New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0 #68

Open

CCKNBC wants to merge 1 commit into master from snyk-upgrade-592a14d03a5d400f2197bf3c2adf3d80

Member

CCKNBC commented Jun 11, 2022

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released 22 days ago, on 2022-05-21.

Release notes

Package name: hexo-renderer-stylus

2.1.0 - 2022-05-21
Dependencies
- chore(deps-dev): bump hexo from 5.4.0 to 6.0.0 by @ dependabot in #69
- chore(deps-dev): bump hexo from 6.0.0 to 6.1.0 by @ dependabot in #85
- chore(deps-dev): bump hexo from 6.1.0 to 6.2.0 by @ dependabot in #95
- chore(deps-dev): bump eslint from 7.32.0 to 8.1.0 by @ dependabot in #66
- chore(deps-dev): bump eslint from 8.5.0 to 8.6.0 by @ dependabot in #70
- chore(deps-dev): bump eslint from 8.6.0 to 8.7.0 by @ dependabot in #73
- chore(deps-dev): bump eslint from 8.7.0 to 8.11.0 by @ dependabot in #84
- chore(deps-dev): bump eslint from 8.11.0 to 8.15.0 by @ dependabot in #94
- chore(deps-dev): bump eslint-config-hexo from 4.2.0 to 5.0.0 by @ dependabot in #71
- chore(deps-dev): bump mocha from 8.4.0 to 9.0.0 by @ dependabot in #62
- chore(deps-dev): bump mocha from 9.1.3 to 9.2.0 by @ dependabot in #74
- chore(deps-dev): bump mocha from 9.2.0 to 9.2.2 by @ dependabot in #86
- chore(deps): bump actions/setup-node from 2 to 3 by @ dependabot in #80
- chore(deps): bump actions/checkout from 2 to 3 by @ dependabot in #83
- chore(deps-dev): bump chai from 4.3.4 to 4.3.6 by @ dependabot in #76
- chore(deps): bump stylus from 0.56.0 to 0.57.0 by @ dependabot in #87
- chore(deps): bump stylus from 0.54.8 to 0.55.0 by @ dependabot in #63
- chore(deps): bump prismjs from 1.25.0 to 1.27.0 by @ dependabot in #81
- chore(deps): bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #88
- chore(deps): bump moment from 2.29.1 to 2.29.2 by @ dependabot in #90
Misc
- Fix typo by @ stevenjoezhang in #58
- Upgrade to GitHub-native Dependabot by @ dependabot-preview in #61
- Switch to github actions by @ tomap in #67
- fix: Lcov file not found by @ iChenLei in #97
New Contributors
- @ stevenjoezhang made their first contribution in #58
- @ dependabot made their first contribution in #62
- @ iChenLei made their first contribution in #97
Full Changelog: 2.0.1...2.1.0
2.0.1 - 2020-09-05
Fix
- fix: enable disableNunjucks to avoid rendering nunjucks tag [#55]
  - it's now safe to use:
```
div::before
  content: "{{}}"
```

from hexo-renderer-stylus GitHub release notes

Commit messages

Package name: hexo-renderer-stylus

4535a33 release: 2.1.0 ([Snyk] Fix for 11 vulnerabilities #96)
78e0290 chore(deps-dev): bump hexo from 6.1.0 to 6.2.0 ([Snyk] Security upgrade cheerio from 1.0.0-rc.10 to 1.0.0 #95)
308f5c4 chore(deps-dev): bump eslint from 8.11.0 to 8.15.0 (fix(deps): update dependency hexo to v6 [security] #94)
152f588 fix: Lcov file not found (#97)
942a542 chore(deps): bump moment from 2.29.1 to 2.29.2 ([Snyk] Security upgrade hexo-algoliasearch from 1.0.0 to 1.1.0 #90)
53b23c5 chore(deps): bump minimist from 1.2.5 to 1.2.6 ([Snyk] Upgrade hexo-cli from 4.3.0 to 4.3.1 #88)
c6d5929 chore(deps): bump prismjs from 1.25.0 to 1.27.0 (chore(deps): update dependency json5 to 2.2.2 [security] - autoclosed #81)
b71b30a chore(deps): bump stylus from 0.56.0 to 0.57.0 (chore(deps): update dependency hexo-generator-sitemap to v3 #87)
f38765b chore(deps-dev): bump chai from 4.3.4 to 4.3.6 (build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 #76)
6863e79 chore(deps): bump actions/checkout from 2 to 3 (chore(deps): update actions/cache action to v2.1.8 #83)
e6eddb4 chore(deps-dev): bump eslint from 8.7.0 to 8.11.0 (fix(deps): update dependency cheerio to v1.0.0 #84)
460392d chore(deps-dev): bump mocha from 9.2.0 to 9.2.2 (chore(deps): update actions/checkout action to v3 - autoclosed #86)
a1ad9b8 chore(deps-dev): bump hexo from 6.0.0 to 6.1.0 (fix(deps): update dependency hexo-renderer-stylus to v2.1.0 #85)
5f13a59 chore(deps): bump actions/setup-node from 2 to 3 (chore(deps): update dependency decode-uri-component to 0.2.1 [security] - autoclosed #80)
0616f55 chore(deps-dev): bump mocha from 9.1.3 to 9.2.0 (build(deps): bump minimatch from 3.0.4 to 3.1.2 #74)
fe50dbe chore(deps-dev): bump eslint from 8.6.0 to 8.7.0 (chore(deps): update dependency moment-timezone to 0.5.35 [security] - autoclosed #73)
8dda10f chore(deps-dev): bump eslint-config-hexo from 4.2.0 to 5.0.0 (build(deps): bump moment from 2.29.1 to 2.29.4 #71)
bff80f7 chore(deps-dev): bump eslint from 8.5.0 to 8.6.0 (chore(deps): update dependency ejs to 3.1.7 [security] - autoclosed #70)
db40493 chore(deps-dev): bump hexo from 5.4.0 to 6.0.0 (chore(deps): update dependency ansi-regex [security] - autoclosed #69)
2bac254 Switch to github actions (chore(deps): update dependency moment to 2.29.4 [security] - autoclosed #67)
76b522b chore(deps-dev): bump eslint from 7.32.0 to 8.1.0 (chore(deps): update dependency minimist [security] - abandoned #66)
f6d1729 chore(deps): bump stylus from 0.54.8 to 0.55.0 (chore(deps): update dependency prismjs to 1.27.0 [security] - abandoned #63)
5e0bb3f chore(deps-dev): bump mocha from 8.4.0 to 9.0.0 (build(deps): bump prismjs from 1.25.0 to 1.27.0 #62)
dd2465f Upgrade to GitHub-native Dependabot ([Snyk] Security upgrade hexo-renderer-marked from 4.0.0 to 5.0.0 #61)

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0

9b33a29

Snyk has created this PR to upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0.

See this package in npm:
https://www.npmjs.com/package/hexo-renderer-stylus

See this project in Snyk:
https://app.snyk.io/org/ccknbc/project/0a52445e-c972-4d49-8505-cedea054af9a?utm_source=github&utm_medium=referral&page=upgrade-pr

CCKNBC self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet