diff --git a/.github/workflows/test-package.yml b/.github/workflows/test-package.yml
index 8e30150a..60ae0fc9 100644
--- a/.github/workflows/test-package.yml
+++ b/.github/workflows/test-package.yml
@@ -49,8 +49,8 @@ jobs:
         # TODO(sigurdm): our end2end test creates longer filenames than we can
         # handle on windows. See https://github.com/dart-lang/sdk/issues/42416
         os: [ubuntu-latest, macos-latest]
-        sdk: [3.4.0]
-        flutter: [3.22.0]
+        sdk: [3.4.3]
+        flutter: [3.22.2]
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - uses: dart-lang/setup-dart@0a8a0fc875eb934c15d08629302413c671d3f672
@@ -84,7 +84,7 @@ jobs:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
       - uses: dart-lang/setup-dart@0a8a0fc875eb934c15d08629302413c671d3f672
         with:
-          sdk: '3.5.0-147.0.dev' # TODO: switch back to rolling 'dev' channel after it gets updated.
+          sdk: '3.5.0-307.0.dev' # TODO: switch back to rolling 'dev' channel after it gets updated.
       - uses: subosito/flutter-action@44ac965b96f18d999802d4b807e3256d5a3f9fa1
         with:
           # flutter-version: '3.4.0-34.1.pre'
diff --git a/CHANGELOG.md b/CHANGELOG.md
index e16ea972..55372921 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 0.22.8
+
+- Updated dependency: `tar: ^2.0.0`.
+
 ## 0.22.7
 
 - Enable `macros` experiment pass-through in `analysis_options.yaml`.
diff --git a/lib/src/version.dart b/lib/src/version.dart
index 5c9e4e13..cc183fbd 100644
--- a/lib/src/version.dart
+++ b/lib/src/version.dart
@@ -1,2 +1,2 @@
 // Generated code. Do not modify.
-const packageVersion = '0.22.7';
+const packageVersion = '0.22.8-dev';
diff --git a/pubspec.yaml b/pubspec.yaml
index d61a4185..57b42aa2 100644
--- a/pubspec.yaml
+++ b/pubspec.yaml
@@ -1,6 +1,6 @@
 name: pana
 description: PAckage aNAlyzer - produce a report summarizing the health and quality of a Dart package.
-version: 0.22.7
+version: 0.22.8-dev
 repository: https://github.com/dart-lang/pana
 topics:
   - tool
@@ -31,7 +31,7 @@ dependencies:
   safe_url_check: ^1.0.0
   source_span: ^1.7.0
   string_scanner: ^1.1.0
-  tar: ^1.0.0
+  tar: ^2.0.0
   yaml: ^3.0.0
   test: ^1.5.2 # needed for lib/src/third_party/diff_match_patch/test.dart
 
diff --git a/test/goldens/end2end/bulma_min-0.7.4.json b/test/goldens/end2end/bulma_min-0.7.4.json
index 053bdec6..ff6a5555 100644
--- a/test/goldens/end2end/bulma_min-0.7.4.json
+++ b/test/goldens/end2end/bulma_min-0.7.4.json
@@ -74,7 +74,7 @@
         "grantedPoints": 0,
         "maxPoints": 40,
         "status": "failed",
-        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:8:8`\n\n```\n  ╷\n8 │   sdk: '>=1.0.0 <3.0.0'\n  │        ^^^^^^^^^^^^^^^^\n  ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:8:8`\n\n```\n  ╷\n8 │   sdk: '>=1.0.0 <3.0.0'\n  │        ^^^^^^^^^^^^^^^^\n  ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.0) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
+        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:8:8`\n\n```\n  ╷\n8 │   sdk: '>=1.0.0 <3.0.0'\n  │        ^^^^^^^^^^^^^^^^\n  ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:8:8`\n\n```\n  ╷\n8 │   sdk: '>=1.0.0 <3.0.0'\n  │        ^^^^^^^^^^^^^^^^\n  ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.3) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
       }
     ]
   },
diff --git a/test/goldens/end2end/bulma_min-0.7.4.json_report.md b/test/goldens/end2end/bulma_min-0.7.4.json_report.md
index 68d3a819..2082f48b 100644
--- a/test/goldens/end2end/bulma_min-0.7.4.json_report.md
+++ b/test/goldens/end2end/bulma_min-0.7.4.json_report.md
@@ -99,7 +99,7 @@ ERR:
 The lower bound of "sdk: '>=1.0.0 <3.0.0'" must be 2.12.0'
 or higher to enable null safety.
 
-The current Dart SDK (3.4.0) only supports null safety.
+The current Dart SDK (3.4.3) only supports null safety.
 
 For details, see https://dart.dev/null-safety
 ```
diff --git a/test/goldens/end2end/mime_type-0.3.2.json b/test/goldens/end2end/mime_type-0.3.2.json
index 23a47f96..e22da33d 100644
--- a/test/goldens/end2end/mime_type-0.3.2.json
+++ b/test/goldens/end2end/mime_type-0.3.2.json
@@ -67,7 +67,7 @@
         "grantedPoints": 0,
         "maxPoints": 40,
         "status": "failed",
-        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:10:10`\n\n```\n   ╷\n10 │     sdk: '>=0.8.10 <3.0.0'\n   │          ^^^^^^^^^^^^^^^^^\n   ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:10:10`\n\n```\n   ╷\n10 │     sdk: '>=0.8.10 <3.0.0'\n   │          ^^^^^^^^^^^^^^^^^\n   ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=0.8.10 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.0) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
+        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:10:10`\n\n```\n   ╷\n10 │     sdk: '>=0.8.10 <3.0.0'\n   │          ^^^^^^^^^^^^^^^^^\n   ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:10:10`\n\n```\n   ╷\n10 │     sdk: '>=0.8.10 <3.0.0'\n   │          ^^^^^^^^^^^^^^^^^\n   ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=0.8.10 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.3) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
       }
     ]
   },
diff --git a/test/goldens/end2end/mime_type-0.3.2.json_report.md b/test/goldens/end2end/mime_type-0.3.2.json_report.md
index db09e821..dc5092c9 100644
--- a/test/goldens/end2end/mime_type-0.3.2.json_report.md
+++ b/test/goldens/end2end/mime_type-0.3.2.json_report.md
@@ -128,7 +128,7 @@ ERR:
 The lower bound of "sdk: '>=0.8.10 <3.0.0'" must be 2.12.0'
 or higher to enable null safety.
 
-The current Dart SDK (3.4.0) only supports null safety.
+The current Dart SDK (3.4.3) only supports null safety.
 
 For details, see https://dart.dev/null-safety
 ```
diff --git a/test/goldens/end2end/sdp_transform-0.2.0.json b/test/goldens/end2end/sdp_transform-0.2.0.json
index b31248f7..c17f4ad6 100644
--- a/test/goldens/end2end/sdp_transform-0.2.0.json
+++ b/test/goldens/end2end/sdp_transform-0.2.0.json
@@ -83,7 +83,7 @@
         "grantedPoints": 0,
         "maxPoints": 40,
         "status": "failed",
-        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:10:8`\n\n```\n   ╷\n10 │   sdk: '<3.0.0'\n   │        ^^^^^^^^\n   ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:10:8`\n\n```\n   ╷\n10 │   sdk: '<3.0.0'\n   │        ^^^^^^^^\n   ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.0) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
+        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n</summary>\n\n`pubspec.yaml:10:8`\n\n```\n   ╷\n10 │   sdk: '<3.0.0'\n   │        ^^^^^^^^\n   ╵\n```\n\n</details>\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nSdk constraint doesn't support current Dart version {{sdk-version}}.\n</summary>\n\n`pubspec.yaml:10:8`\n\n```\n   ╷\n10 │   sdk: '<3.0.0'\n   │        ^^^^^^^^\n   ╵\n```\n\nTry widening the upper boundary of the constraint.\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <3.0.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.3) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
       }
     ]
   },
diff --git a/test/goldens/end2end/sdp_transform-0.2.0.json_report.md b/test/goldens/end2end/sdp_transform-0.2.0.json_report.md
index 199b3dc9..e27307ca 100644
--- a/test/goldens/end2end/sdp_transform-0.2.0.json_report.md
+++ b/test/goldens/end2end/sdp_transform-0.2.0.json_report.md
@@ -105,7 +105,7 @@ ERR:
 The lower bound of "sdk: '>=1.0.0 <3.0.0'" must be 2.12.0'
 or higher to enable null safety.
 
-The current Dart SDK (3.4.0) only supports null safety.
+The current Dart SDK (3.4.3) only supports null safety.
 
 For details, see https://dart.dev/null-safety
 ```
diff --git a/test/goldens/end2end/skiplist-0.1.0.json b/test/goldens/end2end/skiplist-0.1.0.json
index 0947b16a..39bb2604 100644
--- a/test/goldens/end2end/skiplist-0.1.0.json
+++ b/test/goldens/end2end/skiplist-0.1.0.json
@@ -72,7 +72,7 @@
         "grantedPoints": 0,
         "maxPoints": 50,
         "status": "failed",
-        "summary": "### [x] 0/50 points: code has no errors, warnings, lints, or formatting issues\n\n* Running `dart pub outdated` failed with the following output:\n\n```\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.0'\" must be 2.12.0'\nor higher to enable null safety.\n```\n"
+        "summary": "### [x] 0/50 points: code has no errors, warnings, lints, or formatting issues\n\n* Running `dart pub outdated` failed with the following output:\n\n```\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.3'\" must be 2.12.0'\nor higher to enable null safety.\n```\n"
       },
       {
         "id": "dependency",
@@ -80,7 +80,7 @@
         "grantedPoints": 0,
         "maxPoints": 40,
         "status": "failed",
-        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n* Sdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nPubspec.yaml does not have an sdk version constraint.\n</summary>\n\nTry adding an sdk constraint to your `pubspec.yaml`\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.0'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.0) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
+        "summary": "### [x] 0/10 points: All of the package dependencies are supported in the latest version\n\n* Sdk constraint doesn't support current Dart version {{sdk-version}}. Cannot run `dart pub outdated`.\n\n### [x] 0/10 points: Package supports latest stable Dart and Flutter SDKs\n\n<details>\n<summary>\nPubspec.yaml does not have an sdk version constraint.\n</summary>\n\nTry adding an sdk constraint to your `pubspec.yaml`\n</details>\n\n### [x] 0/20 points: Compatible with dependency constraint lower bounds\n\n`dart pub downgrade` failed with:\n\n```\nOUT:\nResolving dependencies...\nERR:\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.3'\" must be 2.12.0'\nor higher to enable null safety.\n\nThe current Dart SDK (3.4.3) only supports null safety.\n\nFor details, see https://dart.dev/null-safety\n```\n\nRun `dart pub downgrade` and then `dart analyze` to reproduce the above problem.\n\nYou may run `dart pub upgrade --tighten` to update your dependency constraints, see [dart.dev/go/downgrade-testing](https://dart.dev/go/downgrade-testing) for details."
       }
     ]
   },
@@ -98,5 +98,5 @@
     "maxPoints": 150
   },
   "urlProblems": [],
-  "errorMessage": "Running `dart pub outdated` failed with the following output:\n\n```\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.0'\" must be 2.12.0'\nor higher to enable null safety.\n```"
+  "errorMessage": "Running `dart pub outdated` failed with the following output:\n\n```\nThe lower bound of \"sdk: '>=1.0.0 <=3.4.3'\" must be 2.12.0'\nor higher to enable null safety.\n```"
 }
diff --git a/test/goldens/end2end/skiplist-0.1.0.json_report.md b/test/goldens/end2end/skiplist-0.1.0.json_report.md
index dcf717d8..77048ed3 100644
--- a/test/goldens/end2end/skiplist-0.1.0.json_report.md
+++ b/test/goldens/end2end/skiplist-0.1.0.json_report.md
@@ -51,7 +51,7 @@ Run `dart pub get` for more information.
 * Running `dart pub outdated` failed with the following output:
 
 ```
-The lower bound of "sdk: '>=1.0.0 <=3.4.0'" must be 2.12.0'
+The lower bound of "sdk: '>=1.0.0 <=3.4.3'" must be 2.12.0'
 or higher to enable null safety.
 ```
 
@@ -80,10 +80,10 @@ Try adding an sdk constraint to your `pubspec.yaml`
 OUT:
 Resolving dependencies...
 ERR:
-The lower bound of "sdk: '>=1.0.0 <=3.4.0'" must be 2.12.0'
+The lower bound of "sdk: '>=1.0.0 <=3.4.3'" must be 2.12.0'
 or higher to enable null safety.
 
-The current Dart SDK (3.4.0) only supports null safety.
+The current Dart SDK (3.4.3) only supports null safety.
 
 For details, see https://dart.dev/null-safety
 ```