[Snyk] Upgrade config from 3.3.7 to 3.3.11

[tomstrat]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade config from 3.3.7 to 3.3.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2024-02-01.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-JSON5-3182856	395/1000 Why? Proof of Concept exploit, CVSS 6.4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: config

• 3.3.11 - 2024-02-01
  

  What's Changed

  • fix: webpack bundling compatibility by @ cbazureau in #757

  New Contributors

  • @ cbazureau made their first contribution in #757

  Full Changelog: v3.3.10...v3.3.11

• 3.3.10 - 2024-01-09
  

  What's Changed

  • replace var to let and const by @ jamashita in #720
  • refactor: 💡 xxx === undefined => typeof xxx === 'undefined' by @ jamashita in #729
  • Fix source maps when using ts config files, improve performance loading ts config files by @ andrzej-woof in #721
  • fix: lack of comments removal, invalid regexp by @ DeutscherDude in #745

  New Contributors

  • @ jamashita made their first contribution in #720
  • @ andrzej-woof made their first contribution in #721
  • @ DeutscherDude made their first contribution in #745

  Full Changelog: v3.3.9...v3.3.10

• 3.3.9 - 2023-01-17
  

  What's Changed

  • Support loading transpiled JS config files by @ Tomas2D in #692
  • fix(vulnerability): upgrade json5 version from 2.2.1 to 2.2.2 by @ veekays in #713

  New Contributors

  • @ Tomas2D made their first contribution in #692
  • @ veekays made their first contribution in #713

  Full Changelog: v3.3.8...v3.3.9

• 3.3.8 - 2022-09-09
  

  What's Changed

  • bump json5 dep to 2.2.1
  • Cleanup of file scoped environment variables by @ jdmarshall in #667
  • Allow multiple relative directory paths separated by path.delimiter to work by @ inside in #661
  • Reentrancy bugs by @ jdmarshall in #668
  • Fixed property mutation. Throw an exception on such an attempt. Updat… by @ fgheorghe in #516
  • docs: update copyright & fix misspelling by @ DigitalGreyHat in #677

  New Contributors

  • @ jdmarshall made their first contribution in #667
  • @ inside made their first contribution in #661
  • @ DigitalGreyHat made their first contribution in #677

  Full Changelog: v3.3.7...v3.3.8

• 3.3.7 - 2022-01-11
  
  • No code changes. Resolving versioning / release mix-up

from config GitHub release notes

Commit messages

Package name: config

• fb5033d Version bump
• aac0693 fix: webpack bundling compatibility
• a1bb7e8 chore: Bumped version to 3.3.10
• c8a7759 fix: remove stripping comments for JSON5 & CSON parsers
• aa7cdea fix: regexp for cson handling, revert promise changes
• 0058701 feat: default to json5 for json parsing
• 1761c96 Repaired 1 broken test, disabled another that I question ever worked
• 8c52ea2 Fix source maps when using ts config files
• a8b91ac refactor: 💡 xxx === undefined => typeof xxx === 'undefined'
• 46d0c31 replace var to let and const
• 4c1c619 deps: bump json5 version
• 2cca43c fix(vulnerability): upgrade json5 version from 2.2.1 to 2.2.2
• 56f0f51 Update History.md
• 4da385c Support loading transpiled JS modules
• fadb21b internal: Update Github issue templates
• fa43913 chore: bump version to 3.3.8
• 8bb4333 Add Bug Report and Feature Request templates
• 97bd618 recommend Github Discussion for discussions.
• 98ba009 deps: force json5 upgrade to address vulnerable sub-deb
• f54b419 docs: update copyright & fix misspelling
• 405e408 Fixed property mutation. Throw an exception on such an attempt. Updated tests to capture this exception.
• 11ab347 reflect move to "node-config" organization
• c2da7cf Partial fix for recursion bugs in loadFileConfigs();
• 4a61359 Remove state sharing between tests.

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs