fix: package.json & package-lock.json to reduce vulnerabilities (#5131)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-6476909

Co-authored-by: snyk-bot <snyk-bot@snyk.io>

package.json

@@ -131,7 +131,7 @@
     "snyk-sbt-plugin": "2.18.1",
     "snyk-swiftpm-plugin": "1.4.1",
     "strip-ansi": "^6.0.1",
-    "tar": "^6.1.2",
+    "tar": "^6.2.1",
     "uuid": "^8.3.2",
     "wrap-ansi": "^5.1.0"
   },