semver
7.8.5 · 19 Jun 2026ISC750.1M / weekRepositoryHomepagenpmAtom feed
Upgrading semver from 7.3.1 to 7.8.5
28 releases in betweennotes for 22
- ?
- changes to make
- 1
- advisory fixed
- 9+
- new
- 35+
- fixes
Counted from 22 of 28 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 1 advisory affecting 7.3.1
- semver vulnerable to Regular Expression Denial of Servicehigh · GHSA-c2qf-rxjj-qqgw
Release by release
- fixed
Include prereleases in tilde range lower bound with includePrerelease
- fixed
- fixed
Reject numeric segments after x-ranges
- fixed
- fixed
Align caret includePrerelease lower bounds
- fixed
- fixed
Increment dotted prerelease identifiers (#870) (@liuzemei, @SheldonNeo)
- fixed
- fixed
Strip build metadata before comparator trimming
- fixed
Handle prerelease bounds in subset (#867) (@puneetdixit200, Puneet Dixit)
- fixed
- new
Add
truncatefunction (#855) (@pjohnmeyer, @owlstronaut) - fixed
Warn when defaulting to --inc=patch in CLI
- new
- fixed
cli: Pass options to semver.valid() for loose version validation
- fixed
- fixed
Faster paths for compare
- fixed
x-range build metadata support (i529015)
- fixed
44 internal lines (docs, tests, tooling) left out.