[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOCHA-561476	Yes	No Known Exploit
	635/1000 Why? Has a fix available, CVSS 8.2	Information Disclosure SNYK-JS-SEMANTICRELEASE-1041706	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mocha

The new version differs by 250 commits.

• 42303e2 Release v6.0.0
• a553ca7 punctuation updates for changelog v6.0.0
• c710792 grammar updates for changelog v6.0.0
• 9f9293a update changelog for v6.0.0
• a540eb0 remove "projects" section from MAINTAINERS.md [ci skip]
• 52b5c42 Uppercased JSON reporter name in `describe` title (#3739)
• 82307fb Fix `.globals` to remove falsy values (#3737)
• 56dc28e Remove unnecessary post-processing code having no effect; closes #3708 (#3733)
• 16b4281 Documentation updates (#3728)
• 5d9d3eb Update nyc
• 118c9ae Refactor out usages of Suite#_onlyTests and Suite#_onlyTests (#3689) (#3707)
• 0dacd1f Add ability to unload files from `require` cache (redux) (#3726)
• 66a52f2 update release steps [ci skip]
• 45ae014 Refactor `lookupFiles` and `files` (#3722)
• 94c9320 fix --reporter-option to allow comma-separated options; closes #3706
• 0f546fc Refactor checkGlobals() error message creation (#3711)
• 2d21fd6 add missing user reference in CHANGELOG.md [ci skip]
• 6cb4e27 add all changes since v6.0.0-1 to CHANGELOG.md [ci skip]
• 186ca36 add createInvalidArgumentError(); see #3676 (#3677)
• 3a7fa37 Revert 00ca06b0e957ec4f067268c98053782ac5dcb69f; closes #3414 (#3715)
• 21ba5ce fix --inspect and its ilk; closes #3681 (#3699)
• 52b9a5f refactor: use constants for event names instead of string literals
• 29aa611 Eliminated variable shadowing from test event listeners (runner.spec.js) (#3712)
• e01a54e update usage info in docs [ci skip]

See the full diff

Package name: semantic-release

The new version differs by 250 commits.

• c8d38b6 style: removed line breaks to align with xo rule (#1689)
• ca90b34 fix: mask secrets when characters get uri encoded
• 63fa143 docs(plugins): add listing for new plugin (#1686)
• 2bf3771 fix: use valid git credentials when multiple are provided (#1669)
• 77a75f0 fix: don't parse port as part of the path in repository URLs (#1671)
• d74ffef docs: add npm-deprecate-old-versions in plugins list (#1667)
• 3abcbaf Revert "feat: throw an Error if package.json has duplicate "repository" key (#1656)"
• b8fb35c feat: throw an Error if package.json has duplicate "repository" key (#1656)
• 18e35b2 docs: reorder default plugins list (#1650)
• e35e5bb docs(contributing): fix commit message examples (#1648)
• 311c465 docs(README): welcome @ travi, add alumni section
• b4c5d0a fix: add logging for when ssh falls back to http (#1639)
• c982249 docs(contributing): typo fix (#1638)
• 9635f50 docs: improve github actions recipe on git plugin (#1626)
• d036a89 ci(docs): use actions/checkout@v2 (#1620)
• 9303d1d docs(resources.md): added more sematnic release article (#1610)
• b72cdb3 docs(configuration.md): Updated documentation for dry-run feature of semantic Release (#1607)
• ee44ee8 docs(github-actions): suggest action_dispatch as trigger (#1605)
• b24d247 docs: add `semantic-release-rubygem` to community plugins (#1602)
• 6d118c6 docs: be clear about what module of semantic-release handles updating the package.json (#1601)
• b5c9dea docs: update github documentation to `docs.github.com`
• 1405b94 docs: added recipe for Jenkins CI configuration ([Snyk] Upgrade shelljs from 0.7.0 to 0.8.3 #1) (#1591)
• 0f0c650 fix: use correct ci branch context (#1521)
• a465801 feat(bitbucket-basic-auth): support for bitbucket server basic auth (#1578)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic