[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-Y18N-1021887	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hexo

The new version differs by 169 commits.

• d1b762d 3.5.0
• 907de2d Merge pull request #2964 from hexojs/upgrade-deps
• 9f9ec32 Merge pull request #2967 from tryshchenko/deep-assign-to-lodash-merge
• 16d7bb1 Merge pull request #2968 from segayuu/patch-1
• 37911ae Delete duplicate eslint rule not overwritten
• 152596b Removed dependency
• 35559f1 Deep assign replaced with lodash merge
• 3646a6f chore(package): update strip-indent to version 2.0.0
• d2368aa chore(package): upgrade chalk to version 2.3.0
• bcfbc0b chore(package): remove jcsc-preset-hexo
• ca5065e Merge pull request #2946 from hexojs/precommit-eslint
• 55aae45 Merge pull request #2948 from hexojs/update-appveyor
• b0c6508 Merge pull request #2949 from hexojs/use-swig-templates
• db081ab Merge pull request #2886 from ertrzyiks/fix-error-handling-in-routing
• 14e498d Merge pull request #2901 from alxbl/support-hljs
• db1bb1e refactor(swig): replace swig by swig-templates
• 099925c chore(appveyor): add nodejs_version 9
• c63c38c fixup! Add --bail option to handle errors thrown in generate command
• dae3bbc chore(package): add lint-staged eslint autofix
• f19629e styles: make eslint happy
• da2f761 Merge pull request #2846 from segayuu/jscs-to-eslint
• 1f24eaa Merge branch 'master' into jscs-to-eslint
• 92baaad Update dependencies & fix eslint issues (#2908)
• 7bed875 Add --bail option to handle errors thrown in generate command

See the full diff

Package name: hexo-generator-feed

The new version differs by 7 commits.

• 79fa418 Update package.json
• cbe2672 Make default length of content configurable (Helpdesk #@ 1800 882 0652 AVG technical support phone number.*AVG support phone number*AVG customer support phone number. vuejs/v2.cn.vuejs.org#51)
• 1b75605 Support for "atom:icon" Element ($$$ 1 844 247 1987 $$$ Dell Printer tech support phone number, Dell printer Tech supp $$$  vuejs/v2.cn.vuejs.org#57)
• 16398e5 ignore posts which were set as draft in the front-matter ([Snyk] Fix for 1 vulnerabilities #44)
• 19ab397 Merge pull request 24*7 Kodak printer 1-800-439-2949 Customer Support Phone Number vuejs/v2.cn.vuejs.org#47 from daiyitastic/daiyi/update-readme
• cdca00c Update readme
• 7288860 Add 'content' config var to readme

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic