Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: markedjs/marked
base: v4.0.9
Choose a base ref
...
head repository: markedjs/marked
compare: v4.0.10
Choose a head ref
  • 9 commits
  • 10 files changed
  • 5 contributors

Commits on Jan 10, 2022

  1. chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (#2354)

    Bumps [highlight.js](https://github.com/highlightjs/highlight.js) from 11.3.1 to 11.4.0.
    - [Release notes](https://github.com/highlightjs/highlight.js/releases)
    - [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
    - [Commits](highlightjs/highlight.js@11.3.1...11.4.0)
    
    ---
    updated-dependencies:
    - dependency-name: highlight.js
      dependency-type: direct:development
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] committed Jan 10, 2022
    1 Configuration menu
    Copy the full SHA
    ebc2c95 View commit details
    Browse the repository at this point in the history
  2. chore(deps-dev): Bump @babel/preset-env from 7.16.5 to 7.16.7 (#2353)

    Bumps [@babel/preset-env](https://github.com/babel/babel/tree/HEAD/packages/babel-preset-env) from 7.16.5 to 7.16.7.
    - [Release notes](https://github.com/babel/babel/releases)
    - [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
    - [Commits](https://github.com/babel/babel/commits/v7.16.7/packages/babel-preset-env)
    
    ---
    updated-dependencies:
    - dependency-name: "@babel/preset-env"
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] committed Jan 10, 2022
    Configuration menu
    Copy the full SHA
    98996b8 View commit details
    Browse the repository at this point in the history
  3. chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (#2351)

    Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 12.3.0 to 12.3.2.
    - [Release notes](https://github.com/markdown-it/markdown-it/releases)
    - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
    - [Commits](markdown-it/markdown-it@12.3.0...12.3.2)
    
    ---
    updated-dependencies:
    - dependency-name: markdown-it
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] committed Jan 10, 2022
    Configuration menu
    Copy the full SHA
    2bc67a5 View commit details
    Browse the repository at this point in the history
  4. chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (#2350)

    Bumps [rollup](https://github.com/rollup/rollup) from 2.62.0 to 2.63.0.
    - [Release notes](https://github.com/rollup/rollup/releases)
    - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
    - [Commits](rollup/rollup@v2.62.0...v2.63.0)
    
    ---
    updated-dependencies:
    - dependency-name: rollup
      dependency-type: direct:development
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] committed Jan 10, 2022
    1 Configuration menu
    Copy the full SHA
    5a84db5 View commit details
    Browse the repository at this point in the history
  5. chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (#2352)

    Bumps [jasmine](https://github.com/jasmine/jasmine-npm) from 4.0.0 to 4.0.1.
    - [Release notes](https://github.com/jasmine/jasmine-npm/releases)
    - [Commits](jasmine/jasmine-npm@v4.0.0...v4.0.1)
    
    ---
    updated-dependencies:
    - dependency-name: jasmine
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] committed Jan 10, 2022
    1 Configuration menu
    Copy the full SHA
    d7212a6 View commit details
    Browse the repository at this point in the history

Commits on Jan 13, 2022

  1. Merge pull request from GHSA-rrrm-qjm4-v8hf

    * fix: fix reflink redos
    
    Co-authored-by: MakeNowJust <make.just.on@gmail.com>
    
    * fix: fix def redos
    
    Co-authored-by: MakeNowJust <make.just.on@gmail.com>
    
    * fix block label for multiple slashes
    
    Co-authored-by: MakeNowJust <make.just.on@gmail.com>
    UziTech and makenowjust committed Jan 13, 2022
    1 Configuration menu
    Copy the full SHA
    c4a3ccd View commit details
    Browse the repository at this point in the history
  2. 1 Configuration menu
    Copy the full SHA
    8f80657 View commit details
    Browse the repository at this point in the history
  3. 🗜️ build [skip ci]

    MarkedJS bot committed Jan 13, 2022
    Configuration menu
    Copy the full SHA
    fceda57 View commit details
    Browse the repository at this point in the history
  4. chore(release): 4.0.10 [skip ci]

    ## [4.0.10](v4.0.9...v4.0.10) (2022-01-13)
    
    ### Bug Fixes
    
    * **security:** fix redos vulnerabilities ([8f80657](8f80657))
    semantic-release-bot committed Jan 13, 2022
    1 Configuration menu
    Copy the full SHA
    ae01170 View commit details
    Browse the repository at this point in the history