Bump semver to ensure signed provenance, CVE fix (#123)

Co-authored-by: Craig Scheets <craig.scheets@consensys.io>
MetaMask · Jul 25, 2023 · a244fa9 · a244fa9
1 parent d94d13c
commit a244fa9
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/package.json b/package.json
@@ -57,7 +57,7 @@
     "@noble/hashes": "^1.3.1",
     "@types/debug": "^4.1.7",
     "debug": "^4.3.4",
-    "semver": "^7.3.8",
+    "semver": "^7.5.4",
     "superstruct": "^1.0.3"
   },
   "devDependencies": {

diff --git a/yarn.lock b/yarn.lock
@@ -1123,7 +1123,7 @@ __metadata:
     prettier: ^2.7.1
     prettier-plugin-packagejson: ^2.3.0
     rimraf: ^3.0.2
-    semver: ^7.3.8
+    semver: ^7.5.4
     stdio-mock: ^1.2.0
     superstruct: ^1.0.3
     ts-jest: ^29.0.3
@@ -6974,7 +6974,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"semver@npm:7.x, semver@npm:^7.0.0, semver@npm:^7.3.2, semver@npm:^7.3.4, semver@npm:^7.3.5, semver@npm:^7.3.7, semver@npm:^7.3.8, semver@npm:^7.5.3":
+"semver@npm:7.x, semver@npm:^7.0.0, semver@npm:^7.3.2, semver@npm:^7.3.4, semver@npm:^7.3.5, semver@npm:^7.3.7, semver@npm:^7.3.8, semver@npm:^7.5.3, semver@npm:^7.5.4":
   version: 7.5.4
   resolution: "semver@npm:7.5.4"
   dependencies: