[Snyk] Fix for 14 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • node_modules/propagate/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	No	Proof of Concept
	429/1000 Why? Has a fix available, CVSS 4.3	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	No	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451341	No	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	No	No Known Exploit
	635/1000 Why? Has a fix available, CVSS 8.2	Information Disclosure SNYK-JS-SEMANTICRELEASE-1041706	No	No Known Exploit
	536/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	No	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	No	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-YARGSPARSER-560381	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semantic-release

The new version differs by 250 commits.

• 95af1e4 Merge pull request [Snyk] Fix for 2 vulnerabilities #2332 from semantic-release/beta
• f634b8c fix(npm-plugin): upgraded to the beta, which upgrades npm to v8
• d9e5bc0 fix: upgrade `marked` to resolve ReDos vulnerability ([Snyk] Security upgrade coveralls from 2.13.3 to 3.0.0 #2330)
• dd7d664 docs: fix a broken link ([Snyk] Fix for 2 vulnerabilities #2318)
• cd6136d docs: wrong prerelease example ([Snyk] Security upgrade xo from 0.25.4 to 0.42.0 #2307)
• e62c83d docs: remove repeated 'with' word ([Snyk] Fix for 2 vulnerabilities #2289)
• 5d78fa4 docs(breaking-change): highlighted the need for `BREAKING CHANGE: ` to be in the commit footer ([Snyk] Security upgrade coveralls from 2.13.3 to 3.0.0 #2283)
• b64855f docs(badge): mentioned referencing the commit convention ([Snyk] Fix for 2 vulnerabilities #2269)
• 09bcf7a docs: update badges to include preset names ([Snyk] Security upgrade xo from 0.24.0 to 0.42.0 #2266)
• 8e96b23 docs(issue-templates): fixed links to templates for opening issues ([Snyk] Fix for 2 vulnerabilities #2264)
• 5535268 docs: fix typo ([Snyk] Security upgrade xo from 0.25.4 to 0.42.0 #2262)
• 7f971f3 fix: bump @ semantic-release/commit-analyzer to 9.0.2 ([Snyk] Fix for 2 vulnerabilities #2258)
• e636621 docs(troubleshooting): typo ([Snyk] Security upgrade nodeunit from 0.9.5 to 0.11.3 #2254)
• f2a2def docs(recipes): fix path to recipes ([Snyk] Security upgrade ava from 1.4.1 to 2.0.0 #2253)
• 628e29e chore(deps): update dependency got to v11.8.3 ([Snyk] Security upgrade tap from 2.3.4 to 11.1.3 #2251)
• 8fda7fd docs(recipes): moved recipes to sub-directories to align with gitbook expectations ([Snyk] Security upgrade tap from 7.1.2 to 11.1.3 #2246)
• 52d76a2 docs(plugin-list): updates semantic-release-plus/docker with updated lifecycle hook. ([Snyk] Security upgrade airtap from 0.0.4 to 4.0.0 #2243)
• f092dd1 chore(deps): update dependency nock to v13.2.1 ([Snyk] Security upgrade xo from 0.24.0 to 0.42.0 #2242)
• 03aa7d0 docs(badge): switched to proper semantic-release logo ([Snyk] Fix for 2 vulnerabilities #2235)
• bc146e4 docs(gitbook): updated the summary document so that missing pages are rendered by gitbook ([Snyk] Security upgrade webpack from 4.44.1 to 5.0.0 #2234)
• 5f9d1d1 chore(deps): update dependency nock to v13.2.0 ([Snyk] Fix for 2 vulnerabilities #2233)
• 7ff71ad chore(deps): update dependency sinon to v12.0.1 ([Snyk] Security upgrade xo from 0.23.0 to 0.42.0 #2231)
• d3958b8 Revert "chore(deps): update dependency p-retry to v5" ([Snyk] Fix for 2 vulnerabilities #2230)
• 4ae9209 chore(deps): update dependency p-retry to v5 ([Snyk] Security upgrade ava from 1.0.0-beta.8 to 6.0.0 #2229)

See the full diff

Package name: tap

The new version differs by 250 commits.

• bc49fb7 15.0.0
• 4378608 remove publishConfig beta tag
• 2c2e75f provide mkdirRecursive polyfill for old node versions
• 8f4c855 correctly specify 10.0.x versions
• 5e61672 update deps
• c44c418 Support 10.0 and test in CI
• dc5c841 tcompare@5.0.4
• 385b6d2 Add .taprc.yml/yaml handling to change log
• 4f87466 just run regular test script as snap script
• 315a921 delete FORCE_COLOR/NO_COLOR rather than setting to '0'
• 564e96f Add detection for .yaml and .yml
• 75bae93 update cli doc
• c1289bf 15.0.0-3
• d6fe32f Do not CI on node 10
• d2e0428 do not use equals() alias in self-test
• 3f787c4 tell npm to be colorful in CI
• 1512818 run tests with color on github actions
• 4626fa1 Docs: update documentation for tap v15
• 02d536b libtap@1.0.1
• f7c7c58 update cli doc
• 2aa497c 15.0.0-2
• 8d7f62e Add support for overriding libtap's internal settings
• 29eed63 new snapshot folder layout
• 3a28d4d update libtap git ref to isaacs/tap-v15-prep branch

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Open Redirect
🦉 Prototype Pollution