Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade markdownlint-cli from 0.22.0 to 0.37.0 #78

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

NOUIY
Copy link
Owner

@NOUIY NOUIY commented Oct 14, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade markdownlint-cli from 0.22.0 to 0.37.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2023-09-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKDOWNIT-2331914
479/1000
Why? Has a fix available, CVSS 5.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: markdownlint-cli
  • 0.37.0 - 2023-09-22
    • Update markdownlint dependency to 0.31.1
      • Improve MD032/MD034/MD037/MD043/MD044/MD051/MD052
      • Improve performance
    • Update all dependencies via Dependabot
  • 0.36.0 - 2023-09-03
    • Update markdownlint dependency to 0.30.0
      • Use micromark in MD022/MD026/MD032/MD037/MD045/MD051
      • Incorporate micromark-extension-math for math syntax
      • Allow custom rules to override information URL
    • Update all dependencies via Dependabot
  • 0.35.0 - 2023-06-17
    • Update markdownlint dependency to 0.29.0
      • Update micromark parser dependencies for better performance
      • Use micromark in MD049/MD050
      • Improve MD034/MD037/MD044/MD049/MD050
    • Update all dependencies via Dependabot
  • 0.34.0 - 2023-04-30
    • Update markdownlint dependency to 0.28.2
      • Introduce micromark parser for better positional data (internal only)
      • Use micromark in MD013/MD033/MD034/MD035/MD038/MD044/MD052/MD053
    • Update all dependencies via Dependabot
  • 0.33.0 - 2023-01-07
    • Update markdownlint dependency to 0.27.0
      • Improve MD011/MD013/MD022/MD031/MD032/MD033/MD034/MD040/MD043/MD051/MD053
      • Generate/separate documentation
      • Improve documentation
    • Publish Docker container images for both linux/amd64 and linux/arm64
    • Support JSONC and YAML inside markdownlint-configure-file comments
    • Update all dependencies via Dependabot
  • 0.32.2 - 2022-08-20
    • Update markdownlint dependency to 0.26.2
      • Improve MD037/MD051/MD053
    • Update all dependencies via Dependabot
  • 0.32.1 - 2022-07-25
    • Update markdownlint dependency to 0.26.1
      • Improve MD051
    • Update all dependencies via Dependabot
  • 0.32.0 - 2022-07-16
    • Update markdownlint dependency to 0.26.0
      • Add MD051/link-fragments: Link fragments should be valid
      • Add MD052/reference-links-images: Reference links and images should use a label that is defined
      • Add MD053/link-image-reference-definitions: Link and image reference definitions should be needed (auto-fixable)
      • Improve MD010/MD031/MD035/MD039/MD042/MD044/MD049/MD050
      • Add markdownlint-disable-line inline comment
      • Support ~ paths in configuration files
      • Improve performance
    • Add .markdownlint.jsonc to list of supported configuration files
    • Remove support for end-of-life Node version 12
    • Update all dependencies via Dependabot
  • 0.31.1 - 2022-02-09
    • Automatically publish Docker container image to GitHub Packages
    • Update all dependencies via Dependabot
  • 0.31.0 - 2022-02-05
    • Update markdownlint dependency to 0.25.0
      • Add MD049/MD050 for consistent emphasis/strong style (both auto-fixable)
      • Improve MD007/MD010/MD032/MD033/MD035/MD037/MD039
      • Support asynchronous custom rules
      • Improve performance
    • Update all dependencies via Dependabot
  • 0.30.0 - 2021-11-20
  • 0.29.0 - 2021-10-05
  • 0.28.1 - 2021-07-23
  • 0.28.0 - 2021-07-23
  • 0.27.1 - 2021-03-02
  • 0.27.0 - 2021-03-02
  • 0.26.0 - 2020-12-16
  • 0.25.0 - 2020-11-17
  • 0.24.0 - 2020-10-02
  • 0.23.2 - 2020-06-30
  • 0.23.1 - 2020-05-17
  • 0.23.0 - 2020-05-05
  • 0.22.0 - 2020-02-09
from markdownlint-cli GitHub release notes
Commit messages
Package name: markdownlint-cli
  • 3f18b94 Bump version 0.37.0
  • 6b233de Bump docker/setup-buildx-action from 2 to 3
  • 1040117 Bump docker/login-action from 2 to 3
  • e7eff9e Bump docker/metadata-action from 4 to 5
  • 0a0c9b8 Bump docker/build-push-action from 4 to 5
  • 0d6718c Bump docker/setup-qemu-action from 2 to 3
  • 26ac539 Bump markdownlint from 0.31.0 to 0.31.1
  • f6aa692 Bump markdownlint from 0.30.0 to 0.31.0
  • 8b08b15 Bump actions/checkout from 3 to 4
  • 1d1e5ea Bump version 0.36.0
  • 58ab41c Bump glob from 10.3.3 to 10.3.4
  • 24627da Bump execa from 7.2.0 to 8.0.1
  • 5b45a20 Bump markdownlint from 0.29.0 to 0.30.0
  • b043e29 Bump xo from 0.55.1 to 0.56.0
  • 47f85db Bump xo from 0.55.0 to 0.55.1
  • 00f3f47 fix error msg parsing on win
  • cbaed8e Bump execa from 7.1.1 to 7.2.0
  • f956b3d Replace String#replace() with String#replaceAll() per new xo linting requirement.
  • ba5fdf7 Bump xo from 0.54.2 to 0.55.0
  • 6cacc6b Bump minimatch from 9.0.2 to 9.0.3
  • 195a3b9 Bump glob from 10.3.1 to 10.3.3
  • 62da95e Bump glob from 10.3.0 to 10.3.1
  • f827f27 Bump minimatch from 9.0.1 to 9.0.2
  • ad0c959 Bump glob from 10.2.7 to 10.3.0

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants