[Snyk] Upgrade: , , , , , jstransformer-nunjucks, metalsmith, metalsmith-if, metalsmith-prism, metalsmith-static-files #32
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@metalsmith/drafts
⚠️ This is a major version upgrade, and may be a breaking change | 8 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
from 1.2.0 to 1.3.0 | 1 version ahead of your current version | 2 years ago
on 2022-12-07
@metalsmith/layouts
from 2.6.0 to 2.7.0 | 1 version ahead of your current version | a year ago
on 2023-04-03
@metalsmith/markdown
from 1.6.0 to 1.10.0 | 5 versions ahead of your current version | a year ago
on 2023-06-05
@metalsmith/metadata
from 0.1.0 to 0.3.0 | 3 versions ahead of your current version | a year ago
on 2023-06-11
@metalsmith/permalinks
from 2.4.0 to 3.0.1 | 5 versions ahead of your current version
on 2024-01-19
jstransformer-nunjucks
from 1.1.0 to 1.2.0 | 1 version ahead of your current version | a year ago
on 2023-07-18
metalsmith
from 2.5.1 to 2.6.3 | 4 versions ahead of your current version | 6 months ago
on 2024-03-05
metalsmith-if
from 0.1.1 to 1.0.0 | 1 version ahead of your current version
on 2024-02-16
metalsmith-prism
from 4.1.0 to 4.2.2 | 5 versions ahead of your current version | a year ago
on 2023-08-16
metalsmith-static-files
from 0.2.0 to 0.4.0 | 3 versions ahead of your current version | 7 months ago
on 2024-02-01
Issues fixed by the recommended upgrade:
SNYK-JS-INFLIGHT-6095116
SNYK-JS-NUNJUCKS-5431309
Release notes
Package name: @metalsmith/drafts
0f3dc82
b5a11b3
b5d43c7
4dd20fc
#14
c26f5f3
0183e74
5e97ec2
9427720
fa8a498
Package name: @metalsmith/layouts
#188
f8cd111
10eaa0c
771212c
507bb47
Breaking change for uncommon use case:
If you previously imported/required the
get-transformer.js
module directly from@ metalsmith/layouts/lib/get-transformer.js
, you should now require it like so:require('@ metalsmith/layouts').getTransformer
or import it like soimport layouts from '@ metalsmith/layouts'; layouts.getTransformer...
Package name: @metalsmith/markdown
#68
b8872a8
79a0939
67db54d
78eaefc
c9881d1
53feb48
d05e39a
#65
#63
2ea44cd
#62
a3b6271
5ce04b8
fd2fc65
ba9c515
#60
#61
9c53cfe
c0d1a86
Package name: @metalsmith/metadata
65d480e
73898bf
379fc4d
28a0cc5
2555da5
a63c1d3
9102291
6f4f9dc
f6d5125
e0b6f7d
#27
#19
#9
#16
#7
#8
#12
030593c
e6ad84a
6d21924
a761955
e8b0513
ca4bdf6
e370e5a
48bcefc
299ec8a
ab93171
387a0ea
c3353d8
e525a11
6b0cf69
9a8d64c
8d2ad44
d3fc01e
c9cf34a
aabfe1c
6375b00
7edb15d
bc578ef
cc8b115
965a9b5
9dbd53c
Package name: @metalsmith/permalinks
#139
4b60c50
5af7d5d
#88
#75
#131
#19
#132
3d7ea2e
7d9a2d2
7d5ca36
552b549
053e92e
b30d875
d5d199f
176515e
a1d2a2f
804e1cd
046770e
3c4bba9
#135
#134
#48
#44
#129
7e1c0dc
c7a56f1
6354c95
5d6d861
4130e03
b6ee083
5f7734c
94816a2
ffb7fcb
e1a9fe6
309e998
ec20c30
#122
#120
#121
4360a30
13e3dbf
4684767
a7f89ea
2ea03de
21bc858
Package name: jstransformer-nunjucks
Package name: metalsmith
Removed
b170cf0
Updated
774a164
chokidar
: 3.5.3 ▶︎ 3.6.0Fixed
0d8d791
3ae6275
cac48fc
,5b48dce
642a176
34239d9
Documents metalsmith.watch() getter signature in TSa719025
Normalizes ms.watch().paths to an array, allows access to a subset of chokidar options as advertised5a516b2
Sets chokidar watchOption awaitWriteFinish to false, and batch timer to 0 to speed up watching23b0944
Fixes #389: ensure not missing watcher ready event to successfully launch build05265ce
Fixes formatting issue in types JSdoc commentsAdded
58d22a3
2d84fbe
9661ddc
45a4afe
424e6ec
chokidar
9d40674
lodash.clonedeepwith
e12537f
Removed
80d8508
rimraf
: replaced with native Node.js methodsae05945
cross-spawn
:baee1de
Updated
24fcffb
4929bc2
commander
: 6.2.1 -> 10.0.124fcffb
0810728
Fixed
60e173a
excerpt
property2bfe800
acb363e
Full Changelog: v2.5.1...v2.6.0
774a164
debug
: 4.3.3 ▶︎ 4.3.4Fixed
Package name: metalsmith-if
Package name: metalsmith-prism
Package name: metalsmith-static-files
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: