[Snyk] Security upgrade semantic-release from 15.13.16 to 17.0.1

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semantic-release

The new version differs by 203 commits.

• 45695b9 fix(package): update @ semantic-release/commit-analyzer to version 8.0.0
• 3c7b114 fix(package): update @ semantic-release/release-notes-generator to version 9.0.0
• f2b5826 fix(package): update @ semantic-release/npm to version 7.0.0
• c48bd3a fix(package): update @ semantic-release/github to version 7.0.0
• bc97537 test: fix copy/paste typo in test titles
• c7e461d docs: add `@ saithodev/semantic-release-gitea` to community plugins
• ef1b8a0 chore(package): update ava to version 3.1.0
• bec57cd chore: require Node.js >=10.18
• c6b1076 fix: correct error when remote repository has no branches
• b54b20d fix: use `--no-verify` when testing the Git permissions
• 88fe819 docs: fix typo
• 559c152 docs(README): update minimal required Node version / FAQ link (#1422)
• 31e7876 docs(travis): build on all branches by default
• 8c0490d docs: replacing firefox plugin in the list (#1416)
• 6b5b02e fix: fetch tags on repo cached by the CI
• 28b5480 docs: correct plugin execution order
• 3739ab5 fix(package): update env-ci to version 5.0.0
• 11665b2 chore(package): update dependencies
• 0785a84 fix: update plugin versions
• 152bf45 Merge remote-tracking branch 'origin/beta'
• 3ba8f2a Merge remote-tracking branch 'origin/master' into beta
• a8c747d feat: pass `envi-ci` values to plugins context
• fc70726 chore: add Mockserver generated file to gitignore
• fc7205d fix: correctly display command that errored out in logs

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)