Bump async from 2.6.4 to 3.2.6

[dependabot]

Bumps async from 2.6.4 to 3.2.6.

Changelog

Sourced from async's changelog.

v3.2.6

• Fix ReDoS vulnerability in autoInject (#1980)

v3.2.5

• Ensure Error objects such as AggregateError are propagated without modification (#1920)

v3.2.4

• Fix a bug in priorityQueue where it didn't wait for the result. (#1725)
• Fix a bug where unshiftAsync was included in priorityQueue. (#1790)

v3.2.3

• Fix bugs in comment parsing in autoInject. (#1767, #1780)

v3.2.2

• Fix potential prototype pollution exploit

v3.2.1

• Use queueMicrotask if available to the environment (#1761)
• Minor perf improvement in priorityQueue (#1727)
• More examples in documentation (#1726)
• Various doc fixes (#1708, #1712, #1717, #1740, #1739, #1749, #1756)
• Improved test coverage (#1754)

v3.2.0

• Fix a bug in Safari related to overwriting func.name
• Remove built-in browserify configuration (#1653)
• Varios doc fixes (#1688, #1703, #1704)

v3.1.1

• Allow redefining name property on wrapped functions.

v3.1.0

• Added q.pushAsync and q.unshiftAsync, analagous to q.push and q.unshift, except they always do not accept a callback, and reject if processing the task errors. (#1659)
• Promises returned from q.push and q.unshift when a callback is not passed now resolve even if an error ocurred. (#1659)
• Fixed a parsing bug in autoInject with complicated function bodies (#1663)
• Added ES6+ configuration for Browserify bundlers (#1653)
• Various doc fixes (#1664, #1658, #1665, #1652)

v3.0.1

Bug fixes

• Fixed a regression where arrays passed to queue and cargo would be completely flattened. (#1645)
• Clarified Async's browser support (#1643)

v3.0.0

The async/await release!

... (truncated)

Commits

• 85fb18f Version 3.2.6
• 8c0c941 Update built files
• 5f756b4 Fix ReDoS (#1980)
• 39cdc9b build(deps-dev): bump karma from 6.4.3 to 6.4.4 (#1985)
• 7b8ddeb build(deps-dev): bump @​babel/core from 7.24.7 to 7.25.2 (#1981)
• 4634a9d build(deps-dev): bump rollup from 4.18.0 to 4.19.2 (#1982)
• afb176c build(deps-dev): bump chai from 4.4.1 to 4.5.0 (#1983)
• 3568a74 build(deps-dev): bump @​babel/eslint-parser from 7.24.7 to 7.25.1 (#1984)
• 9e885fd build(deps-dev): bump babel-plugin-istanbul from 6.1.1 to 7.0.0 (#1986)
• f9c7f2a build(deps-dev): bump semver from 7.6.2 to 7.6.3 (#1987)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅ STF CI report

All green  ·  5 test tiers (5 pass / 0 fail / 0 skip)  ·  16 Android versions (16 with a usable device in STF)

Test tiers

	Tier	Result
✅	Build (npm + bower + webpack)	deps cache miss
✅	Lint (eslint + jsonlint + workflow shell)	lib/, res/ and root JS + JSON, and every workflow run: block
✅	Unit tests (mocha)	lib/util + lib/wire specs
✅	Component tests (karma + AngularJS)	82 specs, 0 failed, 0 errored (3 assert, 79 are upstream stubs)
✅	Integration + device-less E2E (stf local + RethinkDB + Playwright)	stf local success, fake devices success, web UI suite success

Android device matrix

	Android	API	Image	Boot	In STF	Usable	Screen	Touch	Shell	UI E2E
✅	5.0	21	✅	✅	✅	✅	✅	✅	✅	✅
✅	5.1	22	✅	✅	✅	✅	✅	✅	✅	✅
✅	6.0	23	✅	✅	✅	✅	✅	✅	✅	✅
✅	7	24	✅	✅	✅	✅	✅	✅	✅	✅
✅	7.1	25	✅	✅	✅	✅	✅	✅	✅	✅
✅	8	26	✅	✅	✅	✅	✅	✅	✅	✅
✅	8.1	27	✅	✅	✅	✅	✅	✅	✅	✅
✅	9	28	✅	✅	✅	✅	✅	✅	✅	✅
✅	10	29	✅	✅	✅	✅	✅	✅	✅	✅
✅	11	30	✅	✅	✅	✅	✅	✅	✅	✅
✅	12	31	✅	✅	✅	✅	✅	✅	✅	✅
✅	12L	32	✅	✅	✅	✅	✅	✅	✅	✅
✅	13	33	✅	✅	✅	✅	✅	✅	✅	✅
✅	14	34	✅	✅	✅	✅	✅	✅	✅	✅
✅	15	35	✅	✅	✅	✅	✅	✅	✅	✅
✅	16	36	✅	✅	✅	✅	✅	✅	✅	✅

_{Image = a system image is published for that API and arch. Boot = emulator reached sys.boot_completed and answers adb. In STF = the device registered with the STF provider. Usable = STF offered it as Use and handed over control. Screen = minicap frames reached the browser canvas and kept changing. Touch = a browser tap and swipe showed up in getevent on the device, at the coordinates they were aimed at: the tap within 5% of the centre of the touch axes, the swipe descending monotonically from 0.75 to 0.25 (the emulator runs with adb root, which minitouch needs to open /dev/input). Shell = the dashboard shell widget ran a command on it. UI E2E = the rest of the Playwright web UI suite.}

_{Logs, screenshots, logcat and Playwright traces are attached to the run as artifacts · full run · commit eddfc32}