[Snyk] Upgrade commonmark from 0.29.3 to 0.30.0 #18

snyk-bot · 2021-06-21T21:02:28Z

Snyk has created this PR to upgrade commonmark from 0.29.3 to 0.30.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 1 version ahead of your current version.
The recommended version was released a day ago, on 2021-06-20.

Release notes

Package name: commonmark

0.30.0 - 2021-06-20
- Update tests to 0.30 spec.txt.
- Fix commonmark/cmark#383. Our optimization for emphasis parsing
  was flawed, leading to some corner cases where nested emphasis was
  parsed incorrectly.
- Allow user to specify a function to escape the output (#217, newfivefour).
- Simplify reThematicBreak.
- Fix documentation for node.listType (TheWastl). The parser produces
  lowercase strings, but the README said the strings are capitalized.
- Fix handling of type 7 HTML blocks (#213).
  They can't interrupt paragraphs (even with laziness).
- Fix link label normalization with backslash before newline (#211).
- Only match punctuation at the beginning of the string (Vladimir Pouzanov).
  This makes the punctuation use match reUnicodeWhitespaceChar usage
  in scanDelims. It's effectively a no-op, as char_after is expected
  to only contain a single character anyways.
- Recognize '01' as start number 1 (#207).
- Use rollup --banner to include license info.
- Remove dist files from the repository. Instead we now generate them
  with pretest and prepublish scripts.
- Simplify dingus Makefile.
- Fix an iframe loading timing issue in the dingus (icyrockcom).
  Closes commonmark/commonmark-spec-web#15.
0.29.3 - 2020-12-05
- Fix some rough edges around ES modules (Kyle E. Mitchell)
  (#195, #201, #203):
  - Set module types via package.json files in subdirectories.
    A number of JavaScript files were rewritten as ES
    Modules, but their extensions remained .js. That
    extension is ambiguous to newer version of the Node.js
    runtime, which can load both CommonJS modules and ES
    Modules. To fix this, we add package.json files with
    type properties to the various subdirectories. Setting
    type to "module" tells Node.js to interpret .js
    files in that directory and below as ES Modules.
    Otherwise, Node.js falls back on the package.json at
    root, which currently sets type to "commonjs".
  - Make benchmark and test use commonjs again.
  - bin: remove use of ESM and use require('../').
    Node.js version 14, which supports ES Modules without any flag or the
    esm package, is currently in long-term support. But a great many
    folks still run older version of Node.js that either don't support ES
    Modules at all or hide that support behind a feature flag.
  - Import specific functions from entities package.
  - Update "Basic Usage" comment in lib/index.js.
- Remove package-lock.json (Kyle E. Mitchell).
- Fix 'make test' target so that dist is built.
- reHtmlTag: don't use case-insensitive matching (#193).
  The spec specifies uppercase for declarations and CDATA.
- Handle piped input from stdin in windows. Use file descriptor 0
  instead of '/dev/stdin'. Note that this allows piping but doesn't
  handle the case where users run bin/commonmark and enter input
  directly. See #198 for some relevant discussion.
- Configure GitHub Actions to test on Node.js 14 and 15 (Kyle E. Mitchell).
- Allow EOL in processing instructions (#196).

from commonmark GitHub release notes

Commit messages

Package name: commonmark

961387c Update changelog.
320b4b7 Official 0.30 spec.txt.
e77722a Simplify dingus Makefile.
744fcd9 Bump to 0.30.0
a6ab293 Dingus: tweak bootstrap version
e708628 Better fix for cmark #383 regression.
79d7756 Revert "Fix counterpart to Incorrect emphasis handling commonmark/cmark#383."
519f940 Bump markdown-it and marked versions for benchmarks.
10ed0d0 Fix counterpart to Incorrect emphasis handling commonmark/cmark#383.
a9a0262 Fix regression test.
28a8358 Add failing regression test.
31ab949 Update test/spec.txt.
5f99294 Require lodash 4.17.21 or later.
80f63d1 Allow user to specify a function to escape the output (#217)
7027b34 Fixes an iframe loading timing issue
0af2fcb Simplify reThematicBreak.
26668e0 Fix documentation for `node.listType`
8f1a23f Fix handling of type 7 HTML blocks.
3c1ef74 Fix link label normalization with backslash before newline.
1e4ebca Only match punctuation at the beginning of the string
4f570c8 Add note about unpkg
83ca760 Remove obsolete 'make -C .. dist' from dingus Makefile.
ed273c3 Makefile - remove obsolete uglify reference.
62bca43 README: re-add note on bower intsall.