search

hexojs / hexo-deployer-rsync

Rsync deployer plugin for Hexo.
MIT License
47 stars 30 forks source link

Dependabot alert for transitive dependencies: Minor release #98

Closed metters closed 1 year ago

metters commented 1 year ago

Hello,

I am receiving dependabot alerts due to the usage of highlight.js in hexo-utils, which again is used by hexo-deployer-rsync in the latest release 1.0.0:

hexo@6.3.0 requires highlight.js@^11.0.1 via a transitive dependency on hexo-util@2.7.0
hexo-deployer-rsync@1.0.0 requires highlight.js@^9.13.1 via a transitive dependency on hexo-util@1.9.1
hexo-renderer-marked@6.0.0 requires highlight.js@^11.0.1 via a transitive dependency on hexo-util@2.7.0

Would it be possible for you to trigger a release of a minor version? I have seen that the dependency does not exist in the current state of the project, it just hasn't been released recently.

Kind regards.

yoshinorin commented 1 year ago

@metters We published a new version v2.0.0. It's a major bump but noting breaking changes.

https://github.com/hexojs/hexo-deployer-rsync/releases/tag/v2.0.0 https://www.npmjs.com/package/hexo-deployer-rsync/v/2.0.0

Thank you :)

metters commented 1 year ago

This is great. Thank you very much!