chore(deps): bump p-limit from 3.1.0 to 4.0.0

[dependabot]

Bumps p-limit from 3.1.0 to 4.0.0.

Release notes

Sourced from p-limit's releases.

v4.0.0

Breaking

• Require Node.js 12.20 9e08401
• This package is now pure ESM. Please read this.

sindresorhus/p-limit@v3.1.0...v4.0.0

Commits

• 38a6773 4.0.0
• 9e08401 Require Node.js 12.20 and move to ESM
• cada94e Minor refactor (#50)
• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
p-limit	[>= 7.a, < 8]
p-limit	[>= 6.a, < 7]
p-limit	[>= 5.a, < 6]

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

packages/@aws-cdk/toolkit-lib/package.json

Package	Version	License	Issue Type
p-limit	^4	Null	Unknown License

packages/aws-cdk/package.json

Package	Version	License	Issue Type
p-limit	^4	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
npm/p-limit	^4	Unknown	Unknown
npm/p-limit	^4	Unknown	Unknown
npm/p-limit	4.0.0	🟢 3.8	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Security-Policy 🟢 10 security policy file detected Maintained ⚠️ 2 1 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 2 Binary-Artifacts 🟢 10 no binaries found in the repo Code-Review ⚠️ 1 Found 5/30 approved changesets -- score normalized to 1 Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/yocto-queue	1.2.2	🟢 3.6	Details Check Score Reason Code-Review ⚠️ 1 Found 3/17 approved changesets -- score normalized to 1 Maintained ⚠️ 0 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• packages/@aws-cdk/toolkit-lib/package.json
• packages/aws-cdk/package.json
• yarn.lock