[rush] `rush-lib` depends on an old version of `tar` that has a security issue

[kgetz-arista]

Summary

rush-lib is still using an old version of tar 6.x:

https://github.com/microsoft/rushstack/blob/main/libraries/rush-lib/package.json#L69

Old versions of tar have a security issue:

GHSA-8qq5-rm4j-mr97

Repro steps

Use rush-lib in a repo and run a security scan.

Expected result: No issues

Actual result: 1 security issue

Details

rush-lib should be updated to use the latest version of tar.

Standard questions

Please answer these questions to help us investigate your issue more quickly:

N/A

[iclanton]

Good catch. The upgrade is probably straightforward.