[Snyk] Upgrade: , , , nock, , , semver, uuid

[Ganjahmanvenenodedios]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@actions/http-client
from 2.0.1 to 2.2.3 | 6 versions ahead of your current version | 22 days ago
on 2024-08-22
@actions/core
from 1.9.1 to 1.10.1 | 2 versions ahead of your current version | a year ago
on 2023-09-11
@actions/io
from 1.1.2 to 1.1.3 | 1 version ahead of your current version | a year ago
on 2023-03-15
nock
from 13.2.9 to 13.5.5 | 16 versions ahead of your current version | 24 days ago
on 2024-08-20
@types/semver
from 6.0.1 to 6.2.7 | 9 versions ahead of your current version | 10 months ago
on 2023-11-21
@types/uuid
from 3.4.5 to 3.4.13 | 8 versions ahead of your current version | 10 months ago
on 2023-11-07
semver
from 6.3.0 to 6.3.1 | 1 version ahead of your current version | a year ago
on 2023-07-10
uuid
from 3.3.2 to 3.4.0 | 2 versions ahead of your current version | 5 years ago
on 2020-01-16

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	212	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	212	Proof of Concept

Release notes

Package name: @actions/http-client

• 2.2.3 - 2024-08-22
• 2.2.2 - 2024-08-16
• 2.2.1 - 2024-03-04
• 2.2.0 - 2023-10-06
• 2.1.1 - 2023-08-04
  

  …ponse #1475

• 2.1.0 - 2023-03-06
• 2.0.1 - 2022-05-13
  

  …r stream extract

from @actions/http-client GitHub release notes

Package name: @actions/core

• 1.10.1 - 2023-09-11
• 1.10.0 - 2022-09-29
• 1.9.1 - 2022-08-08

from @actions/core GitHub release notes

Package name: @actions/io

• 1.1.3 - 2023-03-15
• 1.1.2 - 2022-03-17

from @actions/io GitHub release notes

Package name: nock

• 13.5.5 - 2024-08-20
  

  13.5.5 (2024-08-20)

  Bug Fixes

  • backport: memory leaks due to timer references outliving the timers (#2773) (#2773) (66eb7f4)
• 13.5.4 - 2024-02-26
  

  13.5.4 (2024-02-26)

  Bug Fixes

  • call fs.createReadStream lazily (#2357) (ba9fc42)
• 13.5.3 - 2024-02-17
• 13.5.2 - 2024-02-17
• 13.5.1 - 2024-01-28
• 13.5.0 - 2024-01-14
• 13.4.0 - 2023-11-27
• 13.3.8 - 2023-11-03
• 13.3.7 - 2023-10-30
• 13.3.6 - 2023-10-19
• 13.3.5 - 2023-10-19
• 13.3.4 - 2023-10-10
• 13.3.3 - 2023-08-16
• 13.3.2 - 2023-07-13
• 13.3.1 - 2023-04-27
• 13.3.0 - 2023-01-10
• 13.2.9 - 2022-07-19

from nock GitHub release notes

Package name: @types/semver

• 6.2.7 - 2023-11-21
• 6.2.6 - 2023-11-07
• 6.2.5 - 2023-10-18
• 6.2.4 - 2023-09-25
• 6.2.3 - 2021-07-06
• 6.2.2 - 2020-09-14
• 6.2.1 - 2020-01-27
• 6.2.0 - 2019-10-25
• 6.0.2 - 2019-09-05
• 6.0.1 - 2019-06-21

from @types/semver GitHub release notes

Package name: @types/uuid

• 3.4.13 - 2023-11-07
• 3.4.12 - 2023-10-18
• 3.4.11 - 2023-08-30
• 3.4.10 - 2021-07-02
• 3.4.9 - 2020-04-23
• 3.4.8 - 2020-02-25
• 3.4.7 - 2020-01-28
• 3.4.6 - 2019-10-30
• 3.4.5 - 2019-07-01

from @types/uuid GitHub release notes

Package name: semver

• 6.3.1 - 2023-07-10
  

  6.3.1 (2023-07-10)

  Bug Fixes

  • 928e56d #591 better handling of whitespace (#591) (@ lukekarrys, @ joaomoreno, @ nicolo-ribaudo)
• 6.3.0 - 2019-07-23

from semver GitHub release notes

Package name: uuid

• 3.4.0 - 2020-01-16
• 3.3.3 - 2019-08-19
• 3.3.2 - 2018-06-28

from uuid GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs