Skip to content

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Dec 5, 2019

Snyk has created this PR to upgrade marked from 0.6.2 to 0.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 2 versions ahead of your current version.
  • The recommended version was released 5 months ago, on 2019-07-06.

The recommended version fixes:

Severity Issue
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MARKED-451341
Release notes
Package name: marked
  • 0.7.0 - 2019-07-06

    Security

    • Sanitize paragraph and text tokens #1504
    • Fix ReDOS for links with backticks (issue #1493) #1515

    Breaking Changes

    • Deprecate sanitize and sanitizer options #1504
    • Move fences to CommonMark #1511
    • Move tables to GFM #1511
    • Remove tables option #1511
    • Single backtick in link text needs to be escaped #1515

    Fixes

    Tests

    • Run tests with correct options #1511
  • 0.6.3 - 2019-06-30

    Fixes

    Docs

    • add docs for workers #1432
    • Add security policy #1492
    • Update supported spec versions #1491
    • Update test folder descriptions #1506

    DevOps

    • Use latest commit for demo master #1457
    • Update tests to commonmark 0.29 #1465
    • Update tests to GFM 0.29 #1470
    • Fix commonmark spec 57 and 40 (headings) #1475
  • 0.6.2 - 2019-04-05

    Security

    Fixes

    • Links parens #1435
    • New line after table with escaped pipe #1439
    • List item tables #1446

    Enhancements

    • Pass token boolean to the listitem function #1440
    • Allow html without \n after #1438

    CLI

    • Update man page to include --test and fix argv parameters #1442
    • Add a --version flag to print marked version #1448

    Testing

    • Normalize marked tests #1444
    • Update tests to node 4 syntax #1449
from marked GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants