[Snyk] Fix for 1 vulnerabilities

[leonardoadame]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node_modules/eslint/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Infinite loop SNYK-JS-MARKDOWNIT-6483324	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: markdown-it

The new version differs by 35 commits.

• e476f78 13.0.2 released
• dfd485b Dist rebuild
• 80a3adc Fix crash in linkify inline rule on malformed input
• 49ca65b Sync pathological tests with cmark
• 2b6cac2 Sync pathological tests with cmark
• 08444a5 Fix typo; minor copy-edits ([Snyk] Fix for 2 vulnerabilities #879)
• 940459e fix: remove outdated comments ([Snyk] Security upgrade tap from 16.3.10 to 18.0.0 #891)
• 1529ff4 Guard against custom rule not incrementing pos
• 6325878 Multiple refactors
• 9ff460e Drop a lot of extra code from blockquotes
• e843acc Merge branch 'master' of github.com:markdown-it/markdown-it
• bda7182 13.0.1 released
• b8b610f Dist rebuild
• d17df13 Bump linkify-it to 4.0.1
• 0c19c37 Merge pull request [Snyk] Security upgrade tap from 16.3.10 to 18.0.0 #866 from yne/patch-1
• e157cd2 doc: Add syntax highlighting
• 6ec0b76 13.0.0 released
• 0e4c0f4 Dist rebuild
• d1757ed Bump linkify-it to v4
• bab0baf Added examples on how to add and modify rules ([Snyk] Security upgrade airtap from 3.0.0 to 4.0.0 #619)
• e6d1bfd refactor: replace deprecated String.prototype.substr()
• f523514 Remove (p) => § replacement in typographer
• 3fc0deb Put entities to separate token
• 6b58ec4 Add linkifier rule to inline chain for full links

See the full diff

Package name: markdownlint

The new version differs by 66 commits.

• 49ef661 Update to version 0.32.0.
• b709a2f Update MD054/link-image-style to add url_inline parameter (fixes [Snyk] Security upgrade eslint from 8.8.0 to 9.0.0 #753).
• 84333a5 Bump eslint-plugin-jsdoc from 46.8.2 to 46.9.0
• 06e3ac4 Bump eslint-plugin-n from 16.3.0 to 16.3.1
• 063310e Update MD054/link-image-style to split reference parameter into full/collapsed/shortcut parameters (fixes [Snyk] Security upgrade jest from 28.1.3 to 29.0.0 #918).
• 4390715 Update test repos script to transform "header"-based rule names to "heading"-based now that the former aliases have been removed.
• a9a7794 Remove rule aliases for "header" (deprecated in v0.9.0).
• 20a552b Remove MD002 (deprecated in v0.13.0) and MD006 (deprecated in v0.19.0).
• 80539b7 Bump @ babel/core from 7.23.2 to 7.23.3
• 0cf0146 Bump globby from 13.2.2 to 14.0.0
• 08498d2 Bump @ babel/preset-env from 7.23.2 to 7.23.3
• d4bfb63 Generate TypeScript declaration for Configuration object from JSON schema (refs [Snyk] Security upgrade pkg from 4.3.4 to 4.4.1 #1004, refs [Snyk] Security upgrade xo from 0.20.3 to 0.42.0 #1014).
• b3f0e52 Remove support for end-of-life Node 16.
• d29aa37 Remove deprecated ESLint rule n/no-hide-core-modules.
• 3db8b25 Remove deprecated ESLint rules after version update, sort rules by name.
• ada9f68 Bump eslint-plugin-n from 16.2.0 to 16.3.0
• 3b1dfe4 Remove deprecated ESLint rules after version update.
• 760055e Bump eslint from 8.52.0 to 8.53.0
• 18497ff Add rule information links to JSON schema for configuration files and corresponding examples (link is clickable in VS Code tooltips).
• 1a376f6 Tweak rule parameters to avoid confusing the TypeScript type system.
• 7dc50c1 Bump @ hyperjump/json-schema from 1.6.4 to 1.6.5
• 6649a12 Bump yaml from 2.3.3 to 2.3.4
• 5fd9688 Add "LLMs" to dictionary.txt.
• efcf321 Update CONTRIBUTING.md to explicitly disallow ChatGPT and other LLMs.

See the full diff

Package name: markdownlint-cli

The new version differs by 11 commits.

• 1d2f248 Bump version 0.38.0
• 8f3daa1 Bump ava from 6.0.0 to 6.0.1
• aaa4119 Bump ava from 5.3.1 to 6.0.0
• 770817b Remove support for end-of-life Node.js version 16.
• 3e6f0dc Update tests to account for deprecation of MD002, MD006, and "header" aliases, fix new prettier issues.
• 75b959d Bump markdownlint from 0.31.1 to 0.32.1
• 8ca31c4 Bump ignore from 5.2.4 to 5.3.0
• d38e228 Bump actions/setup-node from 3 to 4
• f919a81 Bump commander from 11.0.0 to 11.1.0
• febea62 Bump glob from 10.3.7 to 10.3.10
• 8354710 Bump glob from 10.3.4 to 10.3.7

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.