Bump marked from 0.3.6 to 0.4.0 in /packages/pond

[dependabot[bot]]

Bumps marked from 0.3.6 to 0.4.0.

Release notes

Sourced from marked's releases.

0.4.0

Security Fixes

• Fix unsafe heading regex (#1224)
• Fix unsafe link regex (#1223, #1227)

New Features

• Add option to disable heading ids (#1190)
• Add support for GFM Task Lists to comply with the GFM spec (#1250)

Breaking Changes

• Fix escaping pipes in tables (#1239)
• Fix html output for tables to match GFM spec (#1245)
• Fix many bugs to reach parity with CommonMark spec (#1135)
• Fix new Renderer() so it uses default options (#1203)
• Fix text and paragraph return types (#1248) (#1249)
• Fix <em> less than 3 chars (#1181)
• Fix <pre> code blocks so there is no more trailing \n (#1266)
• Fix default langPrefix to follow CommonMark standard language- (#1265)

CLI Changes

• Add string argument to CLI (#1182)
• Change CLI stdio to remove warning (#994)

Other changes

• Lint all the things (#1185)
• Improved testing and DevOps (#1160, #1210, #1220, #1228, #1219, #1256)
• Update documentation and demos (#1196, #1197, #1204, #1207, #1221, #1233, #1217, #1240, #1244, #1253)

0.3.18 minified required new release

0.3.18 did not have changes to min.

Minor fixes and updated docs

• Supported Markdown flavors: CommonMark 0.28 and GitHub Flavored Markdown 0.28
• Updates to our CI pipeline; we're all green! #1098 with the caveat that there is a test that needs to get sorted (help us out #1092)
• Start ordered lists using the initial numbers from markdown lists (#1144)
• Added GitHub Pages site for documentation https://marked.js.org/ (#1138)

Processes and tools

• The elephant in the room: A security vulnerability was discovered and fixed. Please note, if something breaks due to these changes, it was not our intent, and please let us know by submitting a PR or issue to course correct (the nature of the zero-major release and having security as a number one priority) #1083
• The other elephant in the room: We missed publishing a 0.3.16 release to GitHub; so, trying to make up for that a bit.
• Updates to the project documentation and operations, you should check it out, just start with the README and you should be good.
• New release PR template available #1076
• Updates to default PR and Issue templates #1076
• Lint checks + tests + continuous integration using Travis #1020
• Updated testing output #1085 & #1087

Fix capturing parens

... (truncated)

Commits

• 78db8fb Merge pull request #1273 from 8fold/release-0.4.0
• 30a80e2 0.4.0
• 3957460 Merge pull request #1251 from markedjs/issue-templates
• dd10e47 🗜️ minify [skip ci]
• 0bc2fc5 Merge pull request #1265 from remyrylan/master
• 0218945 Merge pull request #1266 from remyrylan/remove-extra-linebreak
• 6ab2593 Remove extra inner linebreak from code blocks
• 7b1d0be Update fenced code blocks to CommonMark standard
• 4e910c3 Add a "why" to feature request
• 0a247fe Create Proposal.md
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by amidknight, a new releaser for marked since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/esnet/pond/network/alerts).