[Deps] update tsconfig-paths

[Alkarex]

Security fix.
See dividab/tsconfig-paths#197
Weaknesses CWE-1321
CVE ID CVE-2021-44906

Minimist <=1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey() (lines 69-95).

(This currently triggers cascade alerts in many packages using eslint-plugin-import)

[codecov]

Codecov Report

Merging #2421 (28dfe88) into main (d8633c3) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #2421   +/-   ##
=======================================
  Coverage   95.07%   95.07%           
=======================================
  Files          66       66           
  Lines        2721     2721           
  Branches      915      915           
=======================================
  Hits         2587     2587           
  Misses        134      134           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update d8633c3...28dfe88. Read the comment docs.

[ljharb]

This is fine, but also 100% unnecessary, because it's using a semver range. Reinstall eslint-plugin-import and you'll get an updated copy of all its transitive deps.

[rjhilgefort]

This is fine, but also 100% unnecessary, because it's using a semver range. Reinstall eslint-plugin-import and you'll get an updated copy of all its transitive deps.

I removed eslint-plugin-import, yarn installed (minimist 1.2.0 went away), installed eslint-plugin-import and the bad version of minimist was back as a dep of json5@1.0.1. Reinstalling doesn't seem to work.

[ljharb]

I can't speak to yarn, but npm would properly update it since json5 uses ^ (https://unpkg.com/browse/json5@1.0.1/package.json).

[ljharb]

This was updated in 0e80ee3, so, closing this PR.