search

highlightjs / highlight.js

JavaScript syntax highlighter with language auto-detection and zero dependencies.
https://highlightjs.org/
BSD 3-Clause "New" or "Revised" License
23.3k stars 3.52k forks source link

Unnecessary output while loading the highlight.js plugin. #4056

Open Daucloud opened 1 month ago

Daucloud commented 1 month ago

Describe the issue/behavior that seems buggy I used the command npm i highlight@latest --save to install the highlight.js, and it is shown that the version is 11.9.0 in the package.json. However, when I execute the command hexo g (as for hexo , you can learn about it here), it still output the message Version 9 of Highlight.js has reached EOL and is no longer supported. Please upgrade or ask whatever dependency you are using to upgrade. https://github.com/highlightjs/highlight.js/issues/2877. Is this message unnecessary?

Sample Code or Instructions to Reproduce

joshgoebel commented 1 month ago

Version 9 is EOL and contains serious security vulnerabilities - hence the warning. https://github.com/highlightjs/highlight.js/blob/main/SECURITY.md

I'd say hexo or one of it's dependencies is pulling in the old version. Perhaps try https://stackoverflow.com/questions/25997519/how-to-view-the-dependency-tree-of-a-given-npm-module