Merge pull request #455 from arduino/dependabot/npm_and_yarn/semver-7.7.1

Bump semver from 7.7.0 to 7.7.1

Author: per1234

.licenses/npm/semver-7.7.0.dep.yml renamed to .licenses/npm/semver-7.7.1.dep.yml

@@ -1,8 +1,9 @@
 ---
 name: semver
-version: 7.7.0
+version: 7.7.1
 type: npm
 summary: The semantic version parser used by npm.
+homepage:
 license: isc
 licenses:
 - sources: LICENSE

dist/index.js

@@ -8216,7 +8216,7 @@ const testSet = (set, version, options) => {
 
 const debug = __nccwpck_require__(1159)
 const { MAX_LENGTH, MAX_SAFE_INTEGER } = __nccwpck_require__(5101)
-const { safeRe: re, t } = __nccwpck_require__(5471)
+const { safeRe: re, safeSrc: src, t } = __nccwpck_require__(5471)
 
 const parseOptions = __nccwpck_require__(356)
 const { compareIdentifiers } = __nccwpck_require__(3348)
@@ -8398,7 +8398,8 @@ class SemVer {
       }
       // Avoid an invalid semver results
       if (identifier) {
-        const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE])
+        const r = new RegExp(`^${this.options.loose ? src[t.PRERELEASELOOSE] : src[t.PRERELEASE]}$`)
+        const match = `-${identifier}`.match(r)
         if (!match || match[1] !== identifier) {
           throw new Error(`invalid identifier: ${identifier}`)
         }
@@ -9255,6 +9256,7 @@ exports = module.exports = {}
 const re = exports.re = []
 const safeRe = exports.safeRe = []
 const src = exports.src = []
+const safeSrc = exports.safeSrc = []
 const t = exports.t = {}
 let R = 0
 
@@ -9287,6 +9289,7 @@ const createToken = (name, value, isGlobal) => {
   debug(name, index, value)
   t[name] = index
   src[index] = value
+  safeSrc[index] = safe
   re[index] = new RegExp(value, isGlobal ? 'g' : undefined)
   safeRe[index] = new RegExp(safe, isGlobal ? 'g' : undefined)
 }

package-lock.json

@@ -18,7 +18,7 @@
     "@actions/core": "^1.11.1",
     "@actions/http-client": "^2.2.3",
     "@actions/tool-cache": "^2.0.2",
-    "semver": "^7.7.0"
+    "semver": "^7.7.1"
   },
   "devDependencies": {
     "@actions/io": "^1.1.3",