Update dependency config to v4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
config (source)	^1.26.1 → ^4.0.0

---

Release Notes

node-config/node-config (config)

v4.4.1

Compare Source

What's Changed

• Fixes for some method signature declarations

Full Changelog: node-config/node-config@v4.4.0...v4.4.1

v4.4.0

Compare Source

What's Changed

• Typescript types added to project by @​mdkitzman
• withModuleDefaults() function added to support separate module defaults for multiple versions
• Rework raw.js to function like the new defer mechanism.
• ./raw.js is also now deprecated, and will be removed in 5.0

New Contributors

• @​mdkitzman made their first contribution in #​877

Full Changelog: node-config/node-config@v4.3.0...v4.4.0

v4.3.0

Compare Source

What's Changed

• new callback mechanism for handling deferred and async configuration evaluation
• ./async.js and ./defer.js are now deprecated

New Async and Deferred mechanism

Instead of using async.js and defer.js, your executable config files can return a synchronous or asynchronous function. Note that if you use async deferred functions through the new mechanism, you need to call Util.resolveAsyncConfig() instead of the old version.

Util.resolveAsyncConfig() also fixes an issue where using defer in an array did not function properly #​876

The old implementations have been marked as deprecated and will issue warnings to console.error to indicate use of the old pathways. The old functions are incompatible with ESM loading conventions and will be removed at the beginning of the 5.0 cycle to facilitate conversion of the library to ESM.

Full Changelog: node-config/node-config@v4.2.1...v4.3.0

v4.2.1

Compare Source

What's Changed

• Restore config.util.getEnv() by @​jdmarshall in #​874

Full Changelog: node-config/node-config@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

• Delete deprecated functions in Config.util, and associated tests. by @​jdmarshall in #​845
• Default to yaml over js-yaml by @​jdmarshall in #​859

Breaking Changes

• All deprecated functions in config.util have been removed. Please use lib/util for similar functionality
• Default Yaml parser has changed to a more maintained alternative. Please validate your config files for correct processing, or adjust your package.json to force js-yaml to be used

Full Changelog: node-config/node-config@v4.1.1...v4.2.0

v4.1.1

Compare Source

What's Changed

This release includes only test and devDependency changes

• Remove vows from tests. by @​jdmarshall in #​854

Full Changelog: node-config/node-config@v4.1.0...v4.1.1

v4.1.0

Compare Source

Breaking Changes

Several bugs were fixed that a user code might theoretically rely on, but most likely not:

• Config.getSources() no longer contains files read by parseFile outside of the load process
• when setModuleDefaults('modulename', ...) is called twice, the second call can overwrite values from the first
• Config.getSources() now agrees with setModuleDefaults, no matter how often it is called

What's Changed

Bugs fixed:

• #​687 - you can now have deferConfig lines in submodules
• #​822 - setModuleDefaults calls are now additive (slightly higher memory usage for defaults as a consequence)
• #​827 - more accurate tracking of sources

v4.0.1

Compare Source

This release finalizes some work to extract 'util' functionality from lib/config.js into lib/util.js.

Breaking Changes

None known

What's Changed

• Finished extraction of util functions to lib/util.js
• Documentation of how to utilize this code for testing, or to drive setModuleDefaults()

v4.0.0

Compare Source

This release adds support for .jsonc and .mjs files. Note that MJS support requires Node 24 or recent patch releases of 20 or 22.

Breaking Changes

• removes the unused stripComments() function
• removes deprecated support for loading runtime.[ext] files.
• changes the load order of APP_INSTANCE files to match other file sets

What's Changed

• ci: add unit tests to PR CI by @​jeremy-daley-kr in #​776
• fix: bypass Proxy for RegExp and Date objects by @​jeremy-daley-kr in #​775
• fix: add runs-on to pr ci tests by @​jeremy-daley-kr in #​778
• feat: add get trap to Proxy for agnostic prototype access by @​daleyjem in #​779
• Fix GH-746 - Loading config files order with APP_INSTANCE by @​sgaestel in #​747
• Add nyc for code coverage by @​jdmarshall in #​788
• Remove all references to runtime.json and runtime config by @​ZachFontenot in #​782
• Fix over-recursion in async and deferred processing by @​jdmarshall in #​792
• Replace arguments fiddling with spread operator. by @​jdmarshall in #​791
• drop stripComments - dead code by @​markstos in #​794
• Add mjs support by @​jdmarshall in #​800
• Fix for empty entries in NODE_CONFIG_DIR by @​jdmarshall in #​798
• Add support for jsonc file extension by @​rerodrigues in #​802

New Contributors

• @​jeremy-daley-kr made their first contribution in #​776
• @​daleyjem made their first contribution in #​779
• @​sgaestel made their first contribution in #​747
• @​ZachFontenot made their first contribution in #​782
• @​rerodrigues made their first contribution in #​802

Full Changelog: node-config/node-config@v3.3.12...v4.0.0

v3.3.12

Compare Source

What's Changed

• Remove usage of deprecated utils to fix warnings in Node 22 by @​KidkArolis in #​764

New Contributors

• @​KidkArolis made their first contribution in #​764

Full Changelog: node-config/node-config@v3.3.11...v3.3.12

v3.3.11

Compare Source

What's Changed

• fix: webpack bundling compatibility by @​cbazureau in #​757

New Contributors

• @​cbazureau made their first contribution in #​757

Full Changelog: node-config/node-config@v3.3.10...v3.3.11

v3.3.10

Compare Source

What's Changed

• replace var to let and const by @​jamashita in #​720
• refactor: 💡 xxx === undefined => typeof xxx === 'undefined' by @​jamashita in #​729
• Fix source maps when using ts config files, improve performance loading ts config files by @​andrzej-woof in #​721
• fix: lack of comments removal, invalid regexp by @​DeutscherDude in #​745

New Contributors

• @​jamashita made their first contribution in #​720
• @​andrzej-woof made their first contribution in #​721
• @​DeutscherDude made their first contribution in #​745

Full Changelog: node-config/node-config@v3.3.9...v3.3.10

v3.3.9

Compare Source

What's Changed

• Support loading transpiled JS config files by @​Tomas2D in #​692
• fix(vulnerability): upgrade json5 version from 2.2.1 to 2.2.2 by @​veekays in #​713

New Contributors

• @​Tomas2D made their first contribution in #​692
• @​veekays made their first contribution in #​713

Full Changelog: node-config/node-config@v3.3.8...v3.3.9

v3.3.8

Compare Source

What's Changed

• bump json5 dep to 2.2.1
• Cleanup of file scoped environment variables by @​jdmarshall in #​667
• Allow multiple relative directory paths separated by path.delimiter to work by @​inside in #​661
• Reentrancy bugs by @​jdmarshall in #​668
• Fixed property mutation. Throw an exception on such an attempt. Updat… by @​fgheorghe in #​516
• docs: update copyright & fix misspelling by @​DigitalGreyHat in #​677

New Contributors

• @​jdmarshall made their first contribution in #​667
• @​inside made their first contribution in #​661
• @​DigitalGreyHat made their first contribution in #​677

Full Changelog: node-config/node-config@v3.3.7...v3.3.8

v3.3.7

Compare Source

============
We've moved this content to Github Releases.

Future release notes are managed there.

v3.3.6

Compare Source

==================

• Added publishConfig element to package.json to prevent publishing to the wrong repository - @​lorenwest

v3.3.4

Compare Source

==================

• FIX #​517 0 loadFileConfigs incorrectly adds to getConfigSources @​NguyenMatthieu

v3.3.3

Compare Source

==================

• FIX #​460 - Strict mode warning refer to appropriate env variable @​iCodeOkay
• Use Buffer.alloc and Buffer.from instead of contrsuctor @​Fcmam5
• Add support for experimental .cjs modules @​lenkan

v3.3.2

Compare Source

==================

• Fixed issue with Buffers in config throwing error in util.makeImmutable (#​608) - Michal Wadas
• Added boolean and numeric types to custom environment variables - Ankur Narkhede @​ankurnarkhede

v3.3.1

Compare Source

==================

• Fix security vulnerability in json5 dependency - @​twkel

v3.3.0

Compare Source

==================

• Allow all defined values in substituteDeep - @​fostyfost

v3.2.6

Compare Source

==================

• Updated copyright date ranges

v3.2.5

Compare Source

==================

• Fixed issue with getCustomEnvVars and multiple config dirs #​585 - @​dekelev

v3.2.4

Compare Source

==================

• Improved error handling of env variables value parse - @​leonardovillela

v3.2.3

Compare Source

==================

• Fixed strict mode warning #​460 - @​fedulovivan

v3.2.2

Compare Source

==================

• Fixed delimiter bug in configDirs to match O/S delimiter - @​iMoses

v3.2.1

Compare Source

==================

• Fixed TypeError: obj.toString is not a function - @​leosuncin

v3.2.0

Compare Source

==================

• Asynchronous configs - @​iMoses
• Multiple config directories - @​iMoses
• Improved parser support - @​iMoses

v3.1.0

Compare Source

==================

• Support of module.exports syntax for TS config files @​keenondrums

v3.0.1

Compare Source

==================

• Fixed bug where dot notation extended own key @​exogen

v3.0.0

Compare Source

==================

• Ensure config array items and objects are sealed @​fgheorghe
  • This required a major version bump in case someone
  • relied on the ability to mutate non-sealed data.

v2.0.2

Compare Source

==================

• Added dot notation to setModuleDefaults - bertho-zero
• Updated copyright year - JemiloII

v2.0.1

Compare Source

==================

• Removed deprecated code - jpwilliams

v2.0.0

Compare Source

==================

Potential for backward incompatibility requiring a major version bump.

Safe to upgrade to major version 2 if you're using a recent NodeJS version
and you're not trying to mutate config arrays.

• Added array immutability - jacobemerick
• Removed Node V.4 support

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • Between 04:00 PM and 07:59 PM, Monday through Friday (* 16-19 * * 1-5)
• Automerge
  • Between 02:00 PM and 06:59 PM, Monday through Thursday (* 14-18 * * 1-4)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn ERESOLVE overriding peer dependency
npm warn While resolving: ccd-case-activity-api@0.0.2
npm warn Found: chai@4.4.1
npm warn node_modules/chai
npm warn   dev chai@"^6.0.0" from the root project
npm warn   1 more (sinon-chai)
npm warn
npm warn Could not resolve dependency:
npm warn peer chai@"^4.0.0" from sinon-chai@3.7.0
npm warn node_modules/sinon-chai
npm warn   dev sinon-chai@"^3.5.0" from the root project
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: eslint-config-airbnb-base@14.2.1
npm error Found: eslint@9.39.4
npm error node_modules/eslint
npm error   dev eslint@"9.39.4" from the root project
npm error   peer eslint@"^6.0.0 || ^7.0.0 || >=8.0.0" from @eslint-community/eslint-utils@4.9.1
npm error   node_modules/@eslint-community/eslint-utils
npm error     @eslint-community/eslint-utils@"^4.8.0" from eslint@9.39.4
npm error
npm error Could not resolve dependency:
npm error peer eslint@"^5.16.0 || ^6.8.0 || ^7.2.0" from eslint-config-airbnb-base@14.2.1
npm error node_modules/eslint-config-airbnb-base
npm error   dev eslint-config-airbnb-base@"^14.0.0" from the root project
npm error
npm error Conflicting peer dependency: eslint@7.32.0
npm error node_modules/eslint
npm error   peer eslint@"^5.16.0 || ^6.8.0 || ^7.2.0" from eslint-config-airbnb-base@14.2.1
npm error   node_modules/eslint-config-airbnb-base
npm error     dev eslint-config-airbnb-base@"^14.0.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2026-05-29T08_00_59_693Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-05-29T08_00_59_693Z-debug-0.log

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 4.x releases. But if you manually upgrade to 4.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.