[Snyk] Fix for 1 vulnerabilities

[one3chens]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hexo

The new version differs by 250 commits.

• c749815 Hexo 6.0.0 (#4750)
• 5977928 chore: bump actions/stale from 3 to 4 (#4828)
• 8ac908a Cleanup dependabot (#4820)
• 11b145c Switch to picocolors (#4825)
• 3ed6fd9 fix(post): escape swig full tag with args (#4824)
• 902cd70 chore: bump sinon from 11.1.2 to 12.0.1 (#4810)
• 0c6380c refactor: native Array.flat() (#4806)
• ed0f239 perf(tag/helper): memoize (#4789)
• 2ec4f63 chore: bump eslint from 7.32.0 to 8.0.0 (#4799)
• 0f534b2 chore: bump hexo-log from 2.0.0 to 3.0.0 (#4794)
• 098cf0a perf(external_link): optimize regexp (#4790)
• 02cbfe3 fix(processor): remove race condition failsafe (#4791)
• 9edbc99 fix(#4780): empty tag name correction (#4786)
• b56ba65 refactor/perf: use nanocolors (#4788)
• b3bd7d4 chore: bump husky from 4.3.8 to 7.0.2 (#4763)
• 9c9b2a5 fix(#4780): curly brackets (#4784)
• a342422 perf: overall improvements (#4783)
• 6f702fc feat: load hexo plugin in the theme's package.json (#4771)
• a2ec6b2 feat(open_graph): different URLs for og:image and twitter:image (#4748)
• 0c979bf refactor(post): use state machine to escape swig tag (#4780)
• 67fc844 doc: add homebrew install (#4724)
• 6164db1 chore: bump sinon from 10.0.1 to 11.1.2 (#4747)
• c18d575 chore: bump mocha from 8.4.0 to 9.1.1 (#4765)
• bb61f15 chore: drop Node 10 (#4779)

See the full diff

Package name: hexo-generator-feed

The new version differs by 7 commits.

• 79fa418 Update package.json
• cbe2672 Make default length of content configurable (Helpdesk #@ 1800 882 0652 AVG technical support phone number.*AVG support phone number*AVG customer support phone number. vuejs/v2.cn.vuejs.org#51)
• 1b75605 Support for "atom:icon" Element ($$$ 1 844 247 1987 $$$ Dell Printer tech support phone number, Dell printer Tech supp $$$  vuejs/v2.cn.vuejs.org#57)
• 16398e5 ignore posts which were set as draft in the front-matter (24*7 Epson printer 1-800-439-2949 Customer Support Phone Number vuejs/v2.cn.vuejs.org#44)
• 19ab397 Merge pull request 24*7 Kodak printer 1-800-439-2949 Customer Support Phone Number vuejs/v2.cn.vuejs.org#47 from daiyitastic/daiyi/update-readme
• cdca00c Update readme
• 7288860 Add 'content' config var to readme

See the full diff

Package name: hexo-server

The new version differs by 114 commits.

• 0ffb748 chore: bump version from 2.0.0 to 3.0.0 (最近搜索结果都变成英文了 vuejs/v2.cn.vuejs.org#195)
• 2f6e4b8 chore(docs): update badges (Add Korean to dropdown vuejs/v2.cn.vuejs.org#194)
• 9d582d6 refactor: use the WHATWG URL API instead of `url.format` (翻译有误 vuejs/v2.cn.vuejs.org#193)
• b79c72b chore(deps): bump mime from 2.5.2 to 3.0.0 (Update list.md 大小写修改 vuejs/v2.cn.vuejs.org#181)
• 00c2027 chore: drop nodejs 10.x (Update mixins.md vuejs/v2.cn.vuejs.org#192)
• 6db91dc chore(deps-dev): bump sinon from 11.1.2 to 12.0.1 (官网文档与master分支不同步 vuejs/v2.cn.vuejs.org#183)
• 04dd7d6 chore(deps-dev): bump eslint from 8.1.0 to 8.5.0 (关于计算属性一节的翻译讨论 vuejs/v2.cn.vuejs.org#190)
• 799dd34 chore(deps-dev): bump hexo from 5.4.0 to 6.0.0 (“介绍”页 代码少一个闭合标签 vuejs/v2.cn.vuejs.org#191)
• a253e04 chore(deps): bump open from 8.3.0 to 8.4.0 (cn.vuejs.org移动版，左上角导航列表点击无效 vuejs/v2.cn.vuejs.org#179)
• bf2da7a Cleanup dependant config
• f33dc00 chore(deps-dev): bump mocha from 8.4.0 to 9.1.3 (新版本文档的示例代码中用了不存在的属性 vuejs/v2.cn.vuejs.org#176)
• 207ae51 chore(deps-dev): bump eslint from 7.32.0 to 8.1.0 (Update v2/api/index.md vuejs/v2.cn.vuejs.org#178)
• 27efa8d chore(deps-dev): bump sinon from 10.0.1 to 11.1.2 (Render 函数翻译疑异 vuejs/v2.cn.vuejs.org#167)
• 7adcfca Switch to picocolors (函数化组件 vuejs/v2.cn.vuejs.org#177)
• ecb1a5d chore(deps): bump open from 8.2.1 to 8.3.0 (列表渲染，案例演示错误 vuejs/v2.cn.vuejs.org#172)
• 01ef59c refactor: replace chalk with nanocolors (网页在Chrome浏览器顶部透明 vuejs/v2.cn.vuejs.org#171)
• 6048415 feat: check if header has already been set (24*7 Canon printer 1-800-439-2949 Customer Support Phone Number vuejs/v2.cn.vuejs.org#49)
• 14f5592 chore(deps-dev): bump supertest from 5.0.0 to 6.1.3 (移动端主页侧边栏按钮点击无效 vuejs/v2.cn.vuejs.org#147)
• c3294cf fix: send correct MIME for rss file (贡献者列表 vuejs/v2.cn.vuejs.org#145)
• cc1ff81 chore(deps): bump open from 7.4.2 to 8.0.9 (Update forms.md vuejs/v2.cn.vuejs.org#159)
• 5a786bd chore(deps-dev): bump sinon from 9.2.4 to 10.0.1 (Update installation.md vuejs/v2.cn.vuejs.org#154)
• 95ec110 Upgrade to GitHub-native Dependabot (關於树形视图 範例中使用了 ":model" 這樣的方法 vuejs/v2.cn.vuejs.org#157)
• 571d235 chore(deps-dev): bump supertest from 4.0.2 to 5.0.0 (列表渲染出来的多个勾选框绑定到同一数组目测有bug vuejs/v2.cn.vuejs.org#141)
• 5693469 Merge pull request 请问 Vue 2.0 的翻译是否可以合并进来？ vuejs/v2.cn.vuejs.org#140 from curbengh/v2.0.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.