fix: security vulnerabilities CVE-2025-58050 and CVE-2025-59343 (#888)

## What

## Why

https://codefresh-io.atlassian.net/browse/CR-31902

## Notes

Author: vasil-cf

.nvmrc

@@ -1 +1 @@
-v22.16.0
+v22.21.0

Dockerfile

@@ -14,7 +14,7 @@ RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/
 FROM bitnamilegacy/kubectl:1.33.1 AS kubectl
 
 # Main
-FROM node:22.16.0-alpine3.22
+FROM node:22.21.0-alpine3.22
 RUN apk --update add --no-cache \
     bash \
     ca-certificates \

Dockerfile-debian

@@ -14,7 +14,7 @@ RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/
 FROM bitnamilegacy/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.16.0-bookworm-slim
+FROM node:22.21.0-trixie-slim
 RUN apt update \
     && apt -y install \
     apt-transport-https \

Dockerfile-debian-rootless

@@ -14,7 +14,7 @@ RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/
 FROM bitnamilegacy/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.16.0-bookworm-slim
+FROM node:22.21.0-trixie-slim
 RUN apt update \
     && apt -y install \
     bash \

Dockerfile-rootless

@@ -14,7 +14,7 @@ RUN pyinstaller --noconfirm --onefile --log-level DEBUG --clean --distpath /tmp/
 FROM bitnamilegacy/kubectl:1.33.1 as kubectl
 
 # Main
-FROM node:22.16.0-alpine3.22
+FROM node:22.21.0-alpine3.22
 RUN apk --update add --no-cache \
     bash \
     ca-certificates \

package.json

@@ -1,6 +1,6 @@
 {
   "name": "codefresh",
-  "version": "0.89.4",
+  "version": "0.89.5",
   "description": "Codefresh command line utility",
   "main": "index.js",
   "preferGlobal": true,

yarn.lock

@@ -6360,19 +6360,19 @@ table@^6.0.9:
     strip-ansi "^6.0.1"
 
 tar-fs@^2.0.0, tar-fs@^2.1.1:
-  version "2.1.3"
-  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.3.tgz#fb3b8843a26b6f13a08e606f7922875eb1fbbf92"
-  integrity sha512-090nwYJDmlhwFwEW3QQl+vaNnxsO2yVsd45eTKRBzSzu+hlb1w2K9inVq5b0ngXuLVqQ4ApvsUHHnu/zQNkWAg==
+  version "2.1.4"
+  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-2.1.4.tgz#800824dbf4ef06ded9afea4acafe71c67c76b930"
+  integrity sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==
   dependencies:
     chownr "^1.1.1"
     mkdirp-classic "^0.5.2"
     pump "^3.0.0"
     tar-stream "^2.1.4"
 
 tar-fs@~1.16.3:
-  version "1.16.5"
-  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-1.16.5.tgz#716a323609c11182d1d3d7b5bf277d15dc128665"
-  integrity sha512-1ergVCCysmwHQNrOS+Pjm4DQ4nrGp43+Xnu4MRGjCnQu/m3hEgLNS78d5z+B8OJ1hN5EejJdCSFZE1oM6AQXAQ==
+  version "1.16.6"
+  resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-1.16.6.tgz#b9be1854fe2c88af488a2edcc570be965e9750bd"
+  integrity sha512-JkOgFt3FxM/2v2CNpAVHqMW2QASjc/Hxo7IGfNd3MHaDYSW/sBFiS7YVmmhmr8x6vwN1VFQDQGdT2MWpmIuVKA==
   dependencies:
     chownr "^1.0.1"
     mkdirp "^0.5.1"