Skip to content

Commit

Permalink
fix(security): patch semantic-release dependency vulnerability (#969)
Browse files Browse the repository at this point in the history
chore(deps-dev): bump semantic-release from 19.0.2 to 19.0.3

Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.2 to 19.0.3.
- [Release notes](https://github.com/semantic-release/semantic-release/releases)
- [Commits](semantic-release/semantic-release@v19.0.2...v19.0.3)

---
updated-dependencies:
- dependency-name: semantic-release
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
  • Loading branch information
dependabot[bot] authored Jul 4, 2022
1 parent ca7bad3 commit 2a717b3
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -64,7 +64,7 @@
"mysql2": "2.1.0",
"onchange": "6.0.0",
"pg": "8.4.2",
"semantic-release": "19.0.2",
"semantic-release": "19.0.3",
"semantic-release-npm-deprecate-old-versions": "1.3.2",
"semantic-release-slack-bot": "3.5.2",
"sequelize": "5.21.3",
Expand Down
8 changes: 4 additions & 4 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -8951,10 +8951,10 @@ [email protected]:
node-fetch "^2.3.0"
slackify-markdown "^4.3.0"

[email protected].2:
version "19.0.2"
resolved "https://registry.yarnpkg.com/semantic-release/-/semantic-release-19.0.2.tgz#6011683c06d7b416e5faa5a3f43b22bbf3798aa8"
integrity sha512-7tPonjZxukKECmClhsfyMKDt0GR38feIC2HxgyYaBi+9tDySBLjK/zYDLhh+m6yjnHIJa9eBTKYE7k63ZQcYbw==
[email protected].3:
version "19.0.3"
resolved "https://registry.yarnpkg.com/semantic-release/-/semantic-release-19.0.3.tgz#9291053ad9890052f28e7c5921d4741530d516fd"
integrity sha512-HaFbydST1cDKZHuFZxB8DTrBLJVK/AnDExpK0s3EqLIAAUAHUgnd+VSJCUtTYQKkAkauL8G9CucODrVCc7BuAA==
dependencies:
"@semantic-release/commit-analyzer" "^9.0.2"
"@semantic-release/error" "^3.0.0"
Expand Down

0 comments on commit 2a717b3

Please sign in to comment.