chore(deps): update dependency madge to v4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
madge	^3.4.3 -> ^4.0.0

GitHub Vulnerability Alerts

CVE-2021-23352

This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function.

---

Release Notes

pahen/madge

v4.0.1

Compare Source

• Fix potential command injection vulnerability

v4.0.0

Compare Source

• Upgrade core dependencies and require Node.js 10.13 (Thanks to @​realityking)

v3.12.0

Compare Source

• Updated to dependency-tree@7.2.2 with support for mixing TypesScript and Javascript imports

v3.11.0

Compare Source

• Add support for combining --circular and --dot (Thanks to @​SaeedZhiany)

v3.10.0

Compare Source

• Add support for combining --image and --circular option to get a graph with only circular dependencies (Thanks to @​gaspardip)

v3.9.2

Compare Source

• Updated dependencies to resolve TypeScript issues

v3.9.1

Compare Source

• Improved performance when reading TypeScript config (Thanks to @​FauxFaux)

v3.9.0

Compare Source

• Better support for TypeScript >=3.8 “import type” (Thanks to @​eelco)

v3.8.0

Compare Source

• Added leaves option to show modules that do not have dependencies (Thanks to @​avahe-kellenberger)

v3.7.0

Compare Source

• Support package.json config (Thanks to @​zekth)

v3.6.0

Compare Source

• Added support for TypeScript with mixed import syntax (Thanks to @​codemonkey800)

v3.5.1

Compare Source

• Added funding to package.json

v3.5.0

Compare Source

• Reduce processing by excluding .git content (Thanks to @​villelaitila)

v3.4.4

Compare Source

• Exclude test folder from npm registry (Thanks to @​SethDavenport)

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.

[height]

Link Height tasks by mentioning a task ID in the pull request title or description, commit messages, or comments.

💡Tip: You can also use "Close T-X" to automatically close a task when the pull request is merged.