search

formalsec / graphjs

MDG-based static vulnerability scanner specialized in analyzing npm packages and detecting taint-style and prototype pollution vulnerabilities.
https://formalsec.github.io/
7 stars 1 forks source link

Bump marked and typedoc in /parser #2

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps marked to 4.3.0 and updates ancestor dependency typedoc. These dependencies need to be updated together.

Updates marked from 3.0.8 to 4.3.0

Release notes

Sourced from marked's releases.

v4.3.0

4.3.0 (2023-03-22)

Bug Fixes

Features

v4.2.12

4.2.12 (2023-01-14)

Sorry for all of the quick releases. We were testing out different ways to build the files for releases. v4.2.5 - v4.2.12 have no changes to how marked works. The only addition is the version number in the comment in the build files.

Bug Fixes

  • revert to build script in ci (d2ab474)

v4.2.11

4.2.11 (2023-01-14)

Bug Fixes

v4.2.10

4.2.10 (2023-01-14)

Bug Fixes

v4.2.9

4.2.9 (2023-01-14)

Bug Fixes

... (truncated)

Commits
  • d65cf63 chore(release): 4.3.0 [skip ci]
  • 28f4342 🗜️ build v4.3.0 [skip ci]
  • 9b452bc feat: add preprocess and postprocess hooks (#2730)
  • 042dcc5 fix: always return promise if async (#2728)
  • 3acbb7f fix: fenced code doesn't need a trailing newline (#2756)
  • d1f1319 chore(deps-dev): Bump rollup from 3.19.1 to 3.20.0 (#2760)
  • 0ced8a5 chore(deps-dev): Bump jasmine from 4.5.0 to 4.6.0 (#2758)
  • a5bbe19 chore(deps-dev): Bump @​babel/core from 7.21.0 to 7.21.3 (#2761)
  • 00f6e2a chore(deps-dev): Bump semantic-release from 20.1.1 to 20.1.3 (#2759)
  • 8c7bca8 chore(deps-dev): Bump node-fetch from 3.3.0 to 3.3.1 (#2754)
  • Additional commits viewable in compare view


Updates typedoc from 0.22.10 to 0.22.18

Release notes

Sourced from typedoc's releases.

v0.22.18

Features

  • Relaxed restrictions on @enum style enums to also permit non-literal strings and numbers, #1956.

Bug Fixes

  • searchGroupBoosts was only computing the boost for the first reflection in a group, #1958.

Thanks!

v0.22.17

Features

  • Added support for documenting a module's global declarations as its exports if it contains no real exports.

Bug Fixes

  • Restore support for TS 4.0 through 4.5, #1945.

v0.22.16

Features

  • Added support for TypeScript 4.7, #1935.
  • Support enum-like objects with numeric literal values tagged with @enum, #1918.
  • Enum member reflections will now have their type set to either a LiteralType with a string or numeric value or an IntrinsicType with type number, #1942. Using defaultValue on EnumMember reflections is now deprecated, and will be broken in 0.23.

Bug Fixes

  • Fixed invalid type output in some uncommon edge cases, TypeDoc also now renders fewer superfluous parenthesis when creating types.
  • TypeDoc is now more consistent about ordering with enum-value-ascending or enum-value-descending sort strategies in mixed string/number enums.

Thanks!

v0.22.15

Features

  • Classes which are abstract and enums which are const will now be indicated in their rendered documentation, #1874.
  • Added a new option compilerOptions, which can be used to override compiler options read from tsconfig.json, #1891.

... (truncated)

Changelog

Sourced from typedoc's changelog.

v0.22.18 (2022-06-25)

Features

  • Relaxed restrictions on @enum style enums to also permit non-literal strings and numbers, #1956.

Bug Fixes

  • searchGroupBoosts was only computing the boost for the first reflection in a group, #1958.

Thanks!

v0.22.17 (2022-06-01)

Features

  • Added support for documenting a module's global declarations as its exports if it contains no real exports.

Bug Fixes

  • Restore support for TS 4.0 through 4.5, #1945.

v0.22.16 (2022-05-30)

Features

  • Added support for TypeScript 4.7, #1935.
  • Support enum-like objects with numeric literal values tagged with @enum, #1918.
  • Enum member reflections will now have their type set to either a LiteralType with a string or numeric value or an IntrinsicType with type number, #1942. Using defaultValue on EnumMember reflections is now deprecated, and will be broken in 0.23.

Bug Fixes

  • Fixed invalid type output in some uncommon edge cases, TypeDoc also now renders fewer superfluous parenthesis when creating types.
  • TypeDoc is now more consistent about ordering with enum-value-ascending or enum-value-descending sort strategies in mixed string/number enums.

Thanks!

v0.22.15 (2022-04-10)

Features

  • Classes which are abstract and enums which are const will now be indicated in their rendered documentation, #1874.
  • Added a new option compilerOptions, which can be used to override compiler options read from tsconfig.json, #1891.

... (truncated)

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/formalsec/graphjs/network/alerts).
dependabot[bot] commented 5 months ago

None of your dependencies match this group anymore, you may need to update your configuration file to remove it or change its rules.