hexojs / hexo-deployer-rsync

Rsync deployer plugin for Hexo.
MIT License
47 stars 30 forks source link

Dependabot alert for transitive dependencies: Minor release #97

Closed metters closed 1 year ago

metters commented 1 year ago

Hello,

I am receiving dependabot alerts due to the usage of highlight.js in hexo-utils, which again is used by hexo-deployer-rsync in the latest release version:

hexo@6.3.0 requires highlight.js@^11.0.1 via a transitive dependency on hexo-util@2.7.0
hexo-deployer-rsync@1.0.0 requires highlight.js@^9.13.1 via a transitive dependency on hexo-util@1.9.1
hexo-renderer-marked@6.0.0 requires highlight.js@^11.0.1 via a transitive dependency on hexo-util@2.7.0

Would it be possible for you to trigger a release of a minor version? I have seen that the dependency does not exist in the current state of the project, it just hasn't been released recently.

Kind regards.