fix(deps): update dependency semver-regex to v4
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
semver-regex | dependencies | major | 3.1.2 -> 4.0.5 |
Release Notes
sindresorhus/semver-regex
v4.0.5
- Improve regex
b4ff333
Tip: If you use it in a server context, it's a good idea to give the regex a timeout.
v4.0.4
Tip: If you use it in a server context, it's a good idea to give the regex a timeout.
v4.0.3
- Fix ReDoS vulnerability
d8ba39a
- This only affects you if you run the regex on untrusted user input in a server context.
- Also back-ported to v3 in 3.1.4.
- CVE pending
v4.0.2
- No changes. Just fixing a npm dist tag.
v4.0.1
- Fix ReDoS vulnerability
11c6624
- This only affects you if you run the regex on untrusted user input in a server context.
- Also back-ported to v3 in 3.1.3.
- CVE-2021-3795
v4.0.0
Breaking
v3.1.4
- Backport of ReDoS fix https://github.com/sindresorhus/semver-regex/commit/7712ba564d40da101cf2b2b33e6a910d9f2f57f4
v3.1.3
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.
Edited by Botaniker (Bot)