dc/ng2-file-upload
4
0
Fork 0
Code Issues 395 Pull Requests 27 Packages Projects Releases 4 Wiki Activity

chore(deps): bump marked and markdown-loader #1227

Open
dependabot[bot] wants to merge 1 commits from dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0 into development
pull from: dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0
merge into: dc:development
Conversation 0 Commits 1 Files Changed 2 +8 -276
dependabot[bot] commented 2022-09-28 09:10:57 +00:00 (Migrated from github.com)
Copy Link

Bumps marked to 4.1.0 and updates ancestor dependency markdown-loader. These dependencies need to be updated together.

Updates marked from 0.7.0 to 4.1.0

Release notes

Sourced from marked's releases.

v4.1.0

4.1.0 (2022-08-30)

Features

v4.0.19

4.0.19 (2022-08-21)

Bug Fixes

  • make second parameter optional on lexer.inline (#2552) (f1a9608)

v4.0.18

4.0.18 (2022-07-11)

Bug Fixes

v4.0.17

4.0.17 (2022-06-13)

Bug Fixes

  • Code and heading after list without blank line (#2483) (15f3f15)

v4.0.16

4.0.16 (2022-05-17)

Bug Fixes

v4.0.15

4.0.15 (2022-05-02)

Bug Fixes

v4.0.14

4.0.14 (2022-04-11)

... (truncated)

Commits
  • 64b22d0 chore(release): 4.1.0 [skip ci]
  • 7e2ef30 🗜️ build [skip ci]
  • 994b2e6 feat: add async option (#2474)
  • 33724a3 chore(deps-dev): Bump @​semantic-release/github from 8.0.5 to 8.0.6 (#2565)
  • 587842c chore(deps-dev): Bump eslint from 8.22.0 to 8.23.0 (#2566)
  • 4f265ab chore(deps-dev): Bump eslint-plugin-promise from 6.0.0 to 6.0.1 (#2567)
  • 17ffd61 chore(deps-dev): Bump semantic-release from 19.0.4 to 19.0.5 (#2568)
  • e422d22 chore(deps-dev): Bump @​babel/core from 7.18.10 to 7.18.13 (#2569)
  • d9c0078 chore(deps-dev): Bump uglify-js from 3.16.3 to 3.17.0 (#2562)
  • d8bcf9c chore(deps-dev): Bump rollup from 2.78.0 to 2.78.1 (#2560)
  • Additional commits viewable in compare view

Updates markdown-loader from 6.0.0 to 8.0.0

Release notes

Sourced from markdown-loader's releases.

v8.0.0

8.0.0 (2022-01-27)

  • Introduce semantic-release (65e2368)

BREAKING CHANGES

  • Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.
Changelog

Sourced from markdown-loader's changelog.

8.0.0 (2022-01-27)

  • Introduce semantic-release (65e2368)

BREAKING CHANGES

  • Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.

Changelog

7.0.0

  • Breaking: Update marked@4.0.12 to fix security issues (#82)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [marked](https://github.com/markedjs/marked) to 4.1.0 and updates ancestor dependency [markdown-loader](https://github.com/peerigon/markdown-loader). These dependencies need to be updated together. Updates `marked` from 0.7.0 to 4.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/markedjs/marked/releases">marked's releases</a>.</em></p> <blockquote> <h2>v4.1.0</h2> <h1><a href="https://github.com/markedjs/marked/compare/v4.0.19...v4.1.0">4.1.0</a> (2022-08-30)</h1> <h3>Features</h3> <ul> <li>add async option (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2474">#2474</a>) (<a href="https://github.com/markedjs/marked/commit/994b2e6127850bfa85547a202048f29b6fc26913">994b2e6</a>)</li> </ul> <h2>v4.0.19</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.18...v4.0.19">4.0.19</a> (2022-08-21)</h2> <h3>Bug Fixes</h3> <ul> <li>make second parameter optional on lexer.inline (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2552">#2552</a>) (<a href="https://github.com/markedjs/marked/commit/f1a9608201d0ccdc6fbbad392b75ef7f8a553f8f">f1a9608</a>)</li> </ul> <h2>v4.0.18</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.17...v4.0.18">4.0.18</a> (2022-07-11)</h2> <h3>Bug Fixes</h3> <ul> <li>fix heading in list item (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2520">#2520</a>) (<a href="https://github.com/markedjs/marked/commit/01c98d1c4eb42e5c4a2ad820a4a9bdb30ba10536">01c98d1</a>)</li> </ul> <h2>v4.0.17</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.16...v4.0.17">4.0.17</a> (2022-06-13)</h2> <h3>Bug Fixes</h3> <ul> <li>Code and heading after list without blank line (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2483">#2483</a>) (<a href="https://github.com/markedjs/marked/commit/15f3f157de6ec4bce90707b848c7026034388a39">15f3f15</a>)</li> </ul> <h2>v4.0.16</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.15...v4.0.16">4.0.16</a> (2022-05-17)</h2> <h3>Bug Fixes</h3> <ul> <li>fix ref links inside table (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2471">#2471</a>) (<a href="https://github.com/markedjs/marked/commit/81daa2ae47924f7da04289f7c43cbb2a1f58cfa7">81daa2a</a>)</li> </ul> <h2>v4.0.15</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.14...v4.0.15">4.0.15</a> (2022-05-02)</h2> <h3>Bug Fixes</h3> <ul> <li>list item bullet without whitespace (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2431">#2431</a>) (<a href="https://github.com/markedjs/marked/commit/9c10b4d68f43697d9e2b1c30356765ff4bdd7b9d">9c10b4d</a>)</li> </ul> <h2>v4.0.14</h2> <h2><a href="https://github.com/markedjs/marked/compare/v4.0.13...v4.0.14">4.0.14</a> (2022-04-11)</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/markedjs/marked/commit/64b22d0e9178db89690010d313b6ef7ef0460609"><code>64b22d0</code></a> chore(release): 4.1.0 [skip ci]</li> <li><a href="https://github.com/markedjs/marked/commit/7e2ef307846427650114591f9257b5545868e928"><code>7e2ef30</code></a> 🗜️ build [skip ci]</li> <li><a href="https://github.com/markedjs/marked/commit/994b2e6127850bfa85547a202048f29b6fc26913"><code>994b2e6</code></a> feat: add async option (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2474">#2474</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/33724a32014295a29900ace1d3439d116b897898"><code>33724a3</code></a> chore(deps-dev): Bump <code>@​semantic-release/github</code> from 8.0.5 to 8.0.6 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2565">#2565</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/587842c9635a1f8d17eab2d2136e7c86f9f2237f"><code>587842c</code></a> chore(deps-dev): Bump eslint from 8.22.0 to 8.23.0 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2566">#2566</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/4f265ab5cb9010dc635577d4b7893b5f2ae4351e"><code>4f265ab</code></a> chore(deps-dev): Bump eslint-plugin-promise from 6.0.0 to 6.0.1 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2567">#2567</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/17ffd611b47e5329e390281e458a2530e8edc2be"><code>17ffd61</code></a> chore(deps-dev): Bump semantic-release from 19.0.4 to 19.0.5 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2568">#2568</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/e422d226b1f5fd7411aed92ffcb7aec506eb71f9"><code>e422d22</code></a> chore(deps-dev): Bump <code>@​babel/core</code> from 7.18.10 to 7.18.13 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2569">#2569</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/d9c0078bf378c08bac43313f7c4dea2b4b355f62"><code>d9c0078</code></a> chore(deps-dev): Bump uglify-js from 3.16.3 to 3.17.0 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2562">#2562</a>)</li> <li><a href="https://github.com/markedjs/marked/commit/d8bcf9c7cd0af19248a8a61492cbe6a223dfd8bc"><code>d8bcf9c</code></a> chore(deps-dev): Bump rollup from 2.78.0 to 2.78.1 (<a href="https://github-redirect.dependabot.com/markedjs/marked/issues/2560">#2560</a>)</li> <li>Additional commits viewable in <a href="https://github.com/markedjs/marked/compare/v0.7.0...v4.1.0">compare view</a></li> </ul> </details> <br /> Updates `markdown-loader` from 6.0.0 to 8.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/peerigon/markdown-loader/releases">markdown-loader's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h1><a href="https://github.com/peerigon/markdown-loader/compare/v7.0.0...v8.0.0">8.0.0</a> (2022-01-27)</h1> <ul> <li>Introduce semantic-release (<a href="https://github.com/peerigon/markdown-loader/commit/65e23682f295296ec918e24fa25fccbdd9e8957a">65e2368</a>)</li> </ul> <h3>BREAKING CHANGES</h3> <ul> <li>Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/peerigon/markdown-loader/blob/main/CHANGELOG.md">markdown-loader's changelog</a>.</em></p> <blockquote> <h1><a href="https://github.com/peerigon/markdown-loader/compare/v7.0.0...v8.0.0">8.0.0</a> (2022-01-27)</h1> <ul> <li>Introduce semantic-release (<a href="https://github.com/peerigon/markdown-loader/commit/65e23682f295296ec918e24fa25fccbdd9e8957a">65e2368</a>)</li> </ul> <h3>BREAKING CHANGES</h3> <ul> <li>Every call to marked is isolated now. This makes sure that options from the first call won't influence options from the second call. If you've configured the markdown-loader with two different options, you might observe different behavior now. We also removed Node v8 and Node v10 support and support for older webpack versions. Webpack 5 is required now.</li> </ul> <h2>Changelog</h2> <h3>7.0.0</h3> <ul> <li><strong>Breaking:</strong> Update marked@4.0.12 to fix security issues (<a href="https://github-redirect.dependabot.com/peerigon/markdown-loader/issues/82">#82</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/peerigon/markdown-loader/commit/9d20f8538921e6ff6daf9a17b52870fcf78482ca"><code>9d20f85</code></a> chore(release): 8.0.0 [skip ci]</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/65e23682f295296ec918e24fa25fccbdd9e8957a"><code>65e2368</code></a> Introduce semantic-release</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/de0be90f397b1613cc7681b7a21775e6882f5765"><code>de0be90</code></a> Update README</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/f2d9bf91fc5c8a37865b262021c9c6f7e34aae2f"><code>f2d9bf9</code></a> Setup GitHub actions workflow</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/96b75a27aca9e4fe24aec304b57d52facc89800c"><code>96b75a2</code></a> Add comment about trampolin module</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/2a7e8c1495fc338e74cdd979c2cbab25efc8bafb"><code>2a7e8c1</code></a> Add Prettier</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/fc3e3cb40c73c7d36eeb14c226f2a0e10488c0d6"><code>fc3e3cb</code></a> Make webpack 5 a peer dependency</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/9c1292a588208c9819dde254da5f4fa83f69cf29"><code>9c1292a</code></a> Add ESLint</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/24da889ee6a0b1568f23f53a330665f8ac399f07"><code>24da889</code></a> Add .nvmrc</li> <li><a href="https://github.com/peerigon/markdown-loader/commit/a3c0a7840e6a48eef31107e91251106effe09d77"><code>a3c0a78</code></a> Remove old files</li> <li>Additional commits viewable in <a href="https://github.com/peerigon/markdown-loader/compare/v6.0.0...v8.0.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/valor-software/ng2-file-upload/network/alerts). </details>
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0:dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0
git checkout dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
bug
dependencies
Pull requests that update a dependency file
 duplicate
enhancement
greenkeeper
help wanted
in progress
invalid
need to reproduce
question
status: pending
wontfix
No Label dependencies
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
allan medjedovic root sabhas
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dc/ng2-file-upload#1227
Delete Branch "dependabot/npm_and_yarn/marked-and-markdown-loader-4.1.0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?