Skip to content

Update dependency semver to v6#46

Open
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/semver-6.x
Open

Update dependency semver to v6#46
dev-mend-for-github-com[bot] wants to merge 1 commit intomasterfrom
whitesource-remediate/semver-6.x

Conversation

@dev-mend-for-github-com
Copy link
Copy Markdown

@dev-mend-for-github-com dev-mend-for-github-com bot commented Feb 13, 2026

This PR contains the following updates:

Package Type Update Change
semver dependencies major ^5.7.1^6.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score Vulnerability Reachability
Medium Medium 5.3 CVE-2022-25883

Release Notes

npm/node-semver (semver)

v6.3.1

Compare Source

Bug Fixes

v6.3.0

Compare Source

  • Expose the token enum on the exports

v6.2.0

Compare Source

  • Coerce numbers to strings when passed to semver.coerce()
  • Add rtl option to coerce from right to left

v6.1.3

Compare Source

  • Handle X-ranges properly in includePrerelease mode

v6.1.2

Compare Source

  • Do not throw when testing invalid version strings

v6.1.1

Compare Source

  • Add options support for semver.coerce()
  • Handle undefined version passed to Range.test

v6.1.0

Compare Source

  • Add semver.compareBuild function
  • Support * in semver.intersects

v6.0.0

Compare Source

Bug Fixes
Documentation
Dependencies
Chores

v5.7.2

Compare Source

Bug Fixes

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Feb 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants