Update dependency async to v3

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
async (source)	dependencies	major	^2.6.0 -> ^3.2.2

By merging this PR, the below issues will be automatically resolved and closed:

Severity	CVSS Score	CVE	GitHub Issue
High	7.8	CVE-2021-43138	#248

---

Release Notes

caolan/async (async)

v3.2.2

Compare Source

• Fix potential prototype pollution exploit

v3.2.1

Compare Source

• Use queueMicrotask if available to the environment (#​1761)
• Minor perf improvement in priorityQueue (#​1727)
• More examples in documentation (#​1726)
• Various doc fixes (#​1708, #​1712, #​1717, #​1740, #​1739, #​1749, #​1756)
• Improved test coverage (#​1754)

v3.2.0

Compare Source

• Fix a bug in Safari related to overwriting func.name
• Remove built-in browserify configuration (#​1653)
• Varios doc fixes (#​1688, #​1703, #​1704)

v3.1.1

Compare Source

• Allow redefining name property on wrapped functions.

v3.1.0

Compare Source

• Added q.pushAsync and q.unshiftAsync, analagous to q.push and q.unshift, except they always do not accept a callback, and reject if processing the task errors. (#​1659)
• Promises returned from q.push and q.unshift when a callback is not passed now resolve even if an error ocurred. (#​1659)
• Fixed a parsing bug in autoInject with complicated function bodies (#​1663)
• Added ES6+ configuration for Browserify bundlers (#​1653)
• Various doc fixes (#​1664, #​1658, #​1665, #​1652)

v3.0.1

Compare Source

Bug fixes

• Fixed a regression where arrays passed to queue and cargo would be completely flattened. (#​1645)
• Clarified Async's browser support (#​1643)

v3.0.0

Compare Source

The async/await release!

There are a lot of new features and subtle breaking changes in this major version, but the biggest feature is that most Async methods return a Promise if you omit the callback, meaning you can await them from within an async function.

const results = await async.mapLimit(urls, 5, async url => {
    const resp = await fetch(url)
    return resp.body
})

Breaking Changes

• Most Async methods return a Promise when the final callback is omitted, making them await-able! (#​1572)
• We are now making heavy use of ES2015 features, this means we have dropped out-of-the-box support for Node 4 and earlier, and many old versions of browsers. (#​1541, #​1553)
• In queue, priorityQueue, cargo and cargoQueue, the "event"-style methods, like q.drain and q.saturated are now methods that register a callback, rather than properties you assign a callback to. They are now of the form q.drain(callback). If you do not pass a callback a Promise will be returned for the next occurrence of the event, making them await-able, e.g. await q.drain(). (#​1586, #​1641)
• Calling callback(false) will cancel an async method, preventing further iteration and callback calls. This is useful for preventing memory leaks when you break out of an async flow by calling an outer callback. (#​1064, #​1542)
• during and doDuring have been removed, and instead whilst, doWhilst, until and doUntil now have asynchronous test functions. (#​850, #​1557)
• limits of less than 1 now cause an error to be thrown in queues and collection methods. (#​1249, #​1552)
• memoize no longer memoizes errors (#​1465, #​1466)
• applyEach/applyEachSeries have a simpler interface, to make them more easily type-able. It always returns a function that takes in a single callback argument. If that callback is omitted, a promise is returned, making it awaitable. (#​1228, #​1640)

New Features

• Async generators are now supported in all the Collection methods. (#​1560)
• Added cargoQueue, a queue with both concurrency and payload size parameters. (#​1567)
• Queue objects returned from queue now have a Symbol.iterator method, meaning they can be iterated over to inspect the current list of items in the queue. (#​1459, #​1556)
• A ESM-flavored async.mjs is included in the async package. This is described in the package.json "module" field, meaning it should be automatically used by Webpack and other compatible bundlers.

Bug fixes

• Better handle arbitrary error objects in asyncify (#​1568, #​1569)

Other

• Removed Lodash as a dependency (#​1283, #​1528)
• Miscellaneous docs fixes (#​1393, #​1501, #​1540, #​1543, #​1558, #​1563, #​1564, #​1579, #​1581)
• Miscellaneous test fixes (#​1538)

---

v2.6.4

Compare Source

v2.6.3

Compare Source

v2.6.2

Compare Source

v2.6.1

Compare Source

• Updated lodash to prevent npm audit warnings. (#​1532, #​1533)
• Made async-es more optimized for webpack users (#​1517)
• Fixed a stack overflow with large collections and a synchronous iterator (#​1514)
• Various small fixes/chores (#​1505, #​1511, #​1527, #​1530)

---

• If you want to rebase/retry this PR, check this box