[Snyk] Upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0

[CCKNBC]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

✨ Snyk has automatically assigned this pull request, set who gets assigned.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2022-05-21.

Release notes

Package name: hexo-renderer-stylus

• 2.1.0 - 2022-05-21
  

  Dependencies

  • chore(deps-dev): bump hexo from 5.4.0 to 6.0.0 by @ dependabot in #69
  • chore(deps-dev): bump hexo from 6.0.0 to 6.1.0 by @ dependabot in #85
  • chore(deps-dev): bump hexo from 6.1.0 to 6.2.0 by @ dependabot in #95
  • chore(deps-dev): bump eslint from 7.32.0 to 8.1.0 by @ dependabot in #66
  • chore(deps-dev): bump eslint from 8.5.0 to 8.6.0 by @ dependabot in #70
  • chore(deps-dev): bump eslint from 8.6.0 to 8.7.0 by @ dependabot in #73
  • chore(deps-dev): bump eslint from 8.7.0 to 8.11.0 by @ dependabot in #84
  • chore(deps-dev): bump eslint from 8.11.0 to 8.15.0 by @ dependabot in #94
  • chore(deps-dev): bump eslint-config-hexo from 4.2.0 to 5.0.0 by @ dependabot in #71
  • chore(deps-dev): bump mocha from 8.4.0 to 9.0.0 by @ dependabot in #62
  • chore(deps-dev): bump mocha from 9.1.3 to 9.2.0 by @ dependabot in #74
  • chore(deps-dev): bump mocha from 9.2.0 to 9.2.2 by @ dependabot in #86
  • chore(deps): bump actions/setup-node from 2 to 3 by @ dependabot in #80
  • chore(deps): bump actions/checkout from 2 to 3 by @ dependabot in #83
  • chore(deps-dev): bump chai from 4.3.4 to 4.3.6 by @ dependabot in #76
  • chore(deps): bump stylus from 0.56.0 to 0.57.0 by @ dependabot in #87
  • chore(deps): bump stylus from 0.54.8 to 0.55.0 by @ dependabot in #63
  • chore(deps): bump prismjs from 1.25.0 to 1.27.0 by @ dependabot in #81
  • chore(deps): bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #88
  • chore(deps): bump moment from 2.29.1 to 2.29.2 by @ dependabot in #90

  Misc

  • Fix typo by @ stevenjoezhang in #58
  • Upgrade to GitHub-native Dependabot by @ dependabot-preview in #61
  • Switch to github actions by @ tomap in #67
  • fix: Lcov file not found by @ iChenLei in #97

  New Contributors

  • @ stevenjoezhang made their first contribution in #58
  • @ dependabot made their first contribution in #62
  • @ iChenLei made their first contribution in #97

  Full Changelog: 2.0.1...2.1.0

• 2.0.1 - 2020-09-05
  

  Fix

  • fix: enable disableNunjucks to avoid rendering nunjucks tag [#55]
    • it's now safe to use:

    div::before
      content: "{{}}"
    

from hexo-renderer-stylus GitHub release notes

Commit messages

Package name: hexo-renderer-stylus

• 4535a33 release: 2.1.0 ([Snyk] Fix for 11 vulnerabilities #96)
• 78e0290 chore(deps-dev): bump hexo from 6.1.0 to 6.2.0 ([Snyk] Security upgrade cheerio from 1.0.0-rc.10 to 1.0.0 #95)
• 308f5c4 chore(deps-dev): bump eslint from 8.11.0 to 8.15.0 (fix(deps): update dependency hexo to v7 [security] #94)
• 152f588 fix: Lcov file not found ([Snyk] Security upgrade hexo-renderer-stylus from 2.0.1 to 2.1.0 #97)
• 942a542 chore(deps): bump moment from 2.29.1 to 2.29.2 ([Snyk] Security upgrade hexo-algoliasearch from 1.0.0 to 1.1.0 #90)
• 53b23c5 chore(deps): bump minimist from 1.2.5 to 1.2.6 ([Snyk] Upgrade hexo-cli from 4.3.0 to 4.3.1 #88)
• c6d5929 chore(deps): bump prismjs from 1.25.0 to 1.27.0 (chore(deps): update dependency json5 to 2.2.2 [security] - autoclosed #81)
• b71b30a chore(deps): bump stylus from 0.56.0 to 0.57.0 (chore(deps): update dependency hexo-generator-sitemap to v3 #87)
• f38765b chore(deps-dev): bump chai from 4.3.4 to 4.3.6 (build(deps): bump decode-uri-component from 0.2.0 to 0.2.2 #76)
• 6863e79 chore(deps): bump actions/checkout from 2 to 3 (chore(deps): update actions/cache action to v2.1.8 #83)
• e6eddb4 chore(deps-dev): bump eslint from 8.7.0 to 8.11.0 (fix(deps): update dependency cheerio to v1.1.2 #84)
• 460392d chore(deps-dev): bump mocha from 9.2.0 to 9.2.2 (chore(deps): update actions/checkout action to v3 - autoclosed #86)
• a1ad9b8 chore(deps-dev): bump hexo from 6.0.0 to 6.1.0 (fix(deps): update dependency hexo-renderer-stylus to v2.1.0 #85)
• 5f13a59 chore(deps): bump actions/setup-node from 2 to 3 (chore(deps): update dependency decode-uri-component to 0.2.1 [security] - autoclosed #80)
• 0616f55 chore(deps-dev): bump mocha from 9.1.3 to 9.2.0 (build(deps): bump minimatch from 3.0.4 to 3.1.2 #74)
• fe50dbe chore(deps-dev): bump eslint from 8.6.0 to 8.7.0 (chore(deps): update dependency moment-timezone to 0.5.35 [security] - autoclosed #73)
• 8dda10f chore(deps-dev): bump eslint-config-hexo from 4.2.0 to 5.0.0 (build(deps): bump moment from 2.29.1 to 2.29.4 #71)
• bff80f7 chore(deps-dev): bump eslint from 8.5.0 to 8.6.0 (chore(deps): update dependency ejs to 3.1.7 [security] - autoclosed #70)
• db40493 chore(deps-dev): bump hexo from 5.4.0 to 6.0.0 (chore(deps): update dependency ansi-regex [security] - autoclosed #69)
• 2bac254 Switch to github actions (chore(deps): update dependency moment to 2.29.4 [security] - autoclosed #67)
• 76b522b chore(deps-dev): bump eslint from 7.32.0 to 8.1.0 (chore(deps): update dependency minimist [security] - abandoned #66)
• f6d1729 chore(deps): bump stylus from 0.54.8 to 0.55.0 (chore(deps): update dependency prismjs to 1.27.0 [security] - abandoned #63)
• 5e0bb3f chore(deps-dev): bump mocha from 8.4.0 to 9.0.0 (build(deps): bump prismjs from 1.25.0 to 1.27.0 #62)
• dd2465f Upgrade to GitHub-native Dependabot ([Snyk] Security upgrade hexo-renderer-marked from 4.0.0 to 5.0.0 #61)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs