jstransformers / jstransformer-nunjucks

Nunjucks support for JSTransformers.
http://npm.im/jstransformer-nunjucks
MIT License
6 stars 6 forks source link

[Snyk] Upgrade nunjucks from 3.2.3 to 3.2.4 #44

Open TimothyGu opened 1 year ago

TimothyGu commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade nunjucks from 3.2.3 to 3.2.4.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
- The recommended version is **1 version** ahead of your current version. - The recommended version was released **a day ago**, on 2023-04-13.
Release notes
Package name: nunjucks
  • 3.2.4 - 2023-04-13

    Release v3.2.4

      </li>
      <li>
        <b>3.2.3</b> - <a href="https://snyk.io/redirect/github/mozilla/nunjucks/releases/tag/v3.2.3">2021-02-15</a></br><ul>
  • Add support for nested attributes on sort filter; respect throwOnUndefined if sort attribute is undefined.
  • Add base arg to int filter.
  • Move chokidar to peerDependencies and mark it optional in peerDependenciesMeta.
  • Fix prototype pollution issue for template variables. Merge of #1330; fixes #1331. Thanks ChenKS12138!
from nunjucks GitHub release notes

Commit messages
Package name: nunjucks
  • 86a77f4 Release v3.2.4
  • ec16d21 fix: html encode backslashes if used with escape filter or autoescape (#1437)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs