[Snyk] Security upgrade semantic-release from 17.0.7 to 17.2.3

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	706/1000 Why? Recently disclosed, Has a fix available, CVSS 8.2	Information Disclosure SNYK-JS-SEMANTICRELEASE-1041706	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semantic-release

The new version differs by 30 commits.

• c8d38b6 style: removed line breaks to align with xo rule (#1689)
• ca90b34 fix: mask secrets when characters get uri encoded
• 63fa143 docs(plugins): add listing for new plugin (#1686)
• 2bf3771 fix: use valid git credentials when multiple are provided (#1669)
• 77a75f0 fix: don't parse port as part of the path in repository URLs (#1671)
• d74ffef docs: add npm-deprecate-old-versions in plugins list (#1667)
• 3abcbaf Revert "feat: throw an Error if package.json has duplicate "repository" key (#1656)"
• b8fb35c feat: throw an Error if package.json has duplicate "repository" key (#1656)
• 18e35b2 docs: reorder default plugins list (#1650)
• e35e5bb docs(contributing): fix commit message examples (#1648)
• 311c465 docs(README): welcome @travi, add alumni section
• b4c5d0a fix: add logging for when ssh falls back to http (#1639)
• c982249 docs(contributing): typo fix (#1638)
• 9635f50 docs: improve github actions recipe on git plugin (#1626)
• d036a89 ci(docs): use actions/checkout@v2 (#1620)
• 9303d1d docs(resources.md): added more sematnic release article (#1610)
• b72cdb3 docs(configuration.md): Updated documentation for dry-run feature of semantic Release (#1607)
• ee44ee8 docs(github-actions): suggest action_dispatch as trigger (#1605)
• b24d247 docs: add `semantic-release-rubygem` to community plugins (#1602)
• 6d118c6 docs: be clear about what module of semantic-release handles updating the package.json (#1601)
• b5c9dea docs: update github documentation to `docs.github.com`
• 1405b94 docs: added recipe for Jenkins CI configuration ([Snyk] Upgrade typedoc from 0.16.11 to 0.17.3 #1) (#1591)
• 0f0c650 fix: use correct ci branch context (#1521)
• a465801 feat(bitbucket-basic-auth): support for bitbucket server basic auth (#1578)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!

0 Bugs
0 Vulnerabilities (and 0 Security Hotspots to review)
0 Code Smells

No Coverage information
No Duplication information