Bump semver and tachometer

[dependabot]

Bumps semver to 5.7.2 and updates ancestor dependency tachometer. These dependencies need to be updated together.

Updates semver from 4.3.6 to 5.7.2

Release notes

Sourced from semver's releases.

v5.7.2

5.7.2 (2023-07-10)

Bug Fixes

• 2f8fd41 #585 better handling of whitespace (#585) (@​joaomoreno, @​lukekarrys)

Changelog

Sourced from semver's changelog.

5.7.2 (2023-07-10)

Bug Fixes

• 2f8fd41 #585 better handling of whitespace (#585) (@​joaomoreno, @​lukekarrys)

5.7

• Add minVersion method

5.6

• Move boolean loose param to an options object, with backwards-compatibility protection.
• Add ability to opt out of special prerelease version handling with the includePrerelease option flag.

5.5

• Add version coercion capabilities

5.4

• Add intersection checking

5.3

• Add minSatisfying method

5.2

• Add prerelease(v) that returns prerelease components

5.1

• Add Backus-Naur for ranges
• Remove excessively cute inspection methods

5.0

• Remove AMD/Browserified build artifacts
• Fix ltr and gtr when using the * range
• Fix for range * with a prerelease identifier

Commits

• f8cc313 chore: release 5.7.2
• 2f8fd41 fix: better handling of whitespace (#585)
• deb5ad5 chore: @​npmcli/template-oss@​4.16.0
• c83c18c 5.7.1
• 956e228 Correct typo in README
• 8055dda 5.7.0
• 604e73d auto-publishing scripts
• bed01e2 remove the nomin comments, since we don't minify any more anyway
• 9cb68f1 document parse method
• 38d42ca 5.7 changelog
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates tachometer from 0.4.15 to 0.7.0

Release notes

Sourced from tachometer's releases.

v0.7.0

[0.7.0] 2022-07-15

• [BREAKING] Tachometer is now an ES module binary, so it requires Node 12 or higher.
• Upgraded dependencies and removed unnecessary ones.

v0.6.0

[0.6.0] 2022-07-01

• [BREAKING] Benchmark and root paths are now interpreted relative to the location of the config file, instead of the current working directory.

  For example, a config at path <repo>/benchmarks/foo/tachometer.json that used to look as follows, and had to be run with <repo> as the cwd:

  {
    "root": ".",
    "benchmarks": [
      {
        "url": "benchmarks/foo/index.html"
      }
    ]
  }

  Should now look like this, and can be run from any cwd:

  {
    "root": "../..",
    "benchmarks": [
      {
        "url": "foo.html"
      }
    ]
  }

v0.5.10

• The --horizons flag and horizon config setting has been replaced with --auto-sample-conditions and autoSampleConditions. --horizon will continue to work for backwards compatibility, but please do update to the new name.

• Copyright notice owner changed from "The Polymer Project Authors" to "Google LLC". Trivial reformatting for LICENSE file to match spdx.org version. Source license headers replaced with concise SPDX-style.

... (truncated)

Changelog

Sourced from tachometer's changelog.

[0.7.0] 2022-07-15

• [BREAKING] Tachometer is now an ES module binary, so it requires Node 12 or higher.
• Upgraded dependencies and removed unnecessary ones.

[0.6.0] 2022-07-01

• [BREAKING] Benchmark and root paths are now interpreted relative to the location of the config file, instead of the current working directory.

  For example, a config at path <repo>/benchmarks/foo/tachometer.json that used to look as follows, and had to be run with <repo> as the cwd:

  {
    "root": ".",
    "benchmarks": [
      {
        "url": "benchmarks/foo/index.html"
      }
    ]
  }

  Should now look like this, and can be run from any cwd:

  {
    "root": "../..",
    "benchmarks": [
      {
        "url": "foo.html"
      }
    ]
  }

[0.5.10] 2021-09-27

• The --horizons flag and horizon config setting has been replaced with --auto-sample-conditions and autoSampleConditions. --horizon will continue to work for backwards compatibility, but please do update to the new name.

• Copyright notice owner changed from "The Polymer Project Authors" to "Google LLC". Trivial reformatting for LICENSE file to match spdx.org version. Source license headers replaced with concise SPDX-style.

• Fix bug where log files would be created with '' backslash names instead of

... (truncated)

Commits

• 9c3ad69 Publish 0.7.0 (#240)
• e6c340a Upgrade tachometer to ES modules, and update dependencies (#239)
• ef7c3f1 Release 0.6.0 (#238)
• dfd623f Interpret paths relative to config file instead of cwd (#237)
• 7bf3c57 fix typos/grammar (#229)
• 4f49cb3 Release 0.5.10 (#227)
• 724dbd5 Add browser.profile setting and fix Firefox addArguments bug (#226)
• 19fc355 Rename horizon to auto sample conditions (#225)
• d110258 Various README improvements (#224)
• 8df4bfb New copyright headers (#220)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.