deps: update [email protected] for security

[atian25]

Checklist

• npm test passes
• tests and/or benchmarks are included
• documentation is changed or added
• commit message follows commit guidelines

Affected core subsystem(s)

Description of change

• https://snyk.io/vuln/npm:nunjucks:20160906
• Bypass autoescape / XSS mozilla/nunjucks#835
• fix autoescape for non-string values; fixes #835 mozilla/nunjucks#836
• fix: undefined escape at #836 mozilla/nunjucks#843

[codecov-io]

Current coverage is 100% (diff: 100%)

Merging #4 into master will not change coverage

@@           master    #4   diff @@
===================================
  Files           6     6          
  Lines          90    90          
  Methods         0     0          
  Messages        0     0          
  Branches        0     0          
===================================
  Hits           90    90          
  Misses          0     0          
  Partials        0     0          

Powered by Codecov. Last update 299b647...4ef869c

[atian25]

0.4.0.

@popomore 之前好像你提到要 review 下再发 1.0.0 ?

[fengmk2]

�应该加上测试用例，确保问题被持续修复。

[atian25]

OK