Auto merge of #642 - rust-lang:dependabot/cargo/tar-0.4.36, r=Mark-Simulacrum

Bump tar from 0.4.30 to 0.4.36

Bumps [tar](https://github.com/alexcrichton/tar-rs) from 0.4.30 to 0.4.36.
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/2587ead5ce8bf9378b010f9e7e305dd9aa602360"><code>2587ead</code></a> Bump to 0.4.36</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/d90a02f582c03dfa0fd11c78d608d0974625ae5d"><code>d90a02f</code></a> Don't create directories before we've verified they're inside the tar destina...</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/860858be1ef65b3640c27ed752ea080995f86a64"><code>860858b</code></a> tidy 'header' implementation (<a href="https://github-redirect.dependabot.com/alexcrichton/tar-rs/issues/254">#254</a>)</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/b9cffc8735c9617eb69bf942c748ace0091ded35"><code>b9cffc8</code></a> builder: add support for archiving special files on Unix (<a href="https://github-redirect.dependabot.com/alexcrichton/tar-rs/issues/246">#246</a>)</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/6fa206d6c9972a027e12b5588f193d06b375329f"><code>6fa206d</code></a> Read the <code>linkpath</code> PAX extension (<a href="https://github-redirect.dependabot.com/alexcrichton/tar-rs/issues/252">#252</a>)</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/065368bd70e6f3328a280879a30915affe19d406"><code>065368b</code></a> Bump to 0.4.35</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/2d08ac793029c74c4b1589cc0238e36670bed42d"><code>2d08ac7</code></a> Don't set 0 mtime on Windows</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/a37e9fd45150c05a471abe11db037dc29402f8df"><code>a37e9fd</code></a> Bump to 0.4.34</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/e81f172113c44742c9e096c296f3055abd2dfa0b"><code>e81f172</code></a> Avoid zero-mtime files (<a href="https://github-redirect.dependabot.com/alexcrichton/tar-rs/issues/250">#250</a>)</li>
<li><a href="https://github.com/alexcrichton/tar-rs/commit/7f2a355ac56a5ec5cf260058850b1daed20cf761"><code>7f2a355</code></a> Extract directory entries after all others when using Archive::unpack. (<a href="https://github-redirect.dependabot.com/alexcrichton/tar-rs/issues/249">#249</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/alexcrichton/tar-rs/compare/0.4.30...0.4.36">compare view</a></li>
</ul>
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tar&package-manager=cargo&previous-version=0.4.30&new-version=0.4.36)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting ``@dependabot` rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- ``@dependabot` rebase` will rebase this PR
- ``@dependabot` recreate` will recreate this PR, overwriting any edits that have been made to it
- ``@dependabot` merge` will merge this PR after your CI passes on it
- ``@dependabot` squash and merge` will squash and merge this PR after your CI passes on it
- ``@dependabot` cancel merge` will cancel a previously requested merge and block automerging
- ``@dependabot` reopen` will reopen this PR if it is closed
- ``@dependabot` close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- ``@dependabot` ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- ``@dependabot` use these labels` will set the current labels as the default for future PRs for this repo and language
- ``@dependabot` use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- ``@dependabot` use these assignees` will set the current assignees as the default for future PRs for this repo and language
- ``@dependabot` use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rust-lang/crater/network/alerts).

</details>

Author: bors

Cargo.lock

@@ -41,7 +41,7 @@ serde_json = "1.0"
 serde_regex = "0.3.0"
 structopt = "0.2"
 structopt-derive = "0.2"
-tar = "0.4.0"
+tar = "0.4.36"
 tempfile = "3.0.0"
 tera = "0.11.7"
 toml = "0.4.6"