NPM audit reports low vulnerability in dependencies

[LoganDupont]

Paths:

• standard-version > git-semver-tags > meow > yargs-parser

• standard-version > conventional-recommended-bump > meow > yargs-parser

• standard-version > conventional-recommended-bump > git-semver-tags > meow > yargs-parser

More info https://npmjs.com/advisories/1500

[saadjutt01]

Low : Prototype Pollution
Package : yargs-parser
Patched in : >=13.1.2 <14.0.0 || >=15.0.1 <16.0.0 || >=18.1.2
Dependency of : standard-version [dev]
on console.

[timbru31]

Both conventional-recommended-bump@6.0.9 and git-semver-tags@4.0.0 already have been released - we just need a review and merge of their dependency PRs: #588 #598

Can someone please take care of this and release a new version? The PRs are open since >1 month now...

[jbottigliero]

Hi, we've published 8.0.1 which includes updates for both of these dependencies.

[nmccready]

Any updates please?