/config-array, eslint, glob, jake, and test-exclude modules. [1] [2] [3] [4] [5] [6]
• Updated the top-level brace-expansion dependency from version 2.0.1 to 2.0.2.
• Updated tar-fs from version 2.1.2 to 2.1.3.

[Copilot]

Copilot wasn't able to review any files in this pull request.

Files not reviewed (1)

• airbyte-local-cli-nodejs/package-lock.json: Language not supported

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[jeniii]

the latest version of libs (dcokerode, yao-pkg) that bring in tar-fs have not yet updated to the fixed version. so i just do audit fix.