Bump the npm_and_yarn group with 4 updates

Bumps the npm_and_yarn group with 4 updates: [braces](https://github.com/micromatch/braces), [cross-spawn](https://github.com/moxystudio/node-cross-spawn), [tar](https://github.com/isaacs/node-tar) and [npm](https://github.com/npm/cli).


Updates `braces` from 3.0.2 to 3.0.3
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](micromatch/braces@3.0.2...3.0.3)

Updates `cross-spawn` from 7.0.3 to 7.0.6
- [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md)
- [Commits](moxystudio/node-cross-spawn@v7.0.3...v7.0.6)

Removes `tar`

Updates `npm` from 10.5.0 to 10.9.2
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/v10.9.2/CHANGELOG.md)
- [Commits](npm/cli@v10.5.0...v10.9.2)

---
updated-dependencies:
- dependency-name: braces
  dependency-version: 3.0.3
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: cross-spawn
  dependency-version: 7.0.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: tar
  dependency-version: 
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: npm
  dependency-version: 10.9.2
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]