chore(deps-dev): Bump semantic-release from 17.4.2 to 17.4.7

[dependabot]

Bumps semantic-release from 17.4.2 to 17.4.7.

Release notes

Sourced from semantic-release's releases.

v17.4.7

17.4.7 (2021-08-25)

Bug Fixes

• engines: fixed defined node version to account for the higher requirement from the npm plugin (#2088) (ea52e17)

v17.4.6

17.4.6 (2021-08-23)

Bug Fixes

• marked: reverted upgrade to v3 (#2087) (5edff69)

v17.4.5

17.4.5 (2021-08-16)

Bug Fixes

• deps: update dependency marked to v3 (6e4beb8)

v17.4.4

17.4.4 (2021-06-15)

Bug Fixes

• corrected spelling of invalid plugin config error (#1979) (80e1665)

v17.4.3

17.4.3 (2021-05-12)

Bug Fixes

• bump minimal version of lodash to address CVE-2021-23337 (#1931) (55194c1)

Commits

• ea52e17 fix(engines): fixed defined node version to account for the higher requiremen...
• 5edff69 fix(marked): reverted upgrade to v3 (#2087)
• 6e4beb8 fix(deps): update dependency marked to v3
• ebad322 chore(deps): update dependency path-parse to 1.0.7 [security] (#2072)
• 88e423b chore(deps): update dependency p-retry to v4.6.1 (#2042)
• a4f0ff7 ci(workflow): add 'npm' cache for actions/setup-node in .github/workflows (#2...
• ee3068e chore(deps): update dependency nock to v13.1.1 (#2034)
• 04b6046 docs(branches): minor typo fixes (#2033)
• fa847e2 chore(deps): update dependency p-retry to v4.6.0 (#2004)
• 413ffd2 docs(circleci): Update CircleCI recipes config (#2018)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[guardrails]

⚠️ We detected 2 security issues in this pull request:

Vulnerable Libraries (2)

Severity	Details
High	pkg:npm/marked@2.1.3@2.1.3 (t) upgrade to: 4.0.10
High	pkg:npm/semantic-release@17.4.7@17.4.7 - no patch available

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[secure-code-warrior-for-github]

Micro-Learning Topic: Vulnerable library (Detected by phrase)

Matched on "Vulnerable Libraries"

What is this? (2min video)

Use of vulnerable components will introduce weaknesses into the application. Components with published vulnerabilities will allow easy exploitation as resources will often be available to automate the process.

Try a challenge in Secure Code Warrior