Bumps [json5](https://github.com/json5/json5) and [tsconfig-paths](https://github.com/dividab/tsconfig-paths). These dependencies needed to be updated together. Updates `json5` from 2.2.0 to 2.2.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/releases">json5's releases</a>.</em></p> <blockquote> <h2>v2.2.3</h2> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h2>v2.2.2</h2> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> <h2>v2.2.1</h2> <ul> <li>Fix: Removed dependence on minimist to patch CVE-2021-44906. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/266">#266</a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/json5/json5/blob/main/CHANGELOG.md">json5's changelog</a>.</em></p> <blockquote> <h3>v2.2.3 [<a href="https://github.com/json5/json5/tree/v2.2.3">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.2...v2.2.3">diff</a>]</h3> <ul> <li>Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/299">#299</a>)</li> </ul> <h3>v2.2.2 [<a href="https://github.com/json5/json5/tree/v2.2.2">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.1...v2.2.2">diff</a>]</h3> <ul> <li>Fix: Properties with the name <code>__proto__</code> are added to objects and arrays. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/199">#199</a>) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (<a href="https://github-redirect.dependabot.com/json5/json5/issues/295">#295</a>).</li> </ul> <h3>v2.2.1 [<a href="https://github.com/json5/json5/tree/v2.2.1">code</a>, <a href="https://github.com/json5/json5/compare/v2.2.0...v2.2.1">diff</a>]</h3> <ul> <li>Fix: Removed dependence on minimist to patch CVE-2021-44906. (<a href="https://github-redirect.dependabot.com/json5/json5/issues/266">#266</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/json5/json5/commit/c3a75242772a5026a49c4017a16d9b3543b62776"><code>c3a7524</code></a> 2.2.3</li> <li><a href="https://github.com/json5/json5/commit/94fd06d82eeed225fa172f6fb2ca27375cbd2e39"><code>94fd06d</code></a> docs: update CHANGELOG for v2.2.3</li> <li><a href="https://github.com/json5/json5/commit/3b8cebf0c474a8b20c78bd75c89cca0c4dce84ce"><code>3b8cebf</code></a> docs(security): use GitHub security advisories</li> <li><a href="https://github.com/json5/json5/commit/f0fd9e194dde282caff114a110f4fac635f3a62c"><code>f0fd9e1</code></a> docs: publish a security policy</li> <li><a href="https://github.com/json5/json5/commit/6a91a05fffeda16ff6b3b5008b6b340d42d31ec0"><code>6a91a05</code></a> docs(template): bug -> bug report</li> <li><a href="https://github.com/json5/json5/commit/14f8cb186e8abdfaccf6527171da7b1224374650"><code>14f8cb1</code></a> 2.2.2</li> <li><a href="https://github.com/json5/json5/commit/10cc7ca9169b59c5e0f5afc03dbd870cd06bcc46"><code>10cc7ca</code></a> docs: update CHANGELOG for v2.2.2</li> <li><a href="https://github.com/json5/json5/commit/7774c1097993bc3ce9f0ac4b722a32bf7d6871c8"><code>7774c10</code></a> fix: add <strong>proto</strong> to objects and arrays</li> <li><a href="https://github.com/json5/json5/commit/edde30abd8b22facf2c06c72586b9f6edf12700d"><code>edde30a</code></a> Readme: slight tweak to intro</li> <li><a href="https://github.com/json5/json5/commit/97286f8bd542c89dcee096bc05dd28ed2dfc1e16"><code>97286f8</code></a> Improve example in readme</li> <li>Additional commits viewable in <a href="https://github.com/json5/json5/compare/v2.2.0...v2.2.3">compare view</a></li> </ul> </details> <br /> Updates `tsconfig-paths` from 3.9.0 to 3.10.1 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dividab/tsconfig-paths/blob/master/CHANGELOG.md">tsconfig-paths's changelog</a>.</em></p> <blockquote> <h2>[3.10.1] - 2021-07-06</h2> <h3>Fixed</h3> <ul> <li>Add register.js to published files</li> </ul> <h2>[3.10.0] - 2021-07-06</h2> <h3>Added</h3> <ul> <li>feat(tsconfig-loader): extends config from node_modules (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/106">#106</a>). Thanks to <a href="https://github.com/zorji"><code>@zorji</code></a> for this PR!</li> </ul> <h3>Fixed</h3> <ul> <li>Update CHANGELOG.md (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/96">#96</a>). Thanks to <a href="https://github.com/OliverJAsh"><code>@OliverJAsh</code></a> for this PR!</li> <li>Fix "bootstraping" typo (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/111">#111</a>). Thanks to <a href="https://github.com/KRMisha"><code>@KRMisha</code></a> for this PR!</li> <li>Update Readme fixes <a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/116">#116</a> (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/123">#123</a>). Thanks to <a href="https://github.com/benwinding"><code>@benwinding</code></a> for this PR!</li> <li>Fixed typo (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/144">#144</a>). Thanks to <a href="https://github.com/mprinc"><code>@mprinc</code></a> for this PR!</li> <li>[TYPO] src/mapping-entry.ts (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/145">#145</a>). Thanks to <a href="https://github.com/mprinc"><code>@mprinc</code></a> for this PR!</li> <li>docs(README): fix typos (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/156">#156</a>). Thanks to <a href="https://github.com/PiDelport"><code>@PiDelport</code></a> for this PR!</li> <li>deps: bump json5 to use type definition provided officially (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/158">#158</a>). Thanks to <a href="https://github.com/koba04"><code>@koba04</code></a> for this PR!</li> <li>Update tsconfig-loader.ts (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/161">#161</a>). Thanks to <a href="https://github.com/fecqs"><code>@fecqs</code></a> for this PR!</li> <li>fix typo (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/165">#165</a>). Thanks to <a href="https://github.com/wonda-tea-coffee"><code>@wonda-tea-coffee</code></a> for this PR!</li> <li>Add file extenstion to typings property value (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/151">#151</a>). Thanks to <a href="https://github.com/dangrussell"><code>@dangrussell</code></a> for this PR!</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dividab/tsconfig-paths/commit/80bc8106ee580dea5d379e462fdd4cbeb43ecfcf"><code>80bc810</code></a> v3.10.1</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/beb9a47268bc7cc7f1979b537a68e23d6d53738e"><code>beb9a47</code></a> Add changelog for 3.10.1</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/893b76df7ec945b13c6a34fccdcb152cded39717"><code>893b76d</code></a> Add register.js to published files</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/9327fa1cafa6a7b4ac20eaaad2c83a694617152c"><code>9327fa1</code></a> v3.10.0</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/766a0e872117b0ad28ab872095b64e6c6e419776"><code>766a0e8</code></a> Update changelog for 3.10.0</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/2cf8b21b2b406da68b81edf5ef6fc0563a9fe329"><code>2cf8b21</code></a> Categorize changelog</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/fb67ba26eaec10fdbdac26763e6994fc304a80ec"><code>fb67ba2</code></a> Update changelog with unreleased PRs</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/079285a9f254977a0d10d98b4836866ee53e2a9c"><code>079285a</code></a> Add file extenstion to typings property value (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/151">#151</a>)</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/c49386cb979c220019749334697ffb2c79e69a98"><code>c49386c</code></a> feat(tsconfig-loader): extends config from node_modules without './node_modul...</li> <li><a href="https://github.com/dividab/tsconfig-paths/commit/f289c99cf65392652da7eee855831afab62e36a5"><code>f289c99</code></a> fix typo (<a href="https://github-redirect.dependabot.com/dividab/tsconfig-paths/issues/165">#165</a>)</li> <li>Additional commits viewable in <a href="https://github.com/dividab/tsconfig-paths/compare/v3.9.0...v3.10.1">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/quantumlib/Cirq/network/alerts). </details>