yaspeller / markdown-it dependency security issue

[mazzystr]

/kind bug

What happened: GitHub is triggering a dependency alert with markdown-it and yasspeller.

Please update.

[kubevirt-bot]

Issues go stale after 90d of inactivity. Mark the issue as fresh with /remove-lifecycle stale. Stale issues rot after an additional 30d of inactivity and eventually close.

If this issue is safe to close now please do so with /close.

/lifecycle stale

[kubevirt-bot]

Stale issues rot after 30d of inactivity. Mark the issue as fresh with /remove-lifecycle rotten. Rotten issues close after an additional 30d of inactivity.

If this issue is safe to close now please do so with /close.

/lifecycle rotten

[cwilkers]

/remove-lifecycle rotten

[cwilkers]

/remove-lifecycle stale

[cwilkers]

Are these related to the dependabot PRs I just merged, or something else? (I don't see any other alerts)

[cwilkers]

Hi @mazzystr I have approved all the dependablot PRs, here:

• https://github.com/kubevirt/kubevirt.github.io/pull/848
• https://github.com/kubevirt/kubevirt.github.io/pull/849
• https://github.com/kubevirt/kubevirt.github.io/pull/851
• https://github.com/kubevirt/kubevirt.github.io/pull/852