chore(deps): bump vm2 from 3.9.7 to 3.9.11

[dependabot[bot]]

Bumps vm2 from 3.9.7 to 3.9.11.

Release notes

Sourced from vm2's releases.

3.9.11

New Features

https://github.com/patriksimek/vm2/commit/58478a58c6f4af3c54faf4117ed5ab72d2cc8cd5: Add option require.strict to allow to load required modules in non strict mode.

Fixes

https://github.com/patriksimek/vm2/commit/d9a7f3cc995d3d861e1380eafb886cb3c5e2b873: Security fix.

3.9.10

New Features

61d240f69cc02974be27c7582fee2defd0e6c7a8: Add uptime to process.

Fixes

e3e573fdc99a98a9c7db026e4c40474eb78cab4a: Security fix. 245da82dcdfa67031e065fd7c7a7348b5e21f2b8: Fix inspect showProxy.

3.9.9

Fixes

5c2e13bbf0c0518e1958a4307982a999aa181049: Bump ECMA version to 2022.

3.9.8

Fixes

777ffb0e021ef89444f215a69365a689d7051896: Fix access to some restricted function properties on non functions and fix findBestExtensionHandler not finding the best handler. 925e3e665acfa37dd3db0ea8e7f02b57277677e8: Try to return nicer parser errors.

Changelog

Sourced from vm2's changelog.

v3.9.11 (2022-08-28)

[new] Add option require.strict to allow to load required modules in non strict mode.
[fix] Security fix.

v3.9.10 (2022-07-05)

[new] Add uptime to process.
[fix] Security fix.
[fix] Fix inspection with showProxy.

v3.9.9 (2022-02-24)

[fix] Bump parser ECMA version to 2022.

v3.9.8 (2022-02-16)

[fix] Add function type check for arguments, caller, and callee property check (GeoffRen)
[fix] Fix find best extension handler

Commits

• 392f126 Merge pull request #469 from XmiliaH/release-3.9.11
• d6379e1 Merge pull request #468 from XmiliaH/fix-467
• 58478a5 Merge pull request #448 from XmiliaH/fix-442
• 6b0b71a Merge pull request #457 from XmiliaH/fix-456
• 06f8ef0 Finish release 3.9.11
• d9a7f3c Fix 467
• b8314b0 Allow false for require option
• cb647c0 Clear up wording
• a34b167 Add documentation
• 67c3fd4 Allow to override strict mode setting for modules
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

[pagopa-github-bot]

	Warnings
:warning:	Please include a Pivotal story or Jira ticket at the beginning of the PR title

Example of PR titles that include pivotal stories:

• single story: [#123456] my PR title
• multiple stories: [#123456,#123457,#123458] my PR title

Example of PR titles that include Jira tickets:

• single story: [PROJID-123] my PR title
• multiple stories: [PROJID-1,PROJID-2,PROJID-3] my PR title

Generated by :no_entry_sign: dangerJS against d8ab9451c1416f75c0e47552260101acb79a7ccc

[codecov[bot]]

Codecov Report

Merging #4125 (42eb7f0) into master (dd92efc) will decrease coverage by 0.29%. The diff coverage is 47.79%.

:exclamation: Current head 42eb7f0 differs from pull request most recent head d8ab945. Consider uploading reports for the commit d8ab945 to get more accurate results

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #4125      +/-   ##
==========================================
- Coverage   47.76%   47.47%   -0.30%     
==========================================
  Files        1264     1540     +276     
  Lines       25030    26748    +1718     
  Branches     6553     6816     +263     
==========================================
+ Hits        11956    12698     +742     
- Misses      13024    13997     +973     
- Partials       50       53       +3     

Impacted Files	Coverage Δ
scripts/ts/common/ticket/jira/types.ts	100.00% <ø> (ø)
scripts/ts/common/ticket/types.ts	28.94% <0.00%> (-0.79%)	:arrow_down:
scripts/ts/danger/utils/changelog.ts	70.49% <ø> (ø)
ts/components/AdviceComponent.tsx	100.00% <ø> (ø)
ts/components/BarcodeCamera.tsx	30.43% <ø> (ø)
ts/components/CalendarsListContainer.tsx	9.25% <ø> (ø)
ts/components/CiePinpad/index.tsx	22.22% <ø> (ø)
ts/components/CopyButtonComponent.tsx	70.58% <ø> (ø)
ts/components/DetailedlistItemComponent.tsx	8.33% <ø> (ø)
ts/components/DevScreenButton.tsx	66.66% <ø> (ø)
... and 439 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more Δ = absolute <relative> (impact), ø = not affected, ? = missing data Powered by Codecov. Last update 1b6cffc...d8ab945. Read the comment docs.

[github-actions[bot]]

This pull request is stale because it has been open for 60 days with no activity. If the pull request is still valid, please update it within 14 days to keep it open or merge it, otherwise it will be closed automatically.