[Snyk] Security upgrade semantic-release from 4.3.5 to 10.0.0

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/snyk-config/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semantic-release

The new version differs by 189 commits.

• d548edc feat: Extract npm and github publish to plugins
• 991a7b5 refactor: Simplify file tree
• 3326083 docs(README) fix plugin anchor links ([Snyk] Security upgrade node-fetch from 2.6.0 to 2.6.7 #504)
• 018835f docs(README): typo ([Snyk] Security upgrade json from 2.0.2 to 2.3.0 #516)
• c8748ad chore(package): update dependencies
• a4951b7 fix(docs): remove unnecessary backticks in readme
• 17a6006 style: Update style for Prettier 1.8.0
• 470697c chore(package): update prettier to version 1.8.0
• 94b00e2 chore(airtable-crm): initial configuration
• d0180c4 feat: Additional commit information
• 186950a fix(package): update @ semantic-release/commit-analyzer to version 4.0.0
• c90765e fix: Include Error properties in logs
• ad2e1d7 test: Fix typos: only in tests and useless console.log()
• 65d344b fix: Check SemanticReleaseError by error.semanticRelease property
• 8a1dd7b fix(package): update @ semantic-release/release-notes-generator to version 5.0.0
• e2a8a5c feat: Refactor CLI to run with one command, improve logs, modularize, add tests
• 1bd095d chore(CODE_OF_CONDUCT): Contributor Covenant
• 16a02e5 fix(package): update github to version 12.0.0
• 51e7579 chore(package): update ava to version 0.23.0
• acddd5a chore(package): update codecov to version 3.0.0
• f6aacd2 fix: Log error messages on reject
• b0bc490 fix: handle errors when verifyConditions and verifyRelease are a pipeline
• 580ad9c feat: Allow to recover from ENOTINHISTORY with a tag and handle detached head repo
• 8e9d9f7 fix: Always pass pluginConfig to plugins as a defined object

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution