[Snyk] Security upgrade semantic-release from 19.0.3 to 20.0.1

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • web3.js/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncaught Exception SNYK-JS-YAML-5458867	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semantic-release

The new version differs by 68 commits.

• f914c1e fix(deps): update dependency cosmiconfig to v8
• c4da008 fix(deps): update dependency hosted-git-info to v6
• b707475 chore(deps): update dependency sinon to v15 (Little scripts/ulimit-n.sh fixes solana-labs/solana#2653)
• b957934 chore(deps): update dependency fs-extra to v11 (Add design for the leader validator loop solana-labs/solana#2650)
• 4b74f00 chore(deps): update dependency ava to v5 (Cleanup economic design solana-labs/solana#2649)
• bbb5e5a chore(deps): update dependency testdouble to v3.16.8 (Add design for the forking bank solana-labs/solana#2646)
• a1e0467 chore(deps): update dependency sinon to v14.0.2 (Fullnode::handle_role_transition() burns a core solana-labs/solana#2645)
• b9b5c76 Merge pull request Fullnode can't tolerate bad blobs solana-labs/solana#2607 from semantic-release/beta
• 91bcb6b Merge branch 'master' of github.com:semantic-release/semantic-release into beta
• 0716d62 build(deps): bump json5 and tsconfig-paths (Chapter number cleanup and some detail on minimum tx fee designated for mining pool solana-labs/solana#2643)
• caa8b95 test(integration): used token auth for registry interactions rather than legacy auth
• 0973513 Merge branch 'master' of github.com:semantic-release/semantic-release into beta
• fa241a2 build(deps): bump minimatch from 3.0.4 to 3.1.2
• ba05e08 docs(node-version): raised the minimum version to align with `engines.node`
• eddbbb8 Merge branch 'master' of github.com:semantic-release/semantic-release into beta
• aa0c9d6 build(deps): bump decode-uri-component from 0.2.0 to 0.2.2
• 7365012 chore(overrides): removed the `overrides` definition (tests/programs.rs: Remove unnecessary abstractions and helper functions solana-labs/solana#2634)
• 918eb59 fix(env-ci): updated to the stable esm-only version (Update solana-vote-signer to Rust 2018 solana-labs/solana#2632)
• c4cd639 Merge branch 'master' of github.com:semantic-release/semantic-release into beta
• 6051fae Revert "test(integration): ran tests serially in hope of avoiding conflicts in the ci environment"
• 62846a1 test(integration): omitted the `GITHUB_ACTION` env var as well
• 71f45f9 test(integration): ran tests serially in hope of avoiding conflicts in the ci environment
• f32fd58 test(integration): updated the simulated environment to omit the `GITHUB_ACTIONS` variable from the test env
• d13ea92 style: prettier (ignore ledger-tool/target solana-labs/solana#2624)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[codecov]

Codecov Report

Merging #77 (16a685e) into master (1dcf8cf) will increase coverage by 0.1%.
The diff coverage is n/a.

Additional details and impacted files

@@           Coverage Diff            @@
##           master     #77     +/-   ##
========================================
+ Coverage    77.3%   77.5%   +0.1%     
========================================
  Files          42      42             
  Lines        2466    2466             
  Branches      352     352             
========================================
+ Hits         1908    1912      +4     
+ Misses        428     424      -4     
  Partials      130     130             

[stale]

This pull request has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.

[stale]

This stale pull request has been automatically closed. Thank you for your contributions.