Bump squirrelly from 7.9.1 to 9.0.0

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps squirrelly from 7.9.1 to 9.0.0.

Release notes

Version 9.0.0

TL;DR

The main news in this commit is that the settings field in the data object is no longer merged with your configuration. This resolves several security issues.

This may cause changes in the way you use Express.js with Squirrelly, since you'll have to configure caching and the views directory for both Express and Squirrelly separately.

Example:
app.engine("sqrl", Sqrl.renderFile)
eta.configure({ views: "./views", cache: true })
app.set("views", "./views")
app.set("view cache", true)
app.set("view engine", "sqrl")
Commits

chore: rebuild & format e1a554b

Merge pull request #254 from legobeat/fix-data-config af6018f

Don't merge data.settings into the config option c12418a

don't pass view options dca7a1e

Merge pull request #249 from squirrellyjs/dependabot/npm_and_yarn/qs-6.5.3 d460cc1

Merge pull request #234 from squirrellyjs/dependabot/npm_and_yarn/tmpl-1.0.5 ba66a3f

Merge pull request #235 from squirrellyjs/dependabot/npm_and_yarn/i-0.3.7 5d5b2fe

Bump qs from 6.5.2 to 6.5.3 f51c304

Bump i from 0.3.6 to 0.3.7 6400940

Merge pull request #248 from squirrellyjs/dependabot/npm_and_yarn/decode-uri-component-0.2.2 cbdd42f

Merge pull request #247 from squirrellyjs/dependabot/npm_and_yarn/loader-utils-1.4.2 31833df

Merge pull request #245 from squirrellyjs/dependabot/npm_and_yarn/terser-4.8.1 9b8afbe

Merge pull request #244 from squirrellyjs/dependabot/npm_and_yarn/jsdom-16.7.0 51dd9be

Merge pull request #243 from squirrellyjs/dependabot/npm_and_yarn/ajv-6.12.6 151bbd6

Merge pull request #242 from squirrellyjs/dependabot/npm_and_yarn/trim-off-newlines-1.0.3 8321eda

Merge pull request #239 from squirrellyjs/dependabot/npm_and_yarn/shelljs-0.8.5 75a8687

Merge pull request #232 from squirrellyjs/dependabot/npm_and_yarn/path-parse-1.0.7 c7fd5fe

Merge pull request #228 from squirrellyjs/dependabot/npm_and_yarn/normalize-url-4.5.1 5b5259f

Merge pull request #226 from squirrellyjs/dependabot/npm_and_yarn/browserslist-4.16.6 e148698

Merge pull request #225 from squirrellyjs/dependabot/npm_and_yarn/hosted-git-info-2.8.9 a9bdfe7

Merge pull request #224 from squirrellyjs/dependabot/npm_and_yarn/handlebars-4.7.7 021c6a5

Merge pull request #221 from squirrellyjs/dependabot/npm_and_yarn/ssri-6.0.2 6235b55

Merge pull request #219 from squirrellyjs/dependabot/npm_and_yarn/elliptic-6.5.4 d60d325

Merge pull request #216 from squirrellyjs/dependabot/npm_and_yarn/node-notifier-8.0.1 23008f0

Merge pull request #215 from squirrellyjs/dependabot/npm_and_yarn/ini-1.3.7 8a6f4fa

Merge pull request #213 from squirrellyjs/dependabot/npm_and_yarn/highlight.js-10.4.1 96eb062

Bump decode-uri-component from 0.2.0 to 0.2.2 76c15ca

Bump loader-utils from 1.4.0 to 1.4.2 9967601

Bump terser from 4.6.7 to 4.8.1 ec3ebd6

Bump jsdom from 16.4.0 to 16.7.0 20664b9

Bump ajv from 6.12.0 to 6.12.6 b037db1

... (truncated)

Commits

10cd382 v9.0.0
e1a554b chore: rebuild & format
af6018f Merge pull request #254 from legobeat/fix-data-config
c12418a Don't merge data.settings into the config option
dca7a1e don't pass view options
d460cc1 Merge pull request #249 from squirrellyjs/dependabot/npm_and_yarn/qs-6.5.3
ba66a3f Merge pull request #234 from squirrellyjs/dependabot/npm_and_yarn/tmpl-1.0.5
5d5b2fe Merge pull request #235 from squirrellyjs/dependabot/npm_and_yarn/i-0.3.7
f51c304 Bump qs from 6.5.2 to 6.5.3
6400940 Bump i from 0.3.6 to 0.3.7
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/rsmeral/scd30-node/network/alerts).

rsmeral / scd30-node

Bump squirrelly from 7.9.1 to 9.0.0 #17

Version 9.0.0

TL;DR

Commits