[Snyk] Security upgrade @hashicorp/js-releases from 1.5.1 to 1.7.2

[AkbarTrilaksana]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @hashicorp/js-releases

The new version differs by 205 commits.

• 92ee45e Release 1.7.2 (Github Actions Terraform output with github-script has symbols / ascii characters hashicorp/setup-terraform#207)
• 66f082f Update Axios to remove security warning ([](https://cla.hashicorp.com/hashicorp/setup-terraform?pullRequest=180) <br/>All committers have signed the CLA. hashicorp/setup-terraform#206)
• 78e5913 Merge pull request Updated README to reflect GitHub limitations hashicorp/setup-terraform#205 from hashicorp/dependabot/npm_and_yarn/types/node-18.18.13
• 1a1b61e Bump @ types/node from 18.18.12 to 18.18.13
• 4a4f1c3 Merge pull request TF DevEx: repo adoption hashicorp/setup-terraform#204 from hashicorp/dependabot/npm_and_yarn/types/node-18.18.12
• 92aeb0c Bump @ types/node from 18.18.11 to 18.18.12
• 1132e72 Merge pull request Use toolcache properly to download terraform hashicorp/setup-terraform#202 from hashicorp/dependabot/npm_and_yarn/types/semver-7.5.6
• f8b78a9 Merge pull request Update changelog for 2.1 hashicorp/setup-terraform#203 from hashicorp/dependabot/npm_and_yarn/types/node-18.18.11
• be64a96 Bump @ types/node from 18.18.10 to 18.18.11
• 6a943da Bump @ types/semver from 7.5.5 to 7.5.6
• f1e844d Merge pull request Bump @actions/core from 1.7.0 to 1.8.2 hashicorp/setup-terraform#200 from hashicorp/tsccr-auto-pinning/trusted/2023-11-20
• c9e8b12 Merge pull request Bump @actions/github from 5.0.1 to 5.0.3 hashicorp/setup-terraform#201 from hashicorp/dependabot/npm_and_yarn/types/node-18.18.10
• 3ce1fa0 Bump @ types/node from 18.18.9 to 18.18.10
• 96e7439 Result of tsccr-helper -log-level=info -pin-all-workflows .
• 8ee072c Bump @ types/node from 18.18.8 to 18.18.9 (Add human-readable markdown summary of executed plan hashicorp/setup-terraform#196)
• 01bdee9 Bump @ types/semver from 7.5.4 to 7.5.5 (Buffer() is deprecated due to security and usability issues (v2.0.0) hashicorp/setup-terraform#197)
• 1ff0029 Bump @ types/yauzl from 2.10.2 to 2.10.3 (Request: Support PowerShell hashicorp/setup-terraform#198)
• e5babe4 Merge pull request Failing with 404 hashicorp/setup-terraform#195 from hashicorp/gh-disable-gha-dependabot
• 73df9bf github: Disable dependabot for GHA
• 7c8107e Merge pull request Bump jest from 28.0.3 to 28.1.0 hashicorp/setup-terraform#194 from hashicorp/dependabot/npm_and_yarn/types/node-18.18.8
• 13cd153 Bump @ types/node from 18.18.7 to 18.18.8
• 093bd80 Merge pull request Windows - Action fails to extract terraform zip hashicorp/setup-terraform#186 from hashicorp/dependabot/github_actions/actions/checkout-4.1.1
• 0cca3ba Bump openpgp from 5.10.2 to 5.11.0 (Bump husky from 7.0.4 to 8.0.1 hashicorp/setup-terraform#193)
• 5aa5471 Bump @ types/node from 18.18.6 to 18.18.7 (Bump @actions/core from 1.7.0 to 1.8.0 hashicorp/setup-terraform#192)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)

[cnp-for-devops]

Authentication to CNP for DevOps failed. Click here to try again: https://portal.cwp.radwarecloud.com/github-plugin.html?installation_id=27555900&setup_action=install

[socket-security]

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
@hashicorp/js-releases	1.5.1...1.7.2	None	+10/-47	24.5 MB	jpogran