chore(deps): update dependency vm2 to v3.10.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
vm2	3.10.4 → 3.10.5

---

Release Notes

patriksimek/vm2 (vm2)

v3.10.5

Compare Source

What's Changed

• fix: allow Object.setPrototypeOf on sandbox-local objects
• fix: block Function constructor access via getOwnPropertyDescriptor
• fix: block Function constructor from crossing bridge regardless of access path
• fix: block all code-executing constructors from crossing bridge via property descriptors
• fix: block Function constructor extraction via nested property descriptors
• fix: prevent proxy unwrapping to block Function constructor extraction via Object.entries
• fix: prevent sandbox escape via doPreventExtensions exposure in util.inspect
• fix: prevent sandbox escape via getFactory exposure in util.inspect
• fix: sanitize SuppressedError sub-errors to prevent sandbox escape
• fix: block host Function constructor leak via direct handler.get() call
• fix: block WebAssembly.JSTag to prevent wasm-level exception catch sandbox escape in Node 25

Full Changelog: patriksimek/vm2@v3.10.4...v3.10.5

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.