build: bump semantic-release to avoid vulnerabilities (#265)

Signed-off-by: Phil Adams <phil_adams@us.ibm.com>

Author: padamstx

.travis.yml

@@ -1,6 +1,6 @@
 language: go
 
-dist: bionic
+dist: jammy
 
 go:
 - 1.18.x
@@ -16,7 +16,7 @@ env:
 
 before_install:
   - sudo apt-get update
-  - pyenv global 3.8
+  - python -V
 
 install:
   - curl -sfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh| sh -s -- -b $(go env GOPATH)/bin v1.51.2
@@ -26,7 +26,9 @@ script:
   - make travis-ci
 
 before_deploy:
-  - nvm install 14
+  - nvm install 18
+  - node --version
+  - npm --version
   - npm install
   - pip install --user bump2version
 

package.json

@@ -4,8 +4,8 @@
   "description": "This package.json is being used to manage semantic-release and its dependencies",
   "license": "Apache-2.0",
   "devDependencies": {
-    "semantic-release": "19.0.5",
-    "@semantic-release/changelog": "6.0.2",
+    "semantic-release": "21.0.7",
+    "@semantic-release/changelog": "6.0.3",
     "@semantic-release/exec": "6.0.3",
     "@semantic-release/git": "10.0.1"
   },