fix: better handling of whitespace (backport to v5)

[joaomoreno]

This backports the security fix #564 to v5.

[wraithgar]

#580 should be fixed before we go backporting anything so we don't bring new bugs along.

[wraithgar]

#587 Also needs to be fixed

[lukekarrys]

the latest template-oss changes have been applied to release/v5. @joaomoreno can you rebase your branch so it only includes the semver.js and test/ changes?

[lukekarrys]

The full set of changes that should be backported are:

• 717534e
• abdd93d
• cc6fde2
• 99d8287

[lukekarrys]

@joaomoreno i was able to push to your branch with the relevant commits. waiting on CI to see if tests pass in older versions of node

[joaomoreno]

Sounds good, thanks @lukekarrys!

[G-Rath]

I've opened github/advisory-database#2483 updating the advisory for v5

[G-Rath]

and I've opened github/advisory-database#2484 updating the advisory again for v6 and v5.

[lukekarrys]

Thanks @G-Rath!

[joaomoreno]

Thanks all!