Upgrade node-tar to fix CVE-2018-20834

[lixuna]

Upgrade node-tar to fix CVE-2018-20834

• CVE: https://nvd.nist.gov/vuln/detail/CVE-2018-20834

Remediation Tasks:

• Upgrade node-sass

• Upgrade npm

• Upgrade node-gyp

• Upgrade tar to version 4.4.2 or later.

Acceptance Criteria:

1. The alert should no longer be listed
2. x.cncf.ci (all environments) should load content, display expected content, function as expected

[nupejosh]

I followed this issue for about a week. Here are a couple of the threads that I aided me in finding solution.

• v3.8.1 proposal (became v4.0.0) nodejs/node-gyp#1718 (comment)

• [Security] Vulnerability in tar sass/node-sass#2625

• Attempt to fix v2 file overwrite vulnerability isaacs/node-tar#213