[Snyk] Security upgrade cosmiconfig from 7.1.0 to 8.0.0

[twilio-product-security]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/twilio-run/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncaught Exception SNYK-JS-YAML-5458867	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cosmiconfig

The new version differs by 22 commits.

• 7d1dce9 Merge pull request fix(plugin-serverless): remove default from aliases #274 from davidtheclark/prepare-v8
• 500dada correct changelog text
• 9254fb0 Merge branch 'main' into prepare-v8
• 68298d4 Merge pull request RFC Testing Scenario #282 from davidtheclark/add-filepath-to-loader-errors
• 706c2ee add changelog entry
• fea5937 add filepath to loader errors
• ec975e4 Merge pull request Assets plugin ideas #281 from vkrol/vkrol-patch-1
• 8b8bcf7 don't install latest npm
• 93c009a fix changelog
• 195a1c5 drop node 12 support
• 386ff8c Merge branch 'main' into prepare-v8
• c2e52ac fix minor typo in readme
• b85d869 Merge branch 'v7.1' into main
• 2a1a259 Fix the cosmiconfig() link in the cosmiconfigSync section
• 0160c2d Add "Maintainers wanted" note to readme (fix(twilio-run): correctly serialize JSON Responses #277)
• 19bd87b Fix js-yaml, type imports (Trying to start an ngrok tunnel with a reserved subdomain fails with the wrong message #275)
• bf455a3 Prepare v8
• c7dc6ab Remove badges for Travis and Appveyor (Add runtime-handler check to deploy step #273)
• 48c1e4a Add changelog note about yaml dependency (Regression of --environment flag #272)
• 9155d8a @ types/parse-json should be a dev dependency (fix(twilio-run:start): load functions & assets in forked process #256)
• 2ef8ce6 Switch from yaml to js-yaml (fix(twilio-run): fix global scope in forked process #270)
• 457a69d Try GitHub actions for CI (feat: extract runtime-handler and lazyLoading (#252) #271)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[changeset-bot]

⚠️ No Changeset found

Latest commit: e9bcea0

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[ankit-gautam23]

LGTM