Release notes
*Sourced from [hexo's releases](https://github.com/hexojs/hexo/releases).*
> ## 4.0.0
> ## Breaking change
>
> - chore: drop Node 6 [#3598](https://github-redirect.dependabot.com/hexojs/hexo/issues/3598)
> - fix post_link, asset_link when title contains unescaped html charaters [#3704](https://github-redirect.dependabot.com/hexojs/hexo/issues/3704)
> * Affects `asset_link`, `post_link` [tag plugins](https://hexo.io/docs/tag-plugins)
> * If you want to retain unescaped characters, set `false` to the final argument `{% asset_link 'filename 'title' 'false' %}`
> - fix: encode permalink by default [#3708](https://github-redirect.dependabot.com/hexojs/hexo/issues/3708)
> * If you currently use `encodeURI(post.permalink)` (including `permalink` of page, tag & category variables), there are three options:
> 1. Use `encodeURI(decodeURI(post.permalink))` for backward-compatibility with hexo v3.9 (and older)
> 2. Use [`encodeURL()`](https://github.com/hexojs/hexo-util#encodeurlstr) function provided by hexo-util, it is backward-compatible
> 3. Drop `encodeURI()` function, this breaks backward-compatibility
> * If you want to use the variables in decoded form,
> - Use `decodeURI(post.permalink)`
> - [`decodeURL()`](https://github.com/hexojs/hexo-util#decodeurlstr) of hexo-util can decode [punycoded](https://en.wikipedia.org/wiki/Punycode) domain.
> * This change does not apply to `this.url` variable.
> - fix(paginator): add `escape` option for compatibility with hexo-util@1.3.0 [#3728](https://github-redirect.dependabot.com/hexojs/hexo/issues/3728)
> * Theme devs, if you customize `prev_text`/`next_text` with html (e.g. to insert icons), you need to set [`escape: false`](https://github.com/theme-next/hexo-theme-next/blob/7d6272274afcc88edcefe3504e452a502c05329f/layout/_partials/pagination.swig#L8) in the parameter.
>
> ## Feature
>
> - feat(filter): use existing excerpt if possible [#3612](https://github-redirect.dependabot.com/hexojs/hexo/issues/3612)
> * Support `excerpt:` in [front-matter](https://hexo.io/docs/front-matter)
> - switch minimatch to micromatch [#3538](https://github-redirect.dependabot.com/hexojs/hexo/issues/3538)
> * Refer to [micromatch docs](https://github.com/micromatch/micromatch#extended-globbing) for advanced globbing
> - feat: add option to disable meta generator tag [#3653](https://github-redirect.dependabot.com/hexojs/hexo/issues/3653)
> * Add `meta_generator: false` to config to disable
> - feat(generator): allow limit parallel generation [#3665](https://github-redirect.dependabot.com/hexojs/hexo/issues/3665)
> * If you experience "Out of memory" issue, try lowering the value in `hexo g --concurrency `
> - Option to use date instead of file mtime for updated date [#3235](https://github-redirect.dependabot.com/hexojs/hexo/issues/3235)
> * If you prefer not to use file modification time in the `post.updated` variable, set `use_date_for_updated: true` in config
> - feat(list_tags): add Schema "keywords" and Microdata "tag" [#3678](https://github-redirect.dependabot.com/hexojs/hexo/issues/3678)
> - feat(permalink_variable): add pretty_urls option to remove index.html from url [#3691](https://github-redirect.dependabot.com/hexojs/hexo/issues/3691)
> * Use the following config to remove the trailing `index.html` from `permalink` [variables](https://hexo.io/docs/variables)
>
> ``` yml
> pretty_urls:
> trailing_index: false
> ```
>
> * Does not apply to `this.url` variable (see [#3661](https://github-redirect.dependabot.com/hexojs/hexo/issues/3661)).
> * Should be compatible with existing canonical-related plugins, recommend plugin and theme devs to test
> - feat: add `full_url_for` helper [#3701](https://github-redirect.dependabot.com/hexojs/hexo/issues/3701)
> * use this helper `full_url_for(page.path)` instead of `config.url + page.path`
> - fix: external_link should use after_render [#3675](https://github-redirect.dependabot.com/hexojs/hexo/issues/3675)
> * added `field` and `exclude` options, see [#3675](https://github-redirect.dependabot.com/hexojs/hexo/issues/3675) for guide.
>
> ## Performance
>
> - perf(meta_generator): drop cheerio [#3671](https://github-redirect.dependabot.com/hexojs/hexo/issues/3671)
> ... (truncated)
Commits
- [`9662366`](https://github.com/hexojs/hexo/commit/9662366f9122192359f15861fe05574365e8465e) Merge pull request [#3695](https://github-redirect.dependabot.com/hexojs/hexo/issues/3695) from curbengh/4.0.0
- [`ac03b72`](https://github.com/hexojs/hexo/commit/ac03b72da478a11ebefefa8a9fbe8f21c297e519) Merge pull request [#3768](https://github-redirect.dependabot.com/hexojs/hexo/issues/3768) from seaoak/bugfix/backtick_code_block_on_blockquote...
- [`84c4c66`](https://github.com/hexojs/hexo/commit/84c4c66da6baf8479f0d65138bc8de6f72516ee9) Disable to insert extra new line character into the end of backtick code bloc...
- [`6b329e9`](https://github.com/hexojs/hexo/commit/6b329e964cb42282c29f13eadf261bbcc5426b99) Merge pull request [#3765](https://github-redirect.dependabot.com/hexojs/hexo/issues/3765) from seaoak/feature/correct_filter_backtick_code_blo...
- [`deaad6b`](https://github.com/hexojs/hexo/commit/deaad6b423a9045b4cccfda30ebf0653b8ae87df) docs(backtick_code): mention PR [#3765](https://github-redirect.dependabot.com/hexojs/hexo/issues/3765)
- [`894408a`](https://github.com/hexojs/hexo/commit/894408af16d36803d3a035a282595a8f353b4757) Correct processing of backtick code block on blockquote (fix Issue#2969)
- [`6bf6e98`](https://github.com/hexojs/hexo/commit/6bf6e98d4f1a3092f3bdee71a49b05f9c62b5ee6) release: 4.0.0
- [`79bdc95`](https://github.com/hexojs/hexo/commit/79bdc9548752acfba89b26dec2c532c9346a1380) fix([#2318](https://github-redirect.dependabot.com/hexojs/hexo/issues/2318)): allow backtick code block in "blockquote" tag plugin ([#2321](https://github-redirect.dependabot.com/hexojs/hexo/issues/2321))
- [`bd70086`](https://github.com/hexojs/hexo/commit/bd700865ed1d2ed1680bdb9d59a2547609196bd6) Merge pull request [#3760](https://github-redirect.dependabot.com/hexojs/hexo/issues/3760) from seaoak/bugfix/test-of-box-fails-on-race-condition
- [`e61116a`](https://github.com/hexojs/hexo/commit/e61116a6bcc8512b90848b04a86f09aac626b926) Merge pull request [#3761](https://github-redirect.dependabot.com/hexojs/hexo/issues/3761) from curbengh/warehouse-3-0-1
- Additional commits viewable in [compare view](https://github.com/hexojs/hexo/compare/3.9.0...4.0.0)
Maintainer changes
This version was pushed to npm by [curben](https://www.npmjs.com/~curben), a new releaser for hexo since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
- `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Automerge options (never/patch/minor, and dev/runtime dependencies)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
Coverage remained the same at 100.0% when pulling 2bc8446899ab34563b2843b49b32f0ab6602f6a2 on dependabot/npm_and_yarn/hexo-4.0.0 into db2bc33daa421ea9e0fb5248d4eee053d10e5c4d on master.
Coverage remained the same at 100.0% when pulling 2bc8446899ab34563b2843b49b32f0ab6602f6a2 on dependabot/npm_and_yarn/hexo-4.0.0 into db2bc33daa421ea9e0fb5248d4eee053d10e5c4d on master.
Bumps hexo from 3.9.0 to 4.0.0.
Release notes
*Sourced from [hexo's releases](https://github.com/hexojs/hexo/releases).* > ## 4.0.0 > ## Breaking change > > - chore: drop Node 6 [#3598](https://github-redirect.dependabot.com/hexojs/hexo/issues/3598) > - fix post_link, asset_link when title contains unescaped html charaters [#3704](https://github-redirect.dependabot.com/hexojs/hexo/issues/3704) > * Affects `asset_link`, `post_link` [tag plugins](https://hexo.io/docs/tag-plugins) > * If you want to retain unescaped characters, set `false` to the final argument `{% asset_link 'filename 'title' 'false' %}` > - fix: encode permalink by default [#3708](https://github-redirect.dependabot.com/hexojs/hexo/issues/3708) > * If you currently use `encodeURI(post.permalink)` (including `permalink` of page, tag & category variables), there are three options: > 1. Use `encodeURI(decodeURI(post.permalink))` for backward-compatibility with hexo v3.9 (and older) > 2. Use [`encodeURL()`](https://github.com/hexojs/hexo-util#encodeurlstr) function provided by hexo-util, it is backward-compatible > 3. Drop `encodeURI()` function, this breaks backward-compatibility > * If you want to use the variables in decoded form, > - Use `decodeURI(post.permalink)` > - [`decodeURL()`](https://github.com/hexojs/hexo-util#decodeurlstr) of hexo-util can decode [punycoded](https://en.wikipedia.org/wiki/Punycode) domain. > * This change does not apply to `this.url` variable. > - fix(paginator): add `escape` option for compatibility with hexo-util@1.3.0 [#3728](https://github-redirect.dependabot.com/hexojs/hexo/issues/3728) > * Theme devs, if you customize `prev_text`/`next_text` with html (e.g. to insert icons), you need to set [`escape: false`](https://github.com/theme-next/hexo-theme-next/blob/7d6272274afcc88edcefe3504e452a502c05329f/layout/_partials/pagination.swig#L8) in the parameter. > > ## Feature > > - feat(filter): use existing excerpt if possible [#3612](https://github-redirect.dependabot.com/hexojs/hexo/issues/3612) > * Support `excerpt:` in [front-matter](https://hexo.io/docs/front-matter) > - switch minimatch to micromatch [#3538](https://github-redirect.dependabot.com/hexojs/hexo/issues/3538) > * Refer to [micromatch docs](https://github.com/micromatch/micromatch#extended-globbing) for advanced globbing > - feat: add option to disable meta generator tag [#3653](https://github-redirect.dependabot.com/hexojs/hexo/issues/3653) > * Add `meta_generator: false` to config to disable > - feat(generator): allow limit parallel generation [#3665](https://github-redirect.dependabot.com/hexojs/hexo/issues/3665) > * If you experience "Out of memory" issue, try lowering the value in `hexo g --concurrencyCommits
- [`9662366`](https://github.com/hexojs/hexo/commit/9662366f9122192359f15861fe05574365e8465e) Merge pull request [#3695](https://github-redirect.dependabot.com/hexojs/hexo/issues/3695) from curbengh/4.0.0 - [`ac03b72`](https://github.com/hexojs/hexo/commit/ac03b72da478a11ebefefa8a9fbe8f21c297e519) Merge pull request [#3768](https://github-redirect.dependabot.com/hexojs/hexo/issues/3768) from seaoak/bugfix/backtick_code_block_on_blockquote... - [`84c4c66`](https://github.com/hexojs/hexo/commit/84c4c66da6baf8479f0d65138bc8de6f72516ee9) Disable to insert extra new line character into the end of backtick code bloc... - [`6b329e9`](https://github.com/hexojs/hexo/commit/6b329e964cb42282c29f13eadf261bbcc5426b99) Merge pull request [#3765](https://github-redirect.dependabot.com/hexojs/hexo/issues/3765) from seaoak/feature/correct_filter_backtick_code_blo... - [`deaad6b`](https://github.com/hexojs/hexo/commit/deaad6b423a9045b4cccfda30ebf0653b8ae87df) docs(backtick_code): mention PR [#3765](https://github-redirect.dependabot.com/hexojs/hexo/issues/3765) - [`894408a`](https://github.com/hexojs/hexo/commit/894408af16d36803d3a035a282595a8f353b4757) Correct processing of backtick code block on blockquote (fix Issue#2969) - [`6bf6e98`](https://github.com/hexojs/hexo/commit/6bf6e98d4f1a3092f3bdee71a49b05f9c62b5ee6) release: 4.0.0 - [`79bdc95`](https://github.com/hexojs/hexo/commit/79bdc9548752acfba89b26dec2c532c9346a1380) fix([#2318](https://github-redirect.dependabot.com/hexojs/hexo/issues/2318)): allow backtick code block in "blockquote" tag plugin ([#2321](https://github-redirect.dependabot.com/hexojs/hexo/issues/2321)) - [`bd70086`](https://github.com/hexojs/hexo/commit/bd700865ed1d2ed1680bdb9d59a2547609196bd6) Merge pull request [#3760](https://github-redirect.dependabot.com/hexojs/hexo/issues/3760) from seaoak/bugfix/test-of-box-fails-on-race-condition - [`e61116a`](https://github.com/hexojs/hexo/commit/e61116a6bcc8512b90848b04a86f09aac626b926) Merge pull request [#3761](https://github-redirect.dependabot.com/hexojs/hexo/issues/3761) from curbengh/warehouse-3-0-1 - Additional commits viewable in [compare view](https://github.com/hexojs/hexo/compare/3.9.0...4.0.0)Maintainer changes
This version was pushed to npm by [curben](https://www.npmjs.com/~curben), a new releaser for hexo since your current version.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)