[Snyk] Upgrade acorn-walk from 8.3.4 to 8.3.5

[posit-snyk-bot]

Snyk has created this PR to upgrade acorn-walk from 8.3.4 to 8.3.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released 2 months ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[posit-snyk-bot]

This is a patch upgrade from version 8.3.4 to 8.3.5. The changes consist of non-breaking bug fixes and added support for a new syntax feature.

Changes in 8.3.5:

• Improves error messages for missing walker functions.
• Enhances TypeScript types for callbacks.
• Adds support for import attributes syntax.

These changes are backward-compatible and should not require any developer action.

Source: Package Changelog

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[posit-snyk-bot]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[cderv]

@cscheid is this ok to update deps on this part of the codebase ? I think so, but I prefer to confirm.

[cscheid]

IIRC we use acorn to walk OJS code blocks to detect resource files, so this has a limited blast radius should it go wrong. So I agree with you, looks ok.