[Snyk] Security upgrade semver from 2.3.2 to 4.3.2

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/deduped-dep/package.json
  • test/fixtures/deduped-dep/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) npm:semver:20150403	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semver

The new version differs by 45 commits.

• 22e583c v4.3.2
• c80180d Prevent version strings > 256 chars, or with giant numbers
• fa9be2b v4.3.1
• 27483aa fix github URL
• 12c0304 v4.3.0
• 372f0bf rename test file and s/tabs/spaces/g
• 93a9d8a Added functions to extract major, minor, patch version
• d2806e6 4.2.2
• 46d5fa0 sometimes vim is not my friend
• bdfb195 4.2.1
• 7b2bdc8 fix example rendering
• d62c5f1 Merge pull request [Snyk] Security upgrade sanitize from 4.6.2 to 5.2.1 #117 from Hypercubed/patch-1
• 01c37c3 Update README.md
• 2105629 Ensure prerelease versions are compared by Ascii value
• f353d33 v4.2.0
• 89eabc1 diff(v1, v2)
• f43cb35 4.1.1
• 6cec0db what is "rubygems"
• 1a8c300 updated readme to match 4.1.0 release
• f8db569 v4.1.0
• 29597c0 inc(pre,id): Only put a single .0 after the id when non-numeric
• 8e84b19 Add support for prerelease identifiers
• 58c9714 v4.0.3
• 078061b v4.0.2

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) npm:semver:20150403	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.