luox-app / luox

Code base for the luox platform
https://luox.app/
GNU General Public License v3.0
15 stars 11 forks source link

Bump marked and markdown-loader #101

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps marked to 4.2.2 and updates ancestor dependency markdown-loader. These dependencies need to be updated together.

Updates marked from 0.7.0 to 4.2.2

Release notes

Sourced from marked's releases.

v4.2.2

4.2.2 (2022-11-05)

Bug Fixes

v4.2.1

4.2.1 (2022-11-02)

Bug Fixes

v4.2.0

4.2.0 (2022-10-31)

Features

v4.1.1

4.1.1 (2022-10-01)

Bug Fixes

v4.1.0

4.1.0 (2022-08-30)

Features

v4.0.19

4.0.19 (2022-08-21)

Bug Fixes

  • make second parameter optional on lexer.inline (#2552) (f1a9608)

v4.0.18

4.0.18 (2022-07-11)

... (truncated)

Commits


Updates markdown-loader from 6.0.0 to 8.0.0

Release notes

Sourced from markdown-loader's releases.

v8.0.0

8.0.0 (2022-01-27)

  • Introduce semantic-release (65e2368)

BREAKING CHANGES

  • Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.
Changelog

Sourced from markdown-loader's changelog.

8.0.0 (2022-01-27)

  • Introduce semantic-release (65e2368)

BREAKING CHANGES

  • Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.

Changelog

7.0.0

  • Breaking: Update marked@4.0.12 to fix security issues (#82)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/luox-app/luox/network/alerts).