fix: Update ssri to a non vulnerable version

[AhmedAbdoOrtiga]

Details

Dependabot cannot update ssri to a non-vulnerable version
The latest possible version that can be installed is 6.0.1 because of the following conflicting dependencies:

[email protected] requires ssri@^6.0.1 via a transitive dependency on [email protected]
[email protected] requires ssri@^6.0.0 via a transitive dependency on [email protected]
[email protected] requires ssri@^6.0.1 via a transitive dependency on [email protected]
[email protected] requires ssri@^6.0.1 via a transitive dependency on [email protected]
[email protected] requires ssri@^6.0.1 via a transitive dependency on [email protected]
The earliest fixed version is 8.0.1.

Motivation

Avoid security vulnerabilities.

Context

Pull request checklist

• PR title respects Conventional Commits (starts with fix:, feat:, etc, and is suitable for user-facing release notes)
• PR contains no breaking changes, OR description of both PR and final merge commit starts with BREAKING CHANGE:
• (if applicable) Addresses issue: #0000
• Added relevant unit tests for your changes
• Ran yarn precheckin
• Verified code coverage for the changes made

[dbjorge]

Using a resolution is not necessary here. The references to the old ssri version go away if you instead:

1. remove semantic-release from package.json
2. yarn install
3. re-add semantic-release
4. yarn install again

[ada-cat]

🎉 This PR is included in version 2.6.2 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀