Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency marked to v4 #100

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dimagwhitesourceapp[bot]
Copy link

@dimagwhitesourceapp dimagwhitesourceapp bot commented Dec 18, 2022

This PR contains the following updates:

Package Type Update Change
marked (source) dependencies major 2.0.3 -> 4.0.10

By merging this PR, the issue #112 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 7.5 CVE-2022-21680
High High 7.5 CVE-2022-21681

Release Notes

markedjs/marked (marked)

v4.0.10

Compare Source

Bug Fixes
  • security: fix redos vulnerabilities (8f80657)

v4.0.9

Compare Source

Bug Fixes

v4.0.8

Compare Source

Bug Fixes

v4.0.7

Compare Source

Bug Fixes

v4.0.6

Compare Source

Bug Fixes

v4.0.5

Compare Source

Bug Fixes

v4.0.4

Compare Source

Bug Fixes

v4.0.3

Compare Source

Bug Fixes

v4.0.2

Compare Source

Bug Fixes

v4.0.1

Compare Source

Bug Fixes

v4.0.0

Compare Source

Bug Fixes
BREAKING CHANGES
  • Default export removed. Use import { marked } from 'marked' or const { marked } = require('marked') instead.
  • /lib/marked.js removed. Use /marked.min.js in script tag instead.
  • When using marked in a script tag use marked.parse(...) instead of marked(...)

v3.0.8

Compare Source

Bug Fixes

v3.0.7

Compare Source

Bug Fixes
  • use named exports only for ESM build (#​2226)

v3.0.6

Compare Source

Bug Fixes

v3.0.5

Compare Source

Bug Fixes

v3.0.4

Compare Source

Bug Fixes

v3.0.3

Compare Source

Bug Fixes

v3.0.2

Compare Source

Bug Fixes

v3.0.1

Compare Source

Bug Fixes

v3.0.0

Compare Source

Bug Fixes
BREAKING CHANGES
  • Drop support for node 10.
  • Add module field to package.json

  • Tokenizers will create their own tokens with this.lexer.inline(text, tokens). The inline function will queue the token creation until after all block tokens are created.
  • Extensions tokenizer this object will include the lexer as a property. this.inlineTokens becomes this.lexer.inline.
  • Extensions renderer this object will include the parser as a property. this.parseInline becomes this.parser.parseInline.
  • tag and inlineText tokenizer function signatures have changed.

  • nptable tokenizer is removed and merged with table tokenizer.
  • table tokens header property changed to contain an array of objects for each header cell with text and tokens properties.
  • table tokens cells property changed to rows and is an array of rows where each row contains an array of objects for each cell with text and tokens properties.

v2 table token:

{
  "type": "table",
  "align": [null, null],
  "raw": "| a | b |\n|---|---|\n| 1 | 2 |\n",
  "header": ["a", "b"],
  "cells": [["1", "2"]],
  "tokens": {
    "header": [
      [{ "type": "text", "raw": "a", "text": "a" }],
      [{ "type": "text", "raw": "b", "text": "b" }]
    ],
    "cells": [[
      [{ "type": "text", "raw": "1", "text": "1" }],
      [{ "type": "text", "raw": "2", "text": "2" }]
    ]]
  }
}

v3 table token:

{
  "type": "table",
  "align": [null, null],
  "raw": "| a | b |\n|---|---|\n| 1 | 2 |\n",
  "header": [
    {
      "text": "a",
      "tokens": [{ "type": "text", "raw": "a", "text": "a" }]
    },
    {
      "text": "b",
      "tokens": [{ "type": "text", "raw": "b", "text": "b" }]
    }
  ],
  "rows": [
    {
      "text": "1",
      "tokens": [{ "type": "text", "raw": "1", "text": "1" }]
    },
    {
      "text": "2",
      "tokens": [{ "type": "text", "raw": "2", "text": "2" }]
    }
  ]
}

v2.1.3

Compare Source

Bug Fixes

v2.1.2

Compare Source

Bug Fixes

v2.1.1

Compare Source

Bug Fixes

v2.1.0

Compare Source

Features

v2.0.7

Compare Source

Bug Fixes

v2.0.6

Compare Source

Bug Fixes

v2.0.5

Compare Source

Bug Fixes

v2.0.4

Compare Source

Bug Fixes

  • If you want to rebase/retry this PR, check this box

@dimagwhitesourceapp dimagwhitesourceapp bot added the security fix Security fix generated by Mend label Dec 18, 2022
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/marked-4.x branch from 93f16e4 to 1b91d94 Compare April 13, 2023 14:28
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/marked-4.x branch from 1b91d94 to 07c7ba1 Compare May 31, 2023 14:02
@dimagwhitesourceapp dimagwhitesourceapp bot force-pushed the whitesource-remediate/marked-4.x branch from 07c7ba1 to abe487e Compare December 4, 2023 18:01
@dimagwhitesourceapp dimagwhitesourceapp bot changed the title Update dependency marked to v4 Update dependency marked to v4 - autoclosed Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot deleted the whitesource-remediate/marked-4.x branch December 4, 2023 23:30
@dimagwhitesourceapp dimagwhitesourceapp bot changed the title Update dependency marked to v4 - autoclosed Update dependency marked to v4 Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot reopened this Dec 4, 2023
@dimagwhitesourceapp dimagwhitesourceapp bot restored the whitesource-remediate/marked-4.x branch December 4, 2023 23:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants