fix(security): patch semantic-release dependency vulnerabilities (#671)

Author: arnaudbesnier

.github/workflows/build.yml

@@ -22,6 +22,8 @@ jobs:
         with:
           fetch-depth: 0
       - uses: actions/setup-node@v1
+        with:
+            node-version: 14.17.6
       - uses: actions/cache@v2
         with:
           path: '**/node_modules'

package.json

@@ -60,7 +60,7 @@
     "jest-extended": "0.11.5",
     "mongoose": "5.12.14",
     "mongoose-fixture-loader": "1.0.2",
-    "semantic-release": "17.4.2",
+    "semantic-release": "17.4.7",
     "semantic-release-npm-deprecate-old-versions": "1.1.2",
     "semantic-release-slack-bot": "1.6.2",
     "simple-git": "1.65.0",