diff --git a/packages/cli/package.json b/packages/cli/package.json
index 8f5714c1e..5aa6c28e8 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -28,7 +28,7 @@
     "@rock-js/tools": "^0.11.2",
     "adm-zip": "^0.5.16",
     "commander": "^12.1.0",
-    "tar": "^7.4.3",
+    "tar": "^7.5.1",
     "tslib": "^2.3.0"
   },
   "devDependencies": {
diff --git a/packages/create-app/package.json b/packages/create-app/package.json
index d945e8a55..5e41f9e02 100644
--- a/packages/create-app/package.json
+++ b/packages/create-app/package.json
@@ -28,7 +28,7 @@
     "@types/minimist": "^1.2.5",
     "gradient-string": "^3.0.0",
     "minimist": "^1.2.8",
-    "tar": "^7.4.3",
+    "tar": "^7.5.1",
     "tslib": "^2.3.0"
   },
   "publishConfig": {
diff --git a/packages/tools/package.json b/packages/tools/package.json
index d5495086b..a86e58ce8 100644
--- a/packages/tools/package.json
+++ b/packages/tools/package.json
@@ -27,7 +27,7 @@
     "nano-spawn": "^0.2.0",
     "picocolors": "^1.1.1",
     "string-argv": "^0.3.2",
-    "tar": "^7.4.3",
+    "tar": "^7.5.1",
     "tslib": "^2.3.0"
   },
   "devDependencies": {
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 8bfbc4b34..c97b14c98 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -88,8 +88,8 @@ importers:
         specifier: ^12.1.0
         version: 12.1.0
       tar:
-        specifier: ^7.4.3
-        version: 7.4.3
+        specifier: ^7.5.1
+        version: 7.5.1
       tslib:
         specifier: ^2.3.0
         version: 2.8.1
@@ -150,8 +150,8 @@ importers:
         specifier: ^1.2.8
         version: 1.2.8
       tar:
-        specifier: ^7.4.3
-        version: 7.4.3
+        specifier: ^7.5.1
+        version: 7.5.1
       tslib:
         specifier: ^2.3.0
         version: 2.8.1
@@ -412,8 +412,8 @@ importers:
         specifier: ^0.3.2
         version: 0.3.2
       tar:
-        specifier: ^7.4.3
-        version: 7.4.3
+        specifier: ^7.5.1
+        version: 7.5.1
       tslib:
         specifier: ^2.3.0
         version: 2.8.1
@@ -4873,8 +4873,8 @@ packages:
     resolution: {integrity: sha512-qOOzS1cBTWYF4BH8fVePDBOO9iptMnGUEZwNc/cMWnTV2nVLZ7VoNWEPHkYczZA0pdoA7dl6e7FL659nX9S2aw==}
     engines: {node: '>=16 || 14 >=14.17'}
 
-  minizlib@3.0.1:
-    resolution: {integrity: sha512-umcy022ILvb5/3Djuu8LWeqUa8D68JaBzlttKeMWen48SjabqS3iY5w/vzeMzMUNhLDifyhbOwKDSznB1vvrwg==}
+  minizlib@3.1.0:
+    resolution: {integrity: sha512-KZxYo1BUkWD2TVFLr0MQoM8vUUigWD3LlD83a/75BqC+4qE0Hb1Vo5v1FgcfaNXvfXzr+5EhQ6ing/CaBijTlw==}
     engines: {node: '>= 18'}
 
   mkdirp@1.0.4:
@@ -4882,11 +4882,6 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  mkdirp@3.0.1:
-    resolution: {integrity: sha512-+NsyUUAZDmo6YVHzL/stxSu3t9YS1iljliy3BSDrXJ/dkn1KYdmtZODGGjLcc9XLgVVpH4KshHB8XmZgMhaBXg==}
-    engines: {node: '>=10'}
-    hasBin: true
-
   mri@1.2.0:
     resolution: {integrity: sha512-tzzskb3bG8LvYGFF/mDTpq3jpI6Q9wc3LEmBaghu+DdCssd1FakN7Bc0hVNmEyGq1bq3RgfkCb3cmQLpNPOroA==}
     engines: {node: '>=4'}
@@ -5512,10 +5507,6 @@ packages:
     deprecated: Rimraf versions prior to v4 are no longer supported
     hasBin: true
 
-  rimraf@5.0.10:
-    resolution: {integrity: sha512-l0OE8wL34P4nJH/H2ffoaniAokM2qSmrtXHmlpvYr5AVVX8msAyW0l8NVJFDxlSK4u3Uh/f41cQheDVdnYijwQ==}
-    hasBin: true
-
   rollup@4.46.2:
     resolution: {integrity: sha512-WMmLFI+Boh6xbop+OAGo9cQ3OgX9MIg7xOQjn+pTCwOkk+FNDAeAemXkJ3HzDJrVXleLOFVa1ipuc1AmEx1Dwg==}
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
@@ -5977,8 +5968,8 @@ packages:
   tar-stream@3.1.7:
     resolution: {integrity: sha512-qJj60CXt7IU1Ffyc3NJMjh6EkuCFej46zUqJ4J7pqYlThyd9bO0XBTmcOIhSzZJVWfsLks0+nle/j538YAW9RQ==}
 
-  tar@7.4.3:
-    resolution: {integrity: sha512-5S7Va8hKfV7W5U6g3aYxXmlPoZVAwUMy9AOKyF2fVuZa2UD3qZjg578OrLRt8PcNN1PleVaL/5/yYATNL0ICUw==}
+  tar@7.5.1:
+    resolution: {integrity: sha512-nlGpxf+hv0v7GkWBK2V9spgactGOp0qvfWRxUMjqHyzrt3SgwE48DIv/FhqPHJYLHpgW1opq3nERbz5Anq7n1g==}
     engines: {node: '>=18'}
 
   term-size@2.2.1:
@@ -12671,15 +12662,12 @@ snapshots:
 
   minipass@7.1.2: {}
 
-  minizlib@3.0.1:
+  minizlib@3.1.0:
     dependencies:
       minipass: 7.1.2
-      rimraf: 5.0.10
 
   mkdirp@1.0.4: {}
 
-  mkdirp@3.0.1: {}
-
   mri@1.2.0: {}
 
   mrmime@2.0.1: {}
@@ -13428,10 +13416,6 @@ snapshots:
     dependencies:
       glob: 7.2.3
 
-  rimraf@5.0.10:
-    dependencies:
-      glob: 10.4.5
-
   rollup@4.46.2:
     dependencies:
       '@types/estree': 1.0.8
@@ -13896,13 +13880,12 @@ snapshots:
       fast-fifo: 1.3.2
       streamx: 2.22.1
 
-  tar@7.4.3:
+  tar@7.5.1:
     dependencies:
       '@isaacs/fs-minipass': 4.0.1
       chownr: 3.0.0
       minipass: 7.1.2
-      minizlib: 3.0.1
-      mkdirp: 3.0.1
+      minizlib: 3.1.0
       yallist: 5.0.0
 
   term-size@2.2.1: {}