search

thibaudcolas / curlylint

Experimental HTML templates linting for Jinja, Nunjucks, Django templates, Twig, Liquid
https://www.curlylint.org/
MIT License
237 stars 25 forks source link

fix(deps): update dependency prismjs to v1.23.0 [security] #61

Closed renovate[bot] closed 3 years ago

renovate[bot] commented 3 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
prismjs 1.21.0 -> 1.23.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23341

The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components.

Release Notes

PrismJS/prism ### [`v1.23.0`](https://togithub.com/PrismJS/prism/blob/master/CHANGELOG.md#​1230-2020-12-31) [Compare Source](https://togithub.com/PrismJS/prism/compare/v1.22.0...v1.23.0) ##### New components - **Apex** ([#​2622](https://togithub.com/PrismJS/prism/issues/2622)) [`f0e2b70e`](https://togithub.com/PrismJS/prism/commit/f0e2b70e) - **DataWeave** ([#​2659](https://togithub.com/PrismJS/prism/issues/2659)) [`0803525b`](https://togithub.com/PrismJS/prism/commit/0803525b) - **PromQL** ([#​2628](https://togithub.com/PrismJS/prism/issues/2628)) [`8831c706`](https://togithub.com/PrismJS/prism/commit/8831c706) ##### Updated components - Fixed multiple vulnerable regexes ([#​2584](https://togithub.com/PrismJS/prism/issues/2584)) [`c2f6a644`](https://togithub.com/PrismJS/prism/commit/c2f6a644) - **Apache Configuration** - Update directive-flag to match `=` ([#​2612](https://togithub.com/PrismJS/prism/issues/2612)) [`00bf00e3`](https://togithub.com/PrismJS/prism/commit/00bf00e3) - **C-like** - Made all comments greedy ([#​2680](https://togithub.com/PrismJS/prism/issues/2680)) [`0a3932fe`](https://togithub.com/PrismJS/prism/commit/0a3932fe) - **C** - Better class name and macro name detection ([#​2585](https://togithub.com/PrismJS/prism/issues/2585)) [`129faf5c`](https://togithub.com/PrismJS/prism/commit/129faf5c) - **Content-Security-Policy** - Added missing directives and keywords ([#​2664](https://togithub.com/PrismJS/prism/issues/2664)) [`f1541342`](https://togithub.com/PrismJS/prism/commit/f1541342) - Do not highlight directive names with adjacent hyphens ([#​2662](https://togithub.com/PrismJS/prism/issues/2662)) [`a7ccc16d`](https://togithub.com/PrismJS/prism/commit/a7ccc16d) - **CSS** - Better HTML `style` attribute tokenization ([#​2569](https://togithub.com/PrismJS/prism/issues/2569)) [`b04cbafe`](https://togithub.com/PrismJS/prism/commit/b04cbafe) - **Java** - Improved package and class name detection ([#​2599](https://togithub.com/PrismJS/prism/issues/2599)) [`0889bc7c`](https://togithub.com/PrismJS/prism/commit/0889bc7c) - Added Java 15 keywords ([#​2567](https://togithub.com/PrismJS/prism/issues/2567)) [`73f81c89`](https://togithub.com/PrismJS/prism/commit/73f81c89) - **Java stack trace** - Added support stack frame element class loaders and modules ([#​2658](https://togithub.com/PrismJS/prism/issues/2658)) [`0bb4f096`](https://togithub.com/PrismJS/prism/commit/0bb4f096) - **Julia** - Removed constants that are not exported by default ([#​2601](https://togithub.com/PrismJS/prism/issues/2601)) [`093c8175`](https://togithub.com/PrismJS/prism/commit/093c8175) - **Kotlin** - Added support for backticks in function names ([#​2489](https://togithub.com/PrismJS/prism/issues/2489)) [`a5107d5c`](https://togithub.com/PrismJS/prism/commit/a5107d5c) - **Latte** - Fixed exponential backtracking ([#​2682](https://togithub.com/PrismJS/prism/issues/2682)) [`89f1e182`](https://togithub.com/PrismJS/prism/commit/89f1e182) - **Markdown** - Improved URL tokenization ([#​2678](https://togithub.com/PrismJS/prism/issues/2678)) [`2af3e2c2`](https://togithub.com/PrismJS/prism/commit/2af3e2c2) - Added support for YAML front matter ([#​2634](https://togithub.com/PrismJS/prism/issues/2634)) [`5cf9cfbc`](https://togithub.com/PrismJS/prism/commit/5cf9cfbc) - **PHP** - Added support for PHP 7.4 + other major improvements ([#​2566](https://togithub.com/PrismJS/prism/issues/2566)) [`38808e64`](https://togithub.com/PrismJS/prism/commit/38808e64) - Added support for PHP 8.0 features ([#​2591](https://togithub.com/PrismJS/prism/issues/2591)) [`df922d90`](https://togithub.com/PrismJS/prism/commit/df922d90) - Removed C-like dependency ([#​2619](https://togithub.com/PrismJS/prism/issues/2619)) [`89ebb0b7`](https://togithub.com/PrismJS/prism/commit/89ebb0b7) - Fixed exponential backtracking ([#​2684](https://togithub.com/PrismJS/prism/issues/2684)) [`37b9c9a1`](https://togithub.com/PrismJS/prism/commit/37b9c9a1) - **Sass (Scss)** - Added support for Sass modules ([#​2643](https://togithub.com/PrismJS/prism/issues/2643)) [`deb238a6`](https://togithub.com/PrismJS/prism/commit/deb238a6) - **Scheme** - Fixed number pattern ([#​2648](https://togithub.com/PrismJS/prism/issues/2648)) [`e01ecd00`](https://togithub.com/PrismJS/prism/commit/e01ecd00) - Fixed function and function-like false positives ([#​2611](https://togithub.com/PrismJS/prism/issues/2611)) [`7951ca24`](https://togithub.com/PrismJS/prism/commit/7951ca24) - **Shell session** - Fixed false positives because of links in command output ([#​2649](https://togithub.com/PrismJS/prism/issues/2649)) [`8e76a978`](https://togithub.com/PrismJS/prism/commit/8e76a978) - **TSX** - Temporary fix for the collisions of JSX tags and TS generics ([#​2596](https://togithub.com/PrismJS/prism/issues/2596)) [`25bdb494`](https://togithub.com/PrismJS/prism/commit/25bdb494) ##### Updated plugins - Made Autoloader and Diff Highlight compatible ([#​2580](https://togithub.com/PrismJS/prism/issues/2580)) [`7a74497a`](https://togithub.com/PrismJS/prism/commit/7a74497a) - **Copy to Clipboard Button** - Set `type="button"` attribute for copy to clipboard plugin ([#​2593](https://togithub.com/PrismJS/prism/issues/2593)) [`f59a85f1`](https://togithub.com/PrismJS/prism/commit/f59a85f1) - **File Highlight** - Fixed IE compatibility problem ([#​2656](https://togithub.com/PrismJS/prism/issues/2656)) [`3f4ae00d`](https://togithub.com/PrismJS/prism/commit/3f4ae00d) - **Line Highlight** - Fixed top offset in combination with Line numbers ([#​2237](https://togithub.com/PrismJS/prism/issues/2237)) [`b40f8f4b`](https://togithub.com/PrismJS/prism/commit/b40f8f4b) - Fixed print background color ([#​2668](https://togithub.com/PrismJS/prism/issues/2668)) [`cdb24abe`](https://togithub.com/PrismJS/prism/commit/cdb24abe) - **Line Numbers** - Fixed null reference ([#​2605](https://togithub.com/PrismJS/prism/issues/2605)) [`7cdfe556`](https://togithub.com/PrismJS/prism/commit/7cdfe556) - **Treeview** - Fixed icons on dark themes ([#​2631](https://togithub.com/PrismJS/prism/issues/2631)) [`7266e32f`](https://togithub.com/PrismJS/prism/commit/7266e32f) - **Unescaped Markup** - Refactoring ([#​2445](https://togithub.com/PrismJS/prism/issues/2445)) [`fc602822`](https://togithub.com/PrismJS/prism/commit/fc602822) ##### Other - Readme: Added alternative link for Chinese translation [`071232b4`](https://togithub.com/PrismJS/prism/commit/071232b4) - Readme: Removed broken icon for Chinese translation ([#​2670](https://togithub.com/PrismJS/prism/issues/2670)) [`2ea202b9`](https://togithub.com/PrismJS/prism/commit/2ea202b9) - Readme: Grammar adjustments ([#​2629](https://togithub.com/PrismJS/prism/issues/2629)) [`f217ab75`](https://togithub.com/PrismJS/prism/commit/f217ab75) - **Core** - Moved pattern matching + lookbehind logic into function ([#​2633](https://togithub.com/PrismJS/prism/issues/2633)) [`24574406`](https://togithub.com/PrismJS/prism/commit/24574406) - Fixed bug with greedy matching ([#​2632](https://togithub.com/PrismJS/prism/issues/2632)) [`8fa8dd24`](https://togithub.com/PrismJS/prism/commit/8fa8dd24) - **Infrastructure** - Migrate from TravisCI -> GitHub Actions ([#​2606](https://togithub.com/PrismJS/prism/issues/2606)) [`69132045`](https://togithub.com/PrismJS/prism/commit/69132045) - Added Dangerfile and provide bundle size info ([#​2608](https://togithub.com/PrismJS/prism/issues/2608)) [`9df20c5e`](https://togithub.com/PrismJS/prism/commit/9df20c5e) - New `start` script to start local server ([#​2491](https://togithub.com/PrismJS/prism/issues/2491)) [`0604793c`](https://togithub.com/PrismJS/prism/commit/0604793c) - Added test for exponential backtracking ([#​2590](https://togithub.com/PrismJS/prism/issues/2590)) [`05afbb10`](https://togithub.com/PrismJS/prism/commit/05afbb10) - Added test for polynomial backtracking ([#​2597](https://togithub.com/PrismJS/prism/issues/2597)) [`e644178b`](https://togithub.com/PrismJS/prism/commit/e644178b) - Tests: Better pretty print ([#​2600](https://togithub.com/PrismJS/prism/issues/2600)) [`8bfcc819`](https://togithub.com/PrismJS/prism/commit/8bfcc819) - Tests: Fixed sorted language list test ([#​2623](https://togithub.com/PrismJS/prism/issues/2623)) [`2d3a1267`](https://togithub.com/PrismJS/prism/commit/2d3a1267) - Tests: Stricter pattern for nice-token-names test ([#​2588](https://togithub.com/PrismJS/prism/issues/2588)) [`0df60be1`](https://togithub.com/PrismJS/prism/commit/0df60be1) - Tests: Added strict checks for `Prism.languages.extend` ([#​2572](https://togithub.com/PrismJS/prism/issues/2572)) [`8828500e`](https://togithub.com/PrismJS/prism/commit/8828500e) - **Website** - Test page: Added "Share" option ([#​2575](https://togithub.com/PrismJS/prism/issues/2575)) [`b5f4f10e`](https://togithub.com/PrismJS/prism/commit/b5f4f10e) - Test page: Don't trigger ad-blockers with class ([#​2677](https://togithub.com/PrismJS/prism/issues/2677)) [`df0738e9`](https://togithub.com/PrismJS/prism/commit/df0738e9) - Thousands -> millions [`9f82de50`](https://togithub.com/PrismJS/prism/commit/9f82de50) - Unescaped Markup: More doc regarding comments ([#​2652](https://togithub.com/PrismJS/prism/issues/2652)) [`add3736a`](https://togithub.com/PrismJS/prism/commit/add3736a) - Website: Added and updated documentation ([#​2654](https://togithub.com/PrismJS/prism/issues/2654)) [`8e660495`](https://togithub.com/PrismJS/prism/commit/8e660495) - Website: Updated and improved guide on "Extending Prism" page ([#​2586](https://togithub.com/PrismJS/prism/issues/2586)) [`8e1f38ff`](https://togithub.com/PrismJS/prism/commit/8e1f38ff) ### [`v1.22.0`](https://togithub.com/PrismJS/prism/blob/master/CHANGELOG.md#​1220-2020-10-10) [Compare Source](https://togithub.com/PrismJS/prism/compare/v1.21.0...v1.22.0) ##### New components - **Birb** ([#​2542](https://togithub.com/PrismJS/prism/issues/2542)) [`4d31e22a`](https://togithub.com/PrismJS/prism/commit/4d31e22a) - **BSL (1C:Enterprise)** & **OneScript** ([#​2520](https://togithub.com/PrismJS/prism/issues/2520)) [`5c33f0bb`](https://togithub.com/PrismJS/prism/commit/5c33f0bb) - **MongoDB** ([#​2518](https://togithub.com/PrismJS/prism/issues/2518)) [`004eaa74`](https://togithub.com/PrismJS/prism/commit/004eaa74) - **Naninovel Script** ([#​2494](https://togithub.com/PrismJS/prism/issues/2494)) [`388ad996`](https://togithub.com/PrismJS/prism/commit/388ad996) - **PureScript** ([#​2526](https://togithub.com/PrismJS/prism/issues/2526)) [`ad748a00`](https://togithub.com/PrismJS/prism/commit/ad748a00) - **SML** & **SML/NJ** ([#​2537](https://togithub.com/PrismJS/prism/issues/2537)) [`cb75d9e2`](https://togithub.com/PrismJS/prism/commit/cb75d9e2) - **Stan** ([#​2490](https://togithub.com/PrismJS/prism/issues/2490)) [`2da2beba`](https://togithub.com/PrismJS/prism/commit/2da2beba) - **TypoScript** & **TSConfig** ([#​2505](https://togithub.com/PrismJS/prism/issues/2505)) [`bf115f47`](https://togithub.com/PrismJS/prism/commit/bf115f47) ##### Updated components - Removed duplicate alternatives in various languages ([#​2524](https://togithub.com/PrismJS/prism/issues/2524)) [`fa2225ff`](https://togithub.com/PrismJS/prism/commit/fa2225ff) - **Haskell** - Improvements ([#​2535](https://togithub.com/PrismJS/prism/issues/2535)) [`e023044c`](https://togithub.com/PrismJS/prism/commit/e023044c) - **JS Extras** - Highlight import and export bindings ([#​2533](https://togithub.com/PrismJS/prism/issues/2533)) [`c51ababb`](https://togithub.com/PrismJS/prism/commit/c51ababb) - Added control-flow keywords ([#​2529](https://togithub.com/PrismJS/prism/issues/2529)) [`bcef22af`](https://togithub.com/PrismJS/prism/commit/bcef22af) - **PHP** - Added `match` keyword (PHP 8.0) ([#​2574](https://togithub.com/PrismJS/prism/issues/2574)) [`1761513e`](https://togithub.com/PrismJS/prism/commit/1761513e) - **Processing** - Fixed function pattern ([#​2564](https://togithub.com/PrismJS/prism/issues/2564)) [`35cbc02f`](https://togithub.com/PrismJS/prism/commit/35cbc02f) - **Regex** - Changed how languages embed regexes ([#​2532](https://togithub.com/PrismJS/prism/issues/2532)) [`f62ca787`](https://togithub.com/PrismJS/prism/commit/f62ca787) - **Rust** - Fixed Unicode char literals ([#​2550](https://togithub.com/PrismJS/prism/issues/2550)) [`3b4f14ca`](https://togithub.com/PrismJS/prism/commit/3b4f14ca) - **Scheme** - Added support for R7RS syntax ([#​2525](https://togithub.com/PrismJS/prism/issues/2525)) [`e4f6ccac`](https://togithub.com/PrismJS/prism/commit/e4f6ccac) - **Shell session** - Added aliases ([#​2548](https://togithub.com/PrismJS/prism/issues/2548)) [`bfb36748`](https://togithub.com/PrismJS/prism/commit/bfb36748) - Highlight all commands after the start of any Heredoc string ([#​2509](https://togithub.com/PrismJS/prism/issues/2509)) [`6c921801`](https://togithub.com/PrismJS/prism/commit/6c921801) - **YAML** - Improved key pattern ([#​2561](https://togithub.com/PrismJS/prism/issues/2561)) [`59853a52`](https://togithub.com/PrismJS/prism/commit/59853a52) ##### Updated plugins - **Autoloader** - Fixed file detection regexes ([#​2549](https://togithub.com/PrismJS/prism/issues/2549)) [`d36ea993`](https://togithub.com/PrismJS/prism/commit/d36ea993) - **Match braces** - Fixed JS interpolation punctuation ([#​2541](https://togithub.com/PrismJS/prism/issues/2541)) [`6b47133d`](https://togithub.com/PrismJS/prism/commit/6b47133d) - **Show Language** - Added title for plain text ([#​2555](https://togithub.com/PrismJS/prism/issues/2555)) [`a409245e`](https://togithub.com/PrismJS/prism/commit/a409245e) ##### Other - Tests: Added an option to accept the actual token stream ([#​2515](https://togithub.com/PrismJS/prism/issues/2515)) [`bafab634`](https://togithub.com/PrismJS/prism/commit/bafab634) - **Core** - Docs: Minor improvement ([#​2513](https://togithub.com/PrismJS/prism/issues/2513)) [`206dc80f`](https://togithub.com/PrismJS/prism/commit/206dc80f) - **Infrastructure** - JSDoc: Fixed line ends ([#​2523](https://togithub.com/PrismJS/prism/issues/2523)) [`bf169e5f`](https://togithub.com/PrismJS/prism/commit/bf169e5f) - **Website** - Website: Added new SB101 tutorial replacing the Crambler one ([#​2576](https://togithub.com/PrismJS/prism/issues/2576)) [`655f985c`](https://togithub.com/PrismJS/prism/commit/655f985c) - Website: Fix typo on homepage by adding missing word add ([#​2570](https://togithub.com/PrismJS/prism/issues/2570)) [`8ae6a4ba`](https://togithub.com/PrismJS/prism/commit/8ae6a4ba) - Custom class: Improved doc ([#​2512](https://togithub.com/PrismJS/prism/issues/2512)) [`5ad6cb23`](https://togithub.com/PrismJS/prism/commit/5ad6cb23)

Renovate configuration

:date: Schedule: "" (UTC).

:vertical_traffic_light: Automerge: Enabled.

:recycle: Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

:no_bell: Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by WhiteSource Renovate. View repository job log here.