Last commit failed on main and micromatch was not updated

[carlosjgp]

https://app.circleci.com/jobs/github/juliuscc/semantic-release-slack-bot/520

34e721a

[MikelArnaiz]

+1 keeping micromatch at version "4.0.2" it's a security vulnerability
#123

[gazpachu]

@juliuscc @tripodsan I understand you might be busy with other things, but the semantic-release community needs to move forward. This issue has been around since June. Are you still committed to maintaining this repository? if not, would you be willing to transfer the ownership to someone else with time to fix it? Thanks

[arnaudbesnier]

In the meantime, this is the workaround we decided to apply to all the repositories of our organization:

"resolutions": {
   "semantic-release-slack-bot/**/micromatch": "^4.0.8"
},

We are using Yarn. 🧶
Using NPM, overrides is probably the way to go.