Update vulnerable dev dependencies

[anddoutoi]

Issue

I have identified two vulnerable devDependencies that probably can be bumped to the highest major within the current ^ semver range.

@babel/core

https://devhub.checkmarx.com/cve-details/Cxc7705965-e0f0/

semantic-release

https://devhub.checkmarx.com/cve-details/CVE-2022-31051/

Suggestion

Find the highest published version that wouldn't break the current ^ semver and install that version. Useful commands:

Find out:

• npm view @babel/core
• npm view @babel/core versions
• npm view semantic-release
• npm view semantic-release versions

Fix:

• npm install --save-dev @babel/core@7.21.0
• npm install --save-dev semantic-release@???