From acc856321ddd4e68950553cd2d72a1fe626af541 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 29 May 2026 19:21:15 +0000
Subject: [PATCH] Bump vm2 from 3.9.13 to 3.11.5

Bumps [vm2](https://github.com/patriksimek/vm2) from 3.9.13 to 3.11.5.
- [Release notes](https://github.com/patriksimek/vm2/releases)
- [Changelog](https://github.com/patriksimek/vm2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/patriksimek/vm2/compare/3.9.13...v3.11.5)

---
updated-dependencies:
- dependency-name: vm2
  dependency-version: 3.11.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 72 +++++++++++++++++++++++++----------------------
 1 file changed, 39 insertions(+), 33 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 0bf10f0f6..23aea812f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -23,15 +23,15 @@
         "@types/mocha": "^9.0.0",
         "@types/node": "^14.0.27",
         "@types/q": "^1.5.4",
-        "archiver": "latest",
-        "body-parser": "latest",
+        "archiver": "*",
+        "body-parser": "*",
         "code-push-plugin-testing-framework": "file:./code-push-plugin-testing-framework",
         "del": "v6.0.0",
-        "express": "latest",
-        "mkdirp": "latest",
+        "express": "*",
+        "mkdirp": "*",
         "mocha": "^9.2.0",
         "q": "^1.5.1",
-        "run-sequence": "latest",
+        "run-sequence": "*",
         "shx": "^0.3.4",
         "slash": "^3.0.0",
         "tslint": "^6.1.3",
@@ -45,10 +45,10 @@
       "dependencies": {
         "@types/uuid": "^8.3.1",
         "base-64": "^1.0.0",
-        "mocha": "latest",
-        "mocha-junit-reporter": "latest",
+        "mocha": "*",
+        "mocha-junit-reporter": "*",
         "q": "^1.5.1",
-        "replace": "latest",
+        "replace": "*",
         "superagent": "^6.1.0",
         "superagent-proxy": "^3.0.0",
         "uuid": "^8.3.2"
@@ -380,9 +380,9 @@
       }
     },
     "node_modules/acorn": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.7.0.tgz",
-      "integrity": "sha512-V/LGr1APy+PXIwKebEWrkZPwoeoF+w1jiOBUmuxuiUIaOHtob8Qc9BTrYo7VuI5fR8tqsy+buA2WFooR5olqvQ==",
+      "version": "8.16.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz",
+      "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw==",
       "bin": {
         "acorn": "bin/acorn"
       },
@@ -391,9 +391,12 @@
       }
     },
     "node_modules/acorn-walk": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz",
-      "integrity": "sha512-k+iyHEuPgSw6SbuDpGQM+06HQUa04DZ3o+F6CSzXMvvI5KMvnaEqXe+YVe555R9nn6GPt404fos4wcgpw12SDA==",
+      "version": "8.3.5",
+      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.5.tgz",
+      "integrity": "sha512-HEHNfbars9v4pgpW6SO1KSPkfoS0xVOM/9UzkJltjlsHZmJasxg8aXkuZa7SMf8vKGIBhpUsPluQSqhJFCqebw==",
+      "dependencies": {
+        "acorn": "^8.11.0"
+      },
       "engines": {
         "node": ">=0.4.0"
       }
@@ -4419,12 +4422,12 @@
       }
     },
     "node_modules/vm2": {
-      "version": "3.9.13",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.13.tgz",
-      "integrity": "sha512-0rvxpB8P8Shm4wX2EKOiMp7H2zq+HUE/UwodY0pCZXs9IffIKZq6vUti5OgkVCTakKo9e/fgO4X1fkwfjWxE3Q==",
+      "version": "3.11.5",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.11.5.tgz",
+      "integrity": "sha512-RSrkBiwrj6FRU+QdqNs6KG0XdlvJCjpQ4GXiqmMbrhmwfu5k/XIMpAer0L8f6iuf0uJ3a4T1xJN126Q8yf0VIA==",
       "dependencies": {
-        "acorn": "^8.7.0",
-        "acorn-walk": "^8.2.0"
+        "acorn": "^8.15.0",
+        "acorn-walk": "^8.3.4"
       },
       "bin": {
         "vm2": "bin/vm2"
@@ -4801,14 +4804,17 @@
       }
     },
     "acorn": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.7.0.tgz",
-      "integrity": "sha512-V/LGr1APy+PXIwKebEWrkZPwoeoF+w1jiOBUmuxuiUIaOHtob8Qc9BTrYo7VuI5fR8tqsy+buA2WFooR5olqvQ=="
+      "version": "8.16.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.16.0.tgz",
+      "integrity": "sha512-UVJyE9MttOsBQIDKw1skb9nAwQuR5wuGD3+82K6JgJlm/Y+KI92oNsMNGZCYdDsVtRHSak0pcV5Dno5+4jh9sw=="
     },
     "acorn-walk": {
-      "version": "8.2.0",
-      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.2.0.tgz",
-      "integrity": "sha512-k+iyHEuPgSw6SbuDpGQM+06HQUa04DZ3o+F6CSzXMvvI5KMvnaEqXe+YVe555R9nn6GPt404fos4wcgpw12SDA=="
+      "version": "8.3.5",
+      "resolved": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-8.3.5.tgz",
+      "integrity": "sha512-HEHNfbars9v4pgpW6SO1KSPkfoS0xVOM/9UzkJltjlsHZmJasxg8aXkuZa7SMf8vKGIBhpUsPluQSqhJFCqebw==",
+      "requires": {
+        "acorn": "^8.11.0"
+      }
     },
     "agent-base": {
       "version": "6.0.2",
@@ -5399,10 +5405,10 @@
       "requires": {
         "@types/uuid": "^8.3.1",
         "base-64": "^1.0.0",
-        "mocha": "latest",
-        "mocha-junit-reporter": "latest",
+        "mocha": "*",
+        "mocha-junit-reporter": "*",
         "q": "^1.5.1",
-        "replace": "latest",
+        "replace": "*",
         "superagent": "^6.1.0",
         "superagent-proxy": "^3.0.0",
         "uuid": "^8.3.2"
@@ -7959,12 +7965,12 @@
       "dev": true
     },
     "vm2": {
-      "version": "3.9.13",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.13.tgz",
-      "integrity": "sha512-0rvxpB8P8Shm4wX2EKOiMp7H2zq+HUE/UwodY0pCZXs9IffIKZq6vUti5OgkVCTakKo9e/fgO4X1fkwfjWxE3Q==",
+      "version": "3.11.5",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.11.5.tgz",
+      "integrity": "sha512-RSrkBiwrj6FRU+QdqNs6KG0XdlvJCjpQ4GXiqmMbrhmwfu5k/XIMpAer0L8f6iuf0uJ3a4T1xJN126Q8yf0VIA==",
       "requires": {
-        "acorn": "^8.7.0",
-        "acorn-walk": "^8.2.0"
+        "acorn": "^8.15.0",
+        "acorn-walk": "^8.3.4"
       }
     },
     "wcwidth": {