Upgrade semver to 7.5.3 and add the fix to changelog

CHANGELOG.md

@@ -9,6 +9,7 @@
 
 ### Fixes
 
+- `[semver]` Fix vulnerability of regular expression denial of service by upgrading semver to 7.5.3 ([#14262](https://github.com/jestjs/jest/pull/14262))
 - `[jest-circus]` Prevent false test failures caused by promise rejections handled asynchronously ([#14110](https://github.com/jestjs/jest/pull/14110))
 - `[jest-config]` Handle frozen config object ([#14054](https://github.com/facebook/jest/pull/14054))
 - `[jest-config]` Allow `coverageDirectory` and `collectCoverageFrom` in project config ([#14180](https://github.com/jestjs/jest/pull/14180))

package.json

@@ -73,7 +73,7 @@
     "read-pkg": "^5.2.0",
     "resolve": "^1.20.0",
     "rimraf": "^5.0.0",
-    "semver": "^7.5.2",
+    "semver": "^7.5.3",
     "slash": "^3.0.0",
     "string-length": "^4.0.1",
     "strip-ansi": "^6.0.0",

packages/jest-config/package.json

@@ -57,7 +57,7 @@
     "@types/graceful-fs": "^4.1.3",
     "@types/micromatch": "^4.0.1",
     "@types/parse-json": "^4.0.0",
-    "semver": "^7.5.2",
+    "semver": "^7.5.3",
     "ts-node": "^10.5.0",
     "typescript": "^5.0.4"
   },

packages/jest-snapshot/package.json

@@ -37,7 +37,7 @@
     "jest-util": "workspace:^",
     "natural-compare": "^1.4.0",
     "pretty-format": "workspace:^",
-    "semver": "^7.5.2"
+    "semver": "^7.5.3"
   },
   "devDependencies": {
     "@babel/preset-flow": "^7.7.2",

packages/test-utils/package.json

@@ -18,7 +18,7 @@
     "ansi-regex": "^5.0.1",
     "ansi-styles": "^5.0.0",
     "pretty-format": "workspace:^",
-    "semver": "^7.5.2"
+    "semver": "^7.5.3"
   },
   "devDependencies": {
     "@types/semver": "^7.1.0"

yarn.lock

@@ -2905,7 +2905,7 @@ __metadata:
     read-pkg: ^5.2.0
     resolve: ^1.20.0
     rimraf: ^5.0.0
-    semver: ^7.5.2
+    semver: ^7.5.3
     slash: ^3.0.0
     string-length: ^4.0.1
     strip-ansi: ^6.0.0
@@ -3035,7 +3035,7 @@ __metadata:
     ansi-regex: ^5.0.1
     ansi-styles: ^5.0.0
     pretty-format: "workspace:^"
-    semver: ^7.5.2
+    semver: ^7.5.3
   languageName: unknown
   linkType: soft
 
@@ -12541,7 +12541,7 @@ __metadata:
     micromatch: ^4.0.4
     parse-json: ^5.2.0
     pretty-format: "workspace:^"
-    semver: ^7.5.2
+    semver: ^7.5.3
     slash: ^3.0.0
     strip-json-comments: ^3.1.1
     ts-node: ^10.5.0
@@ -12993,7 +12993,7 @@ __metadata:
     natural-compare: ^1.4.0
     prettier: ^2.1.1
     pretty-format: "workspace:^"
-    semver: ^7.5.2
+    semver: ^7.5.3
     tsd-lite: ^0.7.0
   languageName: unknown
   linkType: soft
@@ -18565,7 +18565,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"semver@npm:^7.0.0, semver@npm:^7.1.1, semver@npm:^7.3.2, semver@npm:^7.3.4, semver@npm:^7.3.5, semver@npm:^7.3.7, semver@npm:^7.3.8, semver@npm:^7.5.1, semver@npm:^7.5.2":
+"semver@npm:^7.0.0, semver@npm:^7.1.1, semver@npm:^7.3.2, semver@npm:^7.3.4, semver@npm:^7.3.5, semver@npm:^7.3.7, semver@npm:^7.3.8, semver@npm:^7.5.1, semver@npm:^7.5.3":
   version: 7.5.3
   resolution: "semver@npm:7.5.3"
   dependencies: