Bump the npm_and_yarn group across 1 directory with 2 updates (#376)

Bumps the npm_and_yarn group with 2 updates in the /jbrowse directory: [tar](https://github.com/isaacs/node-tar) and [lodash](https://github.com/lodash/lodash).


Updates `tar` from 7.5.4 to 7.5.7
- [Release notes](https://github.com/isaacs/node-tar/releases)
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md)
- [Commits](isaacs/node-tar@v7.5.4...v7.5.7)

Updates `lodash` from 4.17.21 to 4.17.23
- [Release notes](https://github.com/lodash/lodash/releases)
- [Commits](lodash/lodash@4.17.21...4.17.23)

---
updated-dependencies:
- dependency-name: tar
  dependency-version: 7.5.7
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: lodash
  dependency-version: 4.17.23
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

jbrowse/package-lock.json

@@ -53,7 +53,7 @@
     "@types/react": "^18.3.0",
     "@types/react-dom": "^18.3.0",
     "rimraf": "^6.0.1",
-    "tar": "^7.5.4",
+    "tar": "^7.5.7",
     "typescript": "^5.1.6",
     "unzipper": "^0.12.3"
   }