diff --git a/package.json b/package.json
index 0741183..fc7ac40 100644
--- a/package.json
+++ b/package.json
@@ -55,7 +55,7 @@
     "minipass-pipeline": "^1.2.4",
     "p-map": "^4.0.0",
     "ssri": "^10.0.0",
-    "tar": "^6.1.11",
+    "tar": "^7.4.0",
     "unique-filename": "^3.0.0"
   },
   "devDependencies": {