chore(deps): Bump semver from 7.7.2 to 7.7.3 (#71)

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Diogenes Fernandes <diofeher@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Diogenes Fernandes <diofeher@gmail.com>

.github/workflows/continuous-integration.yml

@@ -1,4 +1,4 @@
-name: 'Continuous Integration'
+name: "Continuous Integration"
 
 on:
   push:
@@ -11,9 +11,9 @@ jobs:
     name: Check dist/ directory
     uses: actions/reusable-workflows/.github/workflows/check-dist.yml@2826fb8353263a138210fc017301ce5767a9c0d4
     with:
-      node-version: "20.x"
+      node-version: "20.19.1"
   test:
     name: Test
     uses: actions/reusable-workflows/.github/workflows/basic-validation.yml@2826fb8353263a138210fc017301ce5767a9c0d4
     with:
-      node-version: "20.x"
+      node-version: "20.19.1"

dist/index.js

@@ -51,7 +51,7 @@ async function fetchReleases (githubToken) {
     throw new Error('failed fetching releases (' + resp.message.statusCode + ')');
   }
 
-  let body = await resp.readBody();
+  const body = await resp.readBody();
   const releasesMeta = JSON.parse(body);
 
   /**
@@ -6437,6 +6437,7 @@ const isSatisfiable = (comparators, options) => {
 // already replaced the hyphen ranges
 // turn into a set of JUST comparators.
 const parseComparator = (comp, options) => {
+  comp = comp.replace(re[t.BUILD], '')
   debug('comp', comp, options)
   comp = replaceCarets(comp, options)
   debug('caret', comp)
@@ -6857,11 +6858,25 @@ class SemVer {
       other = new SemVer(other, this.options)
     }
 
-    return (
-      compareIdentifiers(this.major, other.major) ||
-      compareIdentifiers(this.minor, other.minor) ||
-      compareIdentifiers(this.patch, other.patch)
-    )
+    if (this.major < other.major) {
+      return -1
+    }
+    if (this.major > other.major) {
+      return 1
+    }
+    if (this.minor < other.minor) {
+      return -1
+    }
+    if (this.minor > other.minor) {
+      return 1
+    }
+    if (this.patch < other.patch) {
+      return -1
+    }
+    if (this.patch > other.patch) {
+      return 1
+    }
+    return 0
   }
 
   comparePre (other) {
@@ -7762,6 +7777,10 @@ module.exports = debug
 
 const numeric = /^[0-9]+$/
 const compareIdentifiers = (a, b) => {
+  if (typeof a === 'number' && typeof b === 'number') {
+    return a === b ? 0 : a < b ? -1 : 1
+  }
+
   const anum = numeric.test(a)
   const bnum = numeric.test(b)
 

lib/releases.js

@@ -45,7 +45,7 @@ async function fetchReleases (githubToken) {
     throw new Error('failed fetching releases (' + resp.message.statusCode + ')');
   }
 
-  let body = await resp.readBody();
+  const body = await resp.readBody();
   const releasesMeta = JSON.parse(body);
 
   /**

package-lock.json

@@ -13,7 +13,7 @@
         "@actions/exec": "1.1.1",
         "@actions/io": "1.1.3",
         "@actions/tool-cache": "2.0.2",
-        "semver": "7.7.2"
+        "semver": "7.7.3"
       },
       "devDependencies": {
         "@vercel/ncc": "0.38.4",
@@ -6223,9 +6223,9 @@
       }
     },
     "node_modules/semver": {
-      "version": "7.7.2",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.2.tgz",
-      "integrity": "sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==",
+      "version": "7.7.3",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
+      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"

package.json

@@ -23,7 +23,7 @@
     "@actions/exec": "1.1.1",
     "@actions/io": "1.1.3",
     "@actions/tool-cache": "2.0.2",
-    "semver": "7.7.2"
+    "semver": "7.7.3"
   },
   "devDependencies": {
     "@vercel/ncc": "0.38.4",