Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade markdownlint-cli from 0.22.0 to 0.38.0 #82

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

NOUIY
Copy link
Owner

@NOUIY NOUIY commented Dec 30, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade markdownlint-cli from 0.22.0 to 0.38.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 23 versions ahead of your current version.
  • The recommended version was released 21 days ago, on 2023-12-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
631/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.2
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKDOWNIT-2331914
631/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 6.2
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: markdownlint-cli
  • 0.38.0 - 2023-12-09
    • Update markdownlint dependency to 0.32.1
      • Remove deprecated MD002/MD006
      • Remove rule aliases for "header"
      • Add MD054/link-image-style
      • Use micromark in MD005/MD007/MD030
      • Improve MD022/MD026/MD034/MD037/MD038/MD045/MD051
    • Remove support for end-of-life Node version 16
    • Update all dependencies via Dependabot
  • 0.37.0 - 2023-09-22
    • Update markdownlint dependency to 0.31.1
      • Improve MD032/MD034/MD037/MD043/MD044/MD051/MD052
      • Improve performance
    • Update all dependencies via Dependabot
  • 0.36.0 - 2023-09-03
    • Update markdownlint dependency to 0.30.0
      • Use micromark in MD022/MD026/MD032/MD037/MD045/MD051
      • Incorporate micromark-extension-math for math syntax
      • Allow custom rules to override information URL
    • Update all dependencies via Dependabot
  • 0.35.0 - 2023-06-17
    • Update markdownlint dependency to 0.29.0
      • Update micromark parser dependencies for better performance
      • Use micromark in MD049/MD050
      • Improve MD034/MD037/MD044/MD049/MD050
    • Update all dependencies via Dependabot
  • 0.34.0 - 2023-04-30
    • Update markdownlint dependency to 0.28.2
      • Introduce micromark parser for better positional data (internal only)
      • Use micromark in MD013/MD033/MD034/MD035/MD038/MD044/MD052/MD053
    • Update all dependencies via Dependabot
  • 0.33.0 - 2023-01-07
    • Update markdownlint dependency to 0.27.0
      • Improve MD011/MD013/MD022/MD031/MD032/MD033/MD034/MD040/MD043/MD051/MD053
      • Generate/separate documentation
      • Improve documentation
    • Publish Docker container images for both linux/amd64 and linux/arm64
    • Support JSONC and YAML inside markdownlint-configure-file comments
    • Update all dependencies via Dependabot
  • 0.32.2 - 2022-08-20
    • Update markdownlint dependency to 0.26.2
      • Improve MD037/MD051/MD053
    • Update all dependencies via Dependabot
  • 0.32.1 - 2022-07-25
    • Update markdownlint dependency to 0.26.1
      • Improve MD051
    • Update all dependencies via Dependabot
  • 0.32.0 - 2022-07-16
    • Update markdownlint dependency to 0.26.0
      • Add MD051/link-fragments: Link fragments should be valid
      • Add MD052/reference-links-images: Reference links and images should use a label that is defined
      • Add MD053/link-image-reference-definitions: Link and image reference definitions should be needed (auto-fixable)
      • Improve MD010/MD031/MD035/MD039/MD042/MD044/MD049/MD050
      • Add markdownlint-disable-line inline comment
      • Support ~ paths in configuration files
      • Improve performance
    • Add .markdownlint.jsonc to list of supported configuration files
    • Remove support for end-of-life Node version 12
    • Update all dependencies via Dependabot
  • 0.31.1 - 2022-02-09
    • Automatically publish Docker container image to GitHub Packages
    • Update all dependencies via Dependabot
  • 0.31.0 - 2022-02-05
  • 0.30.0 - 2021-11-20
  • 0.29.0 - 2021-10-05
  • 0.28.1 - 2021-07-23
  • 0.28.0 - 2021-07-23
  • 0.27.1 - 2021-03-02
  • 0.27.0 - 2021-03-02
  • 0.26.0 - 2020-12-16
  • 0.25.0 - 2020-11-17
  • 0.24.0 - 2020-10-02
  • 0.23.2 - 2020-06-30
  • 0.23.1 - 2020-05-17
  • 0.23.0 - 2020-05-05
  • 0.22.0 - 2020-02-09
from markdownlint-cli GitHub release notes
Commit messages
Package name: markdownlint-cli
  • 1d2f248 Bump version 0.38.0
  • 8f3daa1 Bump ava from 6.0.0 to 6.0.1
  • aaa4119 Bump ava from 5.3.1 to 6.0.0
  • 770817b Remove support for end-of-life Node.js version 16.
  • 3e6f0dc Update tests to account for deprecation of MD002, MD006, and "header" aliases, fix new prettier issues.
  • 75b959d Bump markdownlint from 0.31.1 to 0.32.1
  • 8ca31c4 Bump ignore from 5.2.4 to 5.3.0
  • d38e228 Bump actions/setup-node from 3 to 4
  • f919a81 Bump commander from 11.0.0 to 11.1.0
  • febea62 Bump glob from 10.3.7 to 10.3.10
  • 8354710 Bump glob from 10.3.4 to 10.3.7
  • 3f18b94 Bump version 0.37.0
  • 6b233de Bump docker/setup-buildx-action from 2 to 3
  • 1040117 Bump docker/login-action from 2 to 3
  • e7eff9e Bump docker/metadata-action from 4 to 5
  • 0a0c9b8 Bump docker/build-push-action from 4 to 5
  • 0d6718c Bump docker/setup-qemu-action from 2 to 3
  • 26ac539 Bump markdownlint from 0.31.0 to 0.31.1
  • f6aa692 Bump markdownlint from 0.30.0 to 0.31.0
  • 8b08b15 Bump actions/checkout from 3 to 4
  • 1d1e5ea Bump version 0.36.0
  • 58ab41c Bump glob from 10.3.3 to 10.3.4
  • 24627da Bump execa from 7.2.0 to 8.0.1
  • 5b45a20 Bump markdownlint from 0.29.0 to 0.30.0

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants