build(deps-dev): bump dependency-cruiser from 17.2.0 to 17.3.1

[dependabot]

Bumps dependency-cruiser from 17.2.0 to 17.3.1.

Release notes

Sourced from dependency-cruiser's releases.

v17.3.1

👷 maintenance

• 7ae24764/ bb4c6e9a perf: algorithm updates (#1022)
• 211faaff/ 6b0cf131 build(npm): updates external dependencies

v17.3.0

✨ features

• 410f3bfd feat: adds support for detecting imports done with process.getBuiltinModule (#1021)

🐛 fixes

• 93d5bac4 fix: Using the API but tsconfig does not work (#1010)

👷 maintenance

• 83397d96 chore(report): ignore eslint warning we're not going to fix anytime soon anyway
• e6208a27 chore(test): ups code coverage requirements to current values
• 75f92774 chore(npm): pins (all) dependencies again
• 0b2a1a41 doc(manifest): adds Kentaro Suzuki to the list of contributors

FWIW this is also the first release with, on GitHub, their new 'release immutability' enabled.

Commits

• 7e4bd61 17.3.1
• 6b0cf13 chore(npm): updates external devDependencies
• 7ae2476 perf: algorithm updates (#1022)
• 211faaf build(npm): updates external dependencies
• bb4c6e9 refactor: replaces .forEach with for ... of where it improves readability
• ea28022 17.3.0
• 410f3bf feat: adds support for detecting imports done with process.getBuiltinModule (...
• 83397d9 chore(report): ignore eslint warning we're not going to fix anytime soon anyway
• e6208a2 chore(test): ups code coverage requirements to current values
• 93d5bac fix: Using the API but tsconfig does not work (#1010)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/dependency-cruiser	17.3.1	🟢 7.4	Details Check Score Reason Code-Review ⚠️ 1 Found 4/27 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Packaging 🟢 10 packaging workflow detected Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 Vulnerabilities 🟢 9 1 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits
npm/watskeburt	5.0.0	Unknown	Unknown
npm/dependency-cruiser	^17.3.1	🟢 7.4	Details Check Score Reason Code-Review ⚠️ 1 Found 4/27 approved changesets -- score normalized to 1 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Token-Permissions 🟢 9 detected GitHub workflow tokens with excessive permissions License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Binary-Artifacts 🟢 10 no binaries found in the repo Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Packaging 🟢 10 packaging workflow detected Pinned-Dependencies ⚠️ 1 dependency not pinned by hash detected -- score normalized to 1 Vulnerabilities 🟢 9 1 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• package-lock.json
• package.json