npm-plugin: upgraded to the beta, which upgrades npm to v8 (f634b8c)
upgrade marked to resolve ReDos vulnerability (#2330) (d9e5bc0)
BREAKING CHANGES
npm-plugin:@semantic-release/npm has also dropped support for node v15
node v15 has been removed from our defined supported versions of node. this was done to upgrade to compatible versions of marked and marked-terminal that resolved the ReDoS vulnerability. removal of support of this node version should be low since it was not an LTS version and has been EOL for several months already.
Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
v2.2.1
Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
Bumps the npm_and_yarn group with 8 updates in the / directory:
17.4.4
19.0.3
7.14.7
7.24.7
3.0.2
3.0.3
9.18.5
10.7.3
2.1.4
2.1.11
2.2.0
2.2.3
1.2.5
1.2.8
3.3.0
3.3.1
Updates
semantic-release
from 17.4.4 to 19.0.3Release notes
Sourced from semantic-release's releases.
... (truncated)
Commits
58a226f
fix(log-repo): use the original form of the repo url to remove the need to ma...17d60d3
build(deps): bump npm from 8.3.1 to 8.12.0 (#2447)ab45ab1
chore(lint): disabled rules that dont apply to this project (#2408)ea389c3
chore(deps): update dependency yargs-parser to 13.1.2 [security] (#2402)fa994db
build(deps): bump node-fetch from 2.6.1 to 2.6.7 (#2399)b79116b
build(deps): bump trim-off-newlines from 1.0.1 to 1.0.36fd7e56
build(deps): bump minimist from 1.2.5 to 1.2.62b94bb4
docs: update broken link to CI config recipes (#2378)b4bc191
docs: Correct circleci workflow (#2365)2c30e26
Merge pull request #2333 from semantic-release/nextUpdates
@babel/traverse
from 7.14.7 to 7.24.7Release notes
Sourced from
@babel/traverse
's releases.... (truncated)
Changelog
Sourced from
@babel/traverse
's changelog.... (truncated)
Commits
bf1e9a3
v7.24.74463aa5
fix: incorrectconstantViolations
with destructuring (#16522)07bd000
ImprovegetBindingIdentifiers
(#16544)17a5502
[Babel 8] Removeextra.shorthand
(#16521)7934963
Usetype: module
in allpackage.json
s (#16535)9630250
v7.24.61f010df
Explicitly defineNodePath.prototype.*
(#16488)6e3539b
[babel 8] Publish.d.ts
files for every package (#16416)e37e64d
Use eslint v9 (#16479)3ff20b9
Statically generate boilerplate for bitfield accessors (#16482)Updates
ansi-regex
from 2.1.1 to 4.1.0Release notes
Sourced from ansi-regex's releases.
Commits
a079ab2
4.1.096200bb
Support more escape types like links (#29)e076cd1
Add Tidelift mention in the readmea1d9246
4.0.0ced7421
Require Node.js 6eac826a
Add option to only match the first occurrence (#24)385eca9
Add scroll escapes (#20)14839a4
Add failing test for #21 (#22)0a8cc19
3.0.0d9d806e
Minor tweaksUpdates
braces
from 3.0.2 to 3.0.3Commits
74b2db2
3.0.388f1429
update eslint. lint, fix unit tests.415d660
Snyk js braces 6838727 (#40)190510f
fix tests, skip 1 test in test/braces.expand716eb9f
readme bumpa5851e5
Merge pull request #37 from coderaiser/fix/vulnerability2092bd1
feature: braces: add maxSymbols (https://github.com/micromatch/braces/issues/...9f5b4cf
fix: vulnerability (https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727)98414f9
remove funding file665ab5d
update keepEscaping doc (#27)Updates
highlight.js
from 9.18.5 to 10.7.3Release notes
Sourced from highlight.js's releases.
... (truncated)
Changelog
Sourced from highlight.js's changelog.
... (truncated)
Commits
0c4cc8a
(chore) release 10.7.3d38b332
fix(parser) Resolve issue with missing TS property (#3225)00233d6
(chore) release 10.7.24630cde
(chore) throttle deprecation messages (#3092)421b23b
(chore) fix TS issue, bump 10.7.17ec45af
(chore) bump version to 10.7.0bfb5a59
enh(parser) new highlight() API (#3053)6f24850
(cleanup) better boolean naming695ff64
(chore) add shebang for build script23ae72c
(chore) rename master branch to mainMaintainer changes
This version was pushed to npm by highlightjs_bot, a new releaser for highlight.js since your current version.
Updates
cli-highlight
from 2.1.4 to 2.1.11Release notes
Sourced from cli-highlight's releases.
... (truncated)
Commits
01b7e45
fix: prevent deprecation warnings with highlight.js v10.7 (#127)151dfed
fix(deps): update dependency yargs to v16 (#113)988d209
fix: respect auto-detected color supportbcd4edf
chore(deps): update commitlint monorepo to v11 (major) (#107)dc8915b
ci: merge Jest upgradesa0fd370
fix(deps): update dependency chalk to v4 (#104)0fe736b
test: fix testsc613afe
fix(deps): update dependency parse5-htmlparser2-tree-adapter to v6 (#106)d9613c9
chore: upgrade eslint and typescript0966fed
chore(deps): update dependency typedoc to ^0.19.0 (#102)Updates
json5
from 2.2.0 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a7524
2.2.394fd06d
docs: update CHANGELOG for v2.2.33b8cebf
docs(security): use GitHub security advisoriesf0fd9e1
docs: publish a security policy6a91a05
docs(template): bug -> bug report14f8cb1
2.2.210cc7ca
docs: update CHANGELOG for v2.2.27774c10
fix: add proto to objects and arraysedde30a
Readme: slight tweak to intro97286f8
Improve example in readmeUpdates
minimist
from 1.2.5 to 1.2.8Changelog
Sourced from minimist's changelog.
... (truncated)
Commits
6901ee2
v1.2.8a026794
Merge tag 'v0.2.3'c0b2661
v0.2.363b8fee
[Fix] Fix long option followed by single dash (#17)72239e6
[Tests] Remove duplicate test (#12)34b0f1c
[eslint] fix indentation3226afa
[Dev Deps] add missingnpmignore
dev dep098873c
[Dev Deps] update@ljharb/eslint-config
,aud
9ec4d27
[Fix] Fix long option followed by single dashba92fe6
[actions] Avoid 0.6 tests due to build failuresMaintainer changes
This version was pushed to npm by ljharb, a new releaser for minimist since your current version.
Updates
node-fetch
from 2.6.1 to 2.7.0Release notes
Sourced from node-fetch's releases.
... (truncated)
Commits
9b9d458
feat:AbortError
(#1744)65ae25a
fix: Remove the default connection close header (#1765)8bc3a7c
fix: socket variable testing for undefined (#1726)afb36f6
Revert "fix: handle bom in text and json (#1739)" (#1741)29909d7
fix: handle bom in text and json (#1739)70f592d
fix: "global is not defined" (#1704)0f1ebb0
Prevent error when response is null (#1699)6e9464d
ci(release): install dependenciesdd2a0ba
ci(release): install dependencies49bef02
ci(release): use latest Node LTSMaintainer changes
This version was pushed to npm by node-fetch-bot, a new releaser for node-fetch since your current version.
Updates
npm
from 7.11.1 to 8.19.4Release notes
Sourced from npm's releases.