semver
7.8.5 · 19 Jun 2026ISC750.1M / weekRepositoryHomepagenpmAtom feed
Upgrading semver from 7.1.2 to 7.8.5
35 releases in betweennotes for 26
- ?
- changes to make
- 1
- advisory fixed
- 11+
- new
- 37+
- fixes
Counted from 26 of 35 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 1 advisory affecting 7.1.2
- semver vulnerable to Regular Expression Denial of Servicehigh · GHSA-c2qf-rxjj-qqgw
Release by release
- fixed
Include prereleases in tilde range lower bound with includePrerelease
- fixed
- fixed
Reject numeric segments after x-ranges
- fixed
- fixed
Align caret includePrerelease lower bounds
- fixed
- fixed
Increment dotted prerelease identifiers (#870) (@liuzemei, @SheldonNeo)
- fixed
- fixed
Strip build metadata before comparator trimming
- fixed
Handle prerelease bounds in subset (#867) (@puneetdixit200, Puneet Dixit)
- fixed
- new
Add
truncatefunction (#855) (@pjohnmeyer, @owlstronaut) - fixed
Warn when defaulting to --inc=patch in CLI
- new
- fixed
cli: Pass options to semver.valid() for loose version validation
- fixed
- fixed
Faster paths for compare
- fixed
x-range build metadata support (i529015)
- fixed
44 internal lines (docs, tests, tooling) left out.