chore(deps): bump semver and @types/semver in /setup

[dependabot[bot]]

Bumps semver and @types/semver. These dependencies needed to be updated together. Updates semver from 7.3.5 to 7.3.7

Release notes

Sourced from semver's releases.

v7.3.7

7.3.7 (2022-04-11)

Bug Fixes

• allow node >=10 (85b269a)
• bin: get correct value from arg separated by equals (#449) (4ceca76), closes #431
• ensure SemVer instance passed to inc are not modified (#427) (f070dde)
• inc prerelease with numeric preid (#380) (802e161)

Dependencies

• revert to lru-cache@6 (22ae54d)

v7.3.6

7.3.6 (2022-04-05)

Bug Fixes

• npm/node-semver#329 (cb1ca1d)
• properly escape dots in GTE0 regexes (#432) (11494f1)
• replace deprecated String.prototype.substr() (#445) (e2d55e7)
• replace regex used to split ranges (#434) (9ab7b71)

Documentation

• clarify * range behavior (cb1ca1d)

Dependencies

• [email protected] (#442) (9a3064c)
• [email protected] (#439) (60cbb3f)

Changelog

Sourced from semver's changelog.

7.3.7 (2022-04-11)

Bug Fixes

• allow node >=10 (85b269a)
• bin: get correct value from arg separated by equals (#449) (4ceca76), closes #431
• ensure SemVer instance passed to inc are not modified (#427) (f070dde)
• inc prerelease with numeric preid (#380) (802e161)

Dependencies

• revert to lru-cache@6 (22ae54d)

7.3.6 (2022-04-05)

Bug Fixes

• npm/node-semver#329 (cb1ca1d)
• properly escape dots in GTE0 regexes (#432) (11494f1)
• replace deprecated String.prototype.substr() (#445) (e2d55e7)
• replace regex used to split ranges (#434) (9ab7b71)

Documentation

• clarify * range behavior (cb1ca1d)

Dependencies

• [email protected] (#442) (9a3064c)
• [email protected] (#439) (60cbb3f)

7.3.0

• Add subset(r1, r2) method to determine if r1 range is entirely contained by r2 range.

7.2.3

• Fix handling of includePrelease mode where version ranges like 1.0.0 - 2.0.0 would include 3.0.0-pre and not 1.0.0-pre.

7.2.2

• Fix bug where 2.0.0-pre would be included in ^1.0.0 if includePrerelease was set to true.

... (truncated)

Commits

• 7a2d69c chore(main): release 7.3.7 (#451)
• f070dde fix: ensure SemVer instance passed to inc are not modified (#427)
• 4571a1a chore(test): add test for max safe integers in ranges (#450)
• 802e161 fix: inc prerelease with numeric preid (#380)
• 4ceca76 fix(bin): get correct value from arg separated by equals (#449)
• e7c3973 chore: postinstall for dependabot template-oss PR
• a683bf9 chore: bump @​npmcli/template-oss from 3.2.2 to 3.3.2
• 85b269a fix: allow node >=10
• 22ae54d deps: revert to lru-cache@6
• 1ea0fe2 chore(main): release 7.3.6 (#443)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by lukekarrys, a new releaser for semver since your current version.

Updates @types/semver from 7.3.9 to 7.3.12

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)