From c07ac3affbaaa3d46b7f0911f862613333b4e2e2 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 29 Jun 2026 10:57:00 +0000
Subject: [PATCH] chore(deps): bump vm2 and @dataform/cli

Bumps [vm2](https://github.com/patriksimek/vm2) to 3.11.4 and updates ancestor dependency [@dataform/cli](https://github.com/dataform-co/dataform). These dependencies need to be updated together.


Updates `vm2` from 3.11.3 to 3.11.4
- [Release notes](https://github.com/patriksimek/vm2/releases)
- [Changelog](https://github.com/patriksimek/vm2/blob/main/CHANGELOG.md)
- [Commits](https://github.com/patriksimek/vm2/compare/v3.11.3...v3.11.4)

Updates `@dataform/cli` from 3.0.59 to 3.0.60
- [Release notes](https://github.com/dataform-co/dataform/releases)
- [Commits](https://github.com/dataform-co/dataform/compare/3.0.59...3.0.60)

---
updated-dependencies:
- dependency-name: vm2
  dependency-version: 3.11.4
  dependency-type: indirect
- dependency-name: "@dataform/cli"
  dependency-version: 3.0.60
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 package-lock.json | 18 +++++++++---------
 package.json      |  2 +-
 2 files changed, 10 insertions(+), 10 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index dffc4e00..3b7fd2a0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,16 +10,16 @@
         "@masthead-data/dataform-package": "0.2.0"
       },
       "devDependencies": {
-        "@dataform/cli": "3.0.59",
+        "@dataform/cli": "3.0.60",
         "eslint": "10.5.0",
         "globals": "17.6.0",
         "markdownlint-cli": "0.49.0"
       }
     },
     "node_modules/@dataform/cli": {
-      "version": "3.0.59",
-      "resolved": "https://registry.npmjs.org/@dataform/cli/-/cli-3.0.59.tgz",
-      "integrity": "sha512-vYhimGAV4t0N01vg8TH5G/1NsdOlmQHZVmFiQ+MlKL4oPL59sMTr8OJF7h6QDS3B6U5C8gqdhE95tQzGP48s9g==",
+      "version": "3.0.60",
+      "resolved": "https://registry.npmjs.org/@dataform/cli/-/cli-3.0.60.tgz",
+      "integrity": "sha512-GQ0AeoFEMmOhGjYgGGFJqcpRmAKK17ss/T0yLZoI4JkOAdeo8w/nhuejBCxgmq8aSrgWJfiWXKL2zdDEM240oQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
@@ -35,14 +35,14 @@
         "object-sizeof": "^1.6.1",
         "parse-duration": "^1.0.0",
         "promise-pool-executor": "^1.1.1",
-        "protobufjs": "^7.5.5",
+        "protobufjs": "^7.5.8",
         "readline-sync": "^1.4.9",
         "semver": "^7.5.2",
         "tarjan-graph": "^2.0.0",
         "tmp": "^0.2.4",
         "typeid-js": "0.3.0",
         "untildify": "^4.0.0",
-        "vm2": "3.11.3",
+        "vm2": "3.11.4",
         "yargs": "^16.2.0"
       },
       "bin": {
@@ -3795,9 +3795,9 @@
       }
     },
     "node_modules/vm2": {
-      "version": "3.11.3",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.11.3.tgz",
-      "integrity": "sha512-DO1TTKuOc+veL11VNOvJwRab80mghFKE40Av3bl6pdXs11bdiDMuR73owy+dS2EsTZEvRUeBkkBuDVRjV/RgEw==",
+      "version": "3.11.4",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.11.4.tgz",
+      "integrity": "sha512-3assDRyB+A9/5rjECD2e2FAlezOfzCqejZy0L36zij4LgzoWZRA3a26q3PZnl6o5PmNjrTBRbAWACpdK/Y3qOQ==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index ac1f2694..fb7849ed 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,7 @@
     "eslint": "10.5.0",
     "globals": "17.6.0",
     "markdownlint-cli": "0.49.0",
-    "@dataform/cli": "3.0.59"
+    "@dataform/cli": "3.0.60"
   },
   "markdownlint": {
     "default": true,