Bump config from 4.2.1 to 4.3.0 in the default group

[dependabot]

Bumps the default group with 1 update: config.

Updates config from 4.2.1 to 4.3.0

Release notes

Sourced from config's releases.

v4.3.0

What's Changed

• new callback mechanism for handling deferred and async configuration evaluation
• ./async.js and ./defer.js are now deprecated

New Async and Deferred mechanism

Instead of using async.js and defer.js, your executable config files can return a synchronous or asynchronous function. Note that if you use async deferred functions through the new mechanism, you need to call Util.resolveAsyncConfig() instead of the old version.

Util.resolveAsyncConfig() also fixes an issue where using defer in an array did not function properly #876

The old implementation has been marked as deprecated and will be removed in order to facilitate migrating node-config to ESM.

Full Changelog: node-config/node-config@v4.2.1...v4.3.0

Commits

• ce4fcf4 prepare 4.3.0
• bd4d95d Merge pull request #863 from jdmarshall/deferredESM
• df3866b Fix issue with arrays of promises.
• 55d17ba Add runtime deprecation warnings, as per
• c30a565 Support for the 'Future Compatibility' contract in the project wiki.
• c6df6c6 Allow new async mechanism to override old, instead of vice versa.
• 5cd516c Deprecate defer.js
• ede4550 Move defer.js to lib
• 5c0972e Update copyright notices to 2026
• d5c5666 Support async functions in deferConfig as a way to replace async.js
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions