chore (deps): bump jsonata from 2.1.0 to 2.2.1

[dependabot]

Bumps jsonata from 2.1.0 to 2.2.1.

Release notes

Sourced from jsonata's releases.

2.2.1 Maintenance Release

• Prevent object prototype pollution (PR #799)
• Wildcards should not unwrap function objects (PR #800)
• $append should enforce the sequence guardrail limit (PR #801)
• Prevent object contructor setting internal flags (PR #802)

2.2.0 Milestone Release

This release predominantly contains security related fixes and enhancements. Thanks to Doruk Tan Öztürk and Arthur Deierlein for their private disclosures.

• New API to specify resource guardrails on expressions (PR #795)
• Fix ISO8601 regex pattern (PR #793)
• Prevent $lookup from accessing object prototype members (PR #794)
• Enable OIDC publishing to NPM (PR #792)
• Publish step to be triggered by new version tag (PR #796)

2.1.1 Maintenance Release

• Fix picture string parsing for $formatNumber (PR #788)
• Fix $toMillis() with more than 3 digit fractional seconds (PR #782)
• Fix ?: operator returning wrong result when LHS has array predicate (PR #780)
• Fix ?? operator with array predicate on LHS (PR #774)
• Fix function signature for repeating arguments (PR #760)
• Fix precision fix for $string() function (PR #762)
• Fix to prevent $formatNumber() getting into an infinite loop (PR #785)

Changelog

Sourced from jsonata's changelog.

2.2.1 Maintenance Release

• Prevent object prototype pollution (PR #799)
• Wildcards should not unwrap function objects (PR #800)
• $append should enforce the sequence guardrail limit (PR #801)
• Prevent object contructor setting internal flags (PR #802)

2.2.0 Milestone Release

• New API to specify resource guardrails on expressions (PR #795)
• Fix ISO8601 regex pattern (PR #793)
• Prevent $lookup from accessing object prototype members (PR #794)
• Enable OIDC publishing to NPM (PR #792)
• Publish step to be triggered by new version tag (PR #796)

2.1.1 Maintenance Release

• Fix picture string parsing for $formatNumber (PR #788)
• Fix $toMillis() with more than 3 digit fractional seconds (PR #782)
• Fix ?: operator returning wrong result when LHS has array predicate (PR #780)
• Fix ?? operator with array predicate on LHS (PR #774)
• Fix function signature for repeating arguments (PR #760)
• Fix precision fix for $string() function (PR #762)
• Fix to prevent $formatNumber() getting into an infinite loop (PR #785)

Commits

• 06fc08c release v2.1.1 (#803)
• f174348 Prevent object contructor setting internal flags (#802)
• 91532d4 Append limit (#801)
• 47c0e58 Wildcards should not unwrap function objects (#800)
• 59e2514 Prevent object prototype pollution (#799)
• 8ee4476 Release v2.2.0 (#797)
• f2dd8fc publish step to be triggered by new version tag (#796)
• 0a7aa35 Create guardrails to limit resource consumption (#795)
• 4c5f4ad prevent $lookup from accessing object prototype members (#794)
• d6ffc17 fix iso8601 regex pattern (#793)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for jsonata since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)