Update dependency marked to v5 #243

mend-for-github-com · 2023-05-02T11:39:34Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
marked (source)	`0.3.9` -> `5.1.0`

Release Notes

markedjs/marked

`v5.1.0`

Compare Source

Bug Fixes

Simplify unicode punctuation (#2841) (f19fe76)

Features

add Marked instance (#2831) (353e13b)

`v5.0.5`

Compare Source

Bug Fixes

Fix more Escape conflicts (#2838) (f879a23)

`v5.0.4`

Compare Source

Bug Fixes

Add Unicode punctuations (#2811) (b213f02)
fix hr after list (#2809) (efc40df)
Replace custom repeatString function with repeat() (#2820) (72ee2d6)

`v5.0.3`

Compare Source

Bug Fixes

fix quadratic execution in em mask (#2818) (a37fe8e)

`v5.0.2`

Compare Source

Bug Fixes

Clarify deprecation messages for default parameters (#2802) (763e9de)

`v5.0.1`

Compare Source

Bug Fixes

only warn if langPrefix is changed (#2796) (d193694)
The deprecated options warnings can be turned off by default by using:
```
marked.use({
  mangle: false,
  headerIds: false,
});
```
For the cli you can use:
```
marked --no-mangle --no-header-ids ...
```

`v5.0.0`

Compare Source

Bug Fixes

deprecate options (#2766) (62d3312)
update min node to v18 (#2767) (c6852f5)

Features

add block param to html renderer (#2768) (fa21b9f)

BREAKING CHANGES

Warnings will be logged to the console if these options are used including headerIds, mangle, and langPrefix which are on by default.
These warnings can be turned off by default by using:
```
marked.use({
  mangle: false,
  headerIds: false,
});
```
If you need these options you can use the extensions listed below.

deprecate options

Option	Replacement
`highlight`, `langPrefix`, and `callback`	marked-highlight
`mangle`	marked-mangle
`baseUrl`	marked-base-url
`smartypants`	marked-smartypants
`xhtml`	marked-xhtml
`headerIds` and `headerPrefix`	marked-gfm-heading-id

minimum supported node version v18

`v4.3.0`

Compare Source

Bug Fixes

always return promise if async (#2728) (042dcc5)
fenced code doesn't need a trailing newline (#2756) (3acbb7f)

Features

add preprocess and postprocess hooks (#2730) (9b452bc)

`v4.2.12`

Compare Source

Sorry for all of the quick releases. We were testing out different ways to build the files for releases. v4.2.5 - v4.2.12 have no changes to how marked works. The only addition is the version number in the comment in the build files.

Bug Fixes

revert to build script in ci (d2ab474)

`v4.2.11`

Compare Source

Bug Fixes

just build in version (22ac2cf)

`v4.2.10`

Compare Source

Bug Fixes

use version (fd759b3)

`v4.2.9`

Compare Source

Bug Fixes

fix version (96380c3)

`v4.2.8`

Compare Source

`v4.2.7`

Compare Source

Bug Fixes

fix build file version (94fa76f)

`v4.2.6`

Compare Source

Bug Fixes

add version to build files (79b8c0b)

`v4.2.5`

Compare Source

Bug Fixes

fix paragraph continuation after block element (#2686) (1bbda68)
fix tabs at beginning of list items (#2679) (e692634)

`v4.2.4`

Compare Source

Bug Fixes

loose list items are loose (#2672) (df4eb0e)
remove quotes at the end of gfm autolink (#2673) (697ac2a)
use paragraph token in blockquote in list (#2671) (edc857c)

`v4.2.3`

Compare Source

Bug Fixes

fix entity specs (#2652) (36a2b63)
fix link reference definitions specs (#2654) (b7eea95)
fix marked.use with multiple args (#2651) (73a7bf5)
fix multiline setext headings (#2655) (4aee878)

`v4.2.2`

Compare Source

Bug Fixes

fix escape characters in links (#2628) (44a2a23)

`v4.2.1`

Compare Source

Bug Fixes

Support escapes within emphasis (#2627) (377823a), closes #2280

`v4.2.0`

Compare Source

Features

export bin/marked (#2629) (bd8aad9)

`v4.1.1`

Compare Source

Bug Fixes

remove smartLists from docs and code (#2596) (f6ba2e3), closes #2582 #2582 #2582 #2582 #2582 #2582 #2582

`v4.1.0`

Compare Source

Features

add async option (#2474) (994b2e6)

`v4.0.19`

Compare Source

Bug Fixes

make second parameter optional on lexer.inline (#2552) (f1a9608)

`v4.0.18`

Compare Source

Bug Fixes

fix heading in list item (#2520) (01c98d1)

`v4.0.17`

Compare Source

Bug Fixes

Code and heading after list without blank line (#2483) (15f3f15)

`v4.0.16`

Compare Source

Bug Fixes

fix ref links inside table (#2471) (81daa2a)

`v4.0.15`

Compare Source

Bug Fixes

list item bullet without whitespace (#2431) (9c10b4d)

`v4.0.14`

Compare Source

Bug Fixes

only convert leading tabs to spaces (#1559) (#2434) (7d19665)

`v4.0.13`

Compare Source

Bug Fixes

allow emStrong regex to consume more characters at once (#2433) (35583c3)

`v4.0.12`

Compare Source

Bug Fixes

fix nbsp after table (#2372) (ed66bf8)

`v4.0.11`

Compare Source

Bug Fixes

fix blank line after table header (#2332) (6e1f923)

`v4.0.10`

Compare Source

Bug Fixes

security: fix redos vulnerabilities (8f80657)

`v4.0.9`

Compare Source

Bug Fixes

retain line breaks in tokens properly (#2341) (a9696e2)

`v4.0.8`

Compare Source

Bug Fixes

spaces on a newline after a table (#2319) (f82ea2c)

`v4.0.7`

Compare Source

Bug Fixes

Fix every third list item broken (#2318) (346b162), closes #2314

`v4.0.6`

Compare Source

Bug Fixes

speed up parsing long lists (#2302) (e0005d8)

`v4.0.5`

Compare Source

Bug Fixes

table after paragraph without blank line (#2298) (5714212)

`v4.0.4`

Compare Source

Bug Fixes

fix cli (#2294) (ab2977a)

`v4.0.3`

Compare Source

Bug Fixes

build min from umd (#2283) (ea26ea9)

`v4.0.2`

Compare Source

Bug Fixes

Create separate CJS and UMD builds (#2281) (62faaf4)

`v4.0.1`

Compare Source

Bug Fixes

Set commonJS code as main in package.json (#2276) (7e636d5)

`v4.0.0`

Compare Source

Bug Fixes

Convert to ESM (#2227) (4afb228)

BREAKING CHANGES

Default export removed. Use import { marked } from 'marked' or const { marked } = require('marked') instead.
/lib/marked.js removed. Use /marked.min.js in script tag instead.
When using marked in a script tag use marked.parse(...) instead of marked(...)

`v3.0.8`

Compare Source

Bug Fixes

walkTokens uses marked as this (#2251) (2da5885)

`v3.0.7`

Compare Source

Bug Fixes

use named exports only for ESM build (#2226)

`v3.0.6`

Compare Source

Bug Fixes

Remove esm interop (#2225) (4bc9121)

`v3.0.5`

Compare Source

Bug Fixes

Expose named exports for ESM build (#2223) (3959651)

`v3.0.4`

Compare Source

Bug Fixes

fix detection of orphaned emStrong delimiters (#2203) (7792adc)

`v3.0.3`

Compare Source

Bug Fixes

fix space at end of table line (#2201) (910f0f0)

`v3.0.2`

Compare Source

Bug Fixes

stop table at lines with only whitespace (#2188) (21268ab)

`v3.0.1`

Compare Source

Bug Fixes

fix gfm urls after link (#2186) (e03b5c1)

`v3.0.0`

Compare Source

Bug Fixes

Tokenizers lex their own child tokens (#2124) (288f1cb)
Add module field to package.json (#2143) (edc2e6d)
Drop node 10 support (#2157) (433b16f)
Full Commonmark compliance for Lists (#2112) (eb33d3b)
Refactor table tokens (#2166) (bc400ac)

BREAKING CHANGES

Drop support for node 10.
Add module field to package.json

Tokenizers will create their own tokens with this.lexer.inline(text, tokens). The inline function will queue the token creation until after all block tokens are created.
Extensions tokenizer this object will include the lexer as a property. this.inlineTokens becomes this.lexer.inline.
Extensions renderer this object will include the parser as a property. this.parseInline becomes this.parser.parseInline.
tag and inlineText tokenizer function signatures have changed.

nptable tokenizer is removed and merged with table tokenizer.
table tokens header property changed to contain an array of objects for each header cell with text and tokens properties.
table tokens cells property changed to rows and is an array of rows where each row contains an array of objects for each cell with text and tokens properties.

v2 table token:

{
  "type": "table",
  "align": [null, null],
  "raw": "| a | b |\n|---|---|\n| 1 | 2 |\n",
  "header": ["a", "b"],
  "cells": [["1", "2"]],
  "tokens": {
    "header": [
      [{ "type": "text", "raw": "a", "text": "a" }],
      [{ "type": "text", "raw": "b", "text": "b" }]
    ],
    "cells": [[
      [{ "type": "text", "raw": "1", "text": "1" }],
      [{ "type": "text", "raw": "2", "text": "2" }]
    ]]
  }
}

v3 table token:

{
  "type": "table",
  "align": [null, null],
  "raw": "| a | b |\n|---|---|\n| 1 | 2 |\n",
  "header": [
    {
      "text": "a",
      "tokens": [{ "type": "text", "raw": "a", "text": "a" }]
    },
    {
      "text": "b",
      "tokens": [{ "type": "text", "raw": "b", "text": "b" }]
    }
  ],
  "rows": [
    {
      "text": "1",
      "tokens": [{ "type": "text", "raw": "1", "text": "1" }]
    },
    {
      "text": "2",
      "tokens": [{ "type": "text", "raw": "2", "text": "2" }]
    }
  ]
}

`v2.1.3`

Compare Source

Bug Fixes

update commonmark spec to v0.30 (#2113) (62d6a0e)

`v2.1.2`

Compare Source

Bug Fixes

add Node.js 10 to CI and loosen engines field (#2119) (8659353)

`v2.1.1`

Compare Source

Bug Fixes

fix node v12 (#2109) (af14068)

`v2.1.0`

Compare Source

Features

Custom Tokenizer/Renderer extensions (#2043) (5be9d6d)

`v2.0.7`

Compare Source

Bug Fixes

em strong (#2075) (825a9f8)

`v2.0.6`

Compare Source

Bug Fixes

fix autolink email after single space (#2073) (6c9a899)

`v2.0.5`

Compare Source

Bug Fixes

call walkTokens when calling marked with a callback(#2060) (1d97308)

`v2.0.4`

Compare Source

Bug Fixes

Fix indented markdown in html (#2052) (6435ac9)

`v2.0.3`

Compare Source

Bug Fixes

actually add a type property to the def token (#2002) (47e65cf)

`v2.0.2`

Compare Source

Bug Fixes

add type property on def token (#2001) (009427f)

`v2.0.1`

Compare Source

Bug Fixes

fix items between lists (#1936) (46cdfc1)

`v2.0.0`

Compare Source

Bug Fixes

Join adjacent inlineText tokens (#1926) (f848e77)
Total rework of Emphasis/Strong (#1864) (7293251)

BREAKING CHANGES

em and strong tokenizers have been merged into one emStrong tokenizer.
code and text tokenizers do not get passed all tokens as a second parameter.
No longer supporting IE 11. IE 11 may still work but we are not committed to making sure it works with every update. We still provide an es5 version in lib/marked.js but some pollyfills may be needed for IE 11 in the future.

`v1.2.9`

Compare Source

Bug Fixes

allow sublist to be single space in pedantic (#1924) (1e36afd)

`v1.2.8`

Compare Source

Bug Fixes

leave whitespace only lines alone (#1889) (53c79ee)

`v1.2.7`

Compare Source

Bug Fixes

Replace use of startsWith and endsWith with regex for IE11 (#1877) (4fdde20), closes #1876

`v1.2.6`

Compare Source

Bug Fixes

fix atx heading and make regex safe (#1853) (70ee29c)
possible breaking change: When using the block.heading rule the text provided in capture group 2 will not be trimmed of whitespace.
fix link with angle brackets around href (#1851) (656c3e4)

`v1.2.5`

Compare Source

Bug Fixes

fix em and strong starting with special char (#1832) (f9bc93b)
task lists not rendered when GFM is disabled (#1825) (3942e89), closes #1823

`v1.2.4`

Compare Source

Bug Fixes

no strikethrough on different number of tildes (#1821) (d79f210)

Possible Breaking Change: When using the inline.del rule the text is provided in capture group 2 instead of 1.

`v1.2.3`

Compare Source

Bug Fixes

list alignment (#1810) (5f9cafd)

`v1.2.2`

Compare Source

Bug Fixes

remove string.repeat for ie11 (#1772) (2707070)

`v1.2.1`

Compare Source

re-release of v 1.1.2 since semantic release picked up the wrong version

`v1.2.0`: 1.2.0

Compare Source

Features

Add dry run capabilities to default slugger #1728
Parse inline #1761

Fixes

Fix html comments #1739
Fix line break #1746
Fix indented tables to follow gfm spec #1748
Fix underscore adjacent to asterisk #1755

Dependencies

Regenerate lock file #1736

Documentation

Add api dingus for babelmark #1742
Update docs to use static build step and clean URLs via Vercel #1749

`v1.1.2`

Compare Source

Bug Fixes

fix indented code in list item (#1762) (6355ac2)

`v1.1.1`: 1.1.1

Compare Source

Fixes

Fix image links with escaped brackets #1683
Fix async highlight not async #1685
Fix ordered lists that use ) delimiter #1704
Pass many more Em and Strong tests #1686 (Thanks @calculuschild)

Docs

Add favicon #1710
Decode hash #1712
Clarify level of support for Markdown flavors #1720
Fix quick ref #1729

Scripts

Add npm run rules #1726

`v1.1.0`: 1.1.0

Compare Source

Features

Add walkTokens option #1664

Fixes

Fix renderer.code includes space at beginning of each line of code #1645
Fix codespan newline #1652
Fix comma after underscore emphasis #1660
Fix loose task list with no tokens #1674
Add browser field in package.json pointing to es5 output #1661
Add newline to rendered code with language #1670
Fix async highlighter walking all tokens #1664

Docs

Add tokenizer to option docs #1662

`v1.0.0`: 1.0.0

Compare Source

Breaking changes

Add inline tokens to marked.lexer output #1627
Treat escape token same way as plain text tokens #1642
Add Tokenizer to allow extending token creation #1637

Features

Add marked.use() method to extend options #1646

Fixes

Fix intra-word emphasis can match the wrong asterisks #1636
Fix italics modifier (_) breaks links containing underscores #1641
Fix closing delimited * incorrect for consecutive ocurrences #1644

Docs

Fix lexer data token in demo #1638

CI

Move to GitHub Actions #1635
Update devDependencies #1648

`v0.8.2`: 0.8.2

Compare Source

Fixes

Add html to TextRenderer for html in headings #1622
Remove html tags in heading ids #1622

Docs

Update comment about GitHub breaks #1620

`v0.8.1`: 0.8.1

Compare Source

Fixes

Fix marked --help #1588
Fix GFM Example 116 code fences #1600
Send inline html to renderer #1602 (fixes #1601)
Improve docs example for invoking highlight.js #1603
Fix block-level elements breaking tables #1598 (fixes #1467)
break nptables on block-level structures #1617

`v0.8.0`: 0.8.0

Compare Source

Breaking changes

Remove substitutions #1532
Separate source into modules #1563 #1572 #1573 #1575 #1576 #1581

Fixes

Fix relative urls in baseUrl option #1526
Loose task list #1535
Fix image parentheses #1557
remove module field & update devDependencies #1581

Docs

Update examples with es6+ #1521
Fix link to USING_PRO.md page #1552
Fix typo in USING_ADVANCED.md #1558
Node worker threads are stable #1555

Dev Dependencies

Update deps #1516
Update eslint #1542
Update htmldiffer async matcher #1543

`v0.7.0`: 0.7.0

Compare Source

Security

Sanitize paragraph and text tokens #1504
Fix ReDOS for links with backticks (issue #1493) #1515

Breaking Changes

Deprecate sanitize and sanitizer options #1504
Move fences to CommonMark #1511
Move tables to GFM #1511
Remove tables option #1511
Single backtick in link text needs to be escaped #1515

Fixes

Fix parentheses around a link #1509
Fix headings (issue #1510) #1511

Tests

Run tests with correct options #1511

`v0.6.3`: 0.6.3

Compare Source

Fixes

Fix nested blockquotes #1464
Fix <em> issue with mixed content #1451
revert #1464 #1497
Fix breaks: true #1507

Docs

add docs for workers #1432
Add security policy #1492
Update supported spec versions #1491
Update test folder descriptions #1506

DevOps

Use latest commit for demo master #1457
Update tests to commonmark 0.29 #1465
Update tests to GFM 0.29 #1470
Fix commonmark spec 57 and 40 (headings) #1475

`v0.6.2`: 0.6.2

Compare Source

Security

Link redos #1426
Text redos #1460

Fixes

Links parens #1435
New line after table with escaped pipe #1439
List item tables #1446

Enhancements

Pass token boolean to the listitem function #1440
Allow html without \n after #1438

CLI

Update man page to include --test and fix argv parameters #1442
Add a --version flag to print marked version #1448

Testing

Normalize marked tests #1444
Update tests to node 4 syntax #1449

`v0.6.1`: 0.6.1

Compare Source

Fixes

Fix parenthesis url redos #1414

Docs

Update demo site to use a worker #1418
Update devDependencies to last stable #1409
Update documentation about extending Renderer #1417
Remove --save option as it isn't required anymore #1422
Add snyk badge #1420

`v0.6.0`: 0.6.0

Compare Source

Breaking Changes

Drop support for Node v0.10 and old browsers such as Internet Explorer
- You should not have any problems if using Node 4+ or a modern browser
Add parameter slugger to Renderer.prototype.heading method #1401
- You should not have any problems if you do not override this method

New Features

Add new export marked.Slugger #1401

Fixes

Fix emphasis followed by a punctuation #1383
Fix bold around autolink email address #1385
Make autolinks case insensitive #1384
Make code fences compliant with Commonmark spec #1387
Make blockquote paragraph continuation compliant with Commonmark spec #1394
Make ordered list marker length compliant with Commonmark spec #1391
Make empty list items compliant with Commonmark spec #1395
Make tag escaping compliant with Commonmark spec #1397
Make strong/bold compliant with Commonmark spec #1400
Fix handling of adjacent lists #684
Add better error handling when token type cannot be found #1005
Fix duplicate heading id and non-latin characters #1401

CLI

Pretty print ENOENT errors on cli #1396
Update repo url in man #1403

Docs

Fix breaks option description #1381
Update docs to include "Since" version #1382
Add defibrillator badge for @mccraveiro #1392

Tests

Remove old test covered by gfm/cm #1389

`v0.5.2`: 0.5.2

Compare Source

Bug Fixes

Fix emphasis closing by single _ (part of left-flanking run) #1351
Make URL handling consistent between links and images #1359

Other

Add missing semicolons, add lint rule #1340
Make Steven (@styfle) a npm publisher #1346
Fix typo in docs: responsibility #1364
Add the ability to specify options on the demo page as JSON #1357
- Show red border when JSON options are invalid #1360
Move license file back to root dir #1356
Fix builds: remove node v0.10 from travis matrix #1366
- This does not a break compatibility in this release but it will a future release
Add files key to package.json to prevent publishing unused files #1367

`v0.5.1`: 0.5.1

Compare Source

Security

Fix inline code regex and prevent REDOS #1337
Use @markedjs/html-differ to prevent REDOS #1331

Bug Fixes

Fix typographic substitution in (pre|code|kbd|script) blocks when smartypants=true #1335
Fix auto-linking email address #1338

Other

Refactor the escape() function to improve performance 10-20% #975
Update copyright in source code #1326
Update benchmark tests #1019
Add dependency badges to readme #1333

`v0.5.0`: 0.5.0

Compare Source

Security

Use rtrim, not unsafe /X+$/ #1260

Breaking Changes

Fix GFM empty table cells #1262
Fix GFM extended auto-linking requiring multiple backpedals #1293
Fix GFM strikethrough compatibility #1258
Fix issues link references and prototypes #1299
Fix hard line break when backslash at EOL #1303
Fix hyperlinks with parenthesis #1305
Fix loose lists #1304
Fix strong and em #1315

Docs

Fix typo in USING_ADVANCED.md #1276
Add pictures to AUTHORS.md #1272
Change badge to latest version of marked #1300
Change badges from shields.io to badgen.net #1317
Use iframe to sandbox generated html #1295
Add additional links into readme #1310
Add missing parameters for renderer methods #1311
Add undocumented option descriptions #1312
Add navigation sidebar to the docs #1316

CI

Change travis clone depth to 3 #1270

`v0.4.0`

Compare Source

Security Fixes

Fix unsafe heading regex (#1224)
Fix unsafe link regex (#1223, #1227)

New Features

Add option to disable heading ids (#1190)
Add support for GFM Task Lists to comply with the GFM spec (#1250)

Breaking Changes

Fix escaping pipes in tables (#1239)
Fix html output for tables to match GFM spec (#1245)
Fix many bugs to reach parity with CommonMark spec (#1135)
Fix new Renderer() so it uses default options (#1203)
Fix text and paragraph return types (#1248) (#1249)
Fix <em> less than 3 chars (#1181)
Fix <pre> code blocks so there is no more trailing \n (#1266)
Fix default langPrefix to

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

mend-for-github-com bot force-pushed the whitesource-remediate/marked-5.x branch 2 times, most recently from f4543cb to a6a0633 Compare May 11, 2023 17:55

mend-for-github-com bot force-pushed the whitesource-remediate/marked-5.x branch 2 times, most recently from 90f2720 to e48cb63 Compare May 31, 2023 02:23

mend-for-github-com bot force-pushed the whitesource-remediate/marked-5.x branch from e48cb63 to 4b28b4d Compare June 7, 2023 10:41

Update dependency marked to v5

4d7604a

mend-for-github-com bot force-pushed the whitesource-remediate/marked-5.x branch from 4b28b4d to 4d7604a Compare June 10, 2023 06:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency marked to v5 #243

Update dependency marked to v5 #243

mend-for-github-com bot commented May 2, 2023 •

edited

Update dependency marked to v5 #243

Are you sure you want to change the base?

Update dependency marked to v5 #243

Conversation

mend-for-github-com bot commented May 2, 2023 • edited

Release Notes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

BREAKING CHANGES

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

BREAKING CHANGES

Bug Fixes

Bug Fixes

mend-for-github-com bot commented May 2, 2023 •

edited