Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump marked from 0.4.0 to 0.5.1 in /docs #4437

Merged
merged 1 commit into from
Oct 16, 2018

Conversation

dependabot-preview[bot]
Copy link
Contributor

@dependabot-preview dependabot-preview bot commented Oct 16, 2018

Bumps marked from 0.4.0 to 0.5.1.

Release notes

Sourced from marked's releases.

0.5.1

Security

  • Fix inline code regex and prevent REDOS #1337
  • Use @markedjs/html-differ to prevent REDOS #1331

Bug Fixes

  • Fix typographic substitution in (pre|code|kbd|script) blocks when smartypants=true #1335
  • Fix auto-linking email address #1338

Other

  • Refactor the escape() function to improve performance 10-20% #975
  • Update copyright in source code #1326
  • Update benchmark tests #1019
  • Add dependency badges to readme #1333

0.5.0

Security

  • Use rtrim, not unsafe /X+$/ #1260

Breaking Changes

  • Fix GFM empty table cells #1262
  • Fix GFM extended auto-linking requiring multiple backpedals #1293
  • Fix GFM strikethrough compatibility #1258
  • Fix issues link references and prototypes #1299
  • Fix hard line break when backslash at EOL #1303
  • Fix hyperlinks with parenthesis #1305
  • Fix loose lists #1304
  • Fix strong and em #1315

Docs

  • Fix typo in USING_ADVANCED.md #1276
  • Add pictures to AUTHORS.md #1272
  • Change badge to latest version of marked #1300
  • Change badges from shields.io to badgen.net #1317
  • Use iframe to sandbox generated html #1295
  • Add additional links into readme #1310
  • Add missing parameters for renderer methods #1311
  • Add undocumented option descriptions #1312
  • Add navigation sidebar to the docs #1316

CI

  • Change travis clone depth to 3 #1270
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes an out-of-range update to a production dependency.


Note: This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.

You can always request more updates by clicking Bump now in your Dependabot dashboard.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.


⚠️ Dependabot is rebasing this PR ⚠️

This PR will be updated for you in a moment. If you make any changes yourself then they will take precedence over the rebase (which will be abandoned).

Bumps [marked](https://github.com/markedjs/marked) from 0.4.0 to 0.5.1.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@0.4.0...v0.5.1)

Signed-off-by: dependabot[bot] <support@dependabot.com>
@codecov
Copy link

codecov bot commented Oct 16, 2018

Codecov Report

Merging #4437 into master will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@           Coverage Diff           @@
##           master    #4437   +/-   ##
=======================================
  Coverage   35.98%   35.98%           
=======================================
  Files         555      555           
  Lines        6650     6650           
  Branches      871      871           
=======================================
  Hits         2393     2393           
  Misses       3810     3810           
  Partials      447      447

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 254f360...3e0cd0b. Read the comment docs.

@ndelangen ndelangen merged commit 920963c into master Oct 16, 2018
@ndelangen ndelangen deleted the dependabot/npm_and_yarn/docs/marked-0.5.1 branch October 16, 2018 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants