Bump debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks #108

dependabot · 2023-01-11T18:51:18Z

Bumps debug to 2.6.9 and updates ancestor dependencies debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks. These dependencies need to be updated together.

Updates debug from 0.7.4 to 2.6.9

Release notes

Sourced from debug's releases.

2.6.9

Patches

Remove ReDoS regexp in %o formatter: #504

Credits

Huge thanks to @zhuangya for their help!

release 2.6.7

No release notes provided.

release 2.6.6

No release notes provided.

release 2.6.5

No release notes provided.

release 2.6.4

No release notes provided.

release 2.6.3

No release notes provided.

release 2.6.2

No release notes provided.

release 2.6.1

No release notes provided.

release 2.6.0

No release notes provided.

release 2.5.2

No release notes provided.

release 2.5.1

No release notes provided.

release 2.4.5

No release notes provided.

release 2.4.4

No release notes provided.

release 2.4.3

No release notes provided.

release 2.4.2

No release notes provided.

... (truncated)

Changelog

Sourced from debug's changelog.

2.6.9 / 2017-09-22

remove ReDoS regexp in %o formatter (#504)

2.6.8 / 2017-05-18

Fix: Check for undefined on browser globals (#462, @marbemac)

2.6.7 / 2017-05-16

Fix: Update ms to 2.0.0 to fix regular expression denial of service vulnerability (#458, @hubdotcom)

Fix: Inline extend function in node implementation (#452, @dougwilson)

Docs: Fix typo (#455, @msasad)

2.6.5 / 2017-04-27

Fix: null reference check on window.documentElement.style.WebkitAppearance (#447, @thebigredgeek)

Misc: clean up browser reference checks (#447, @thebigredgeek)

Misc: add npm-debug.log to .gitignore (@thebigredgeek)

2.6.4 / 2017-04-20

Fix: bug that would occure if process.env.DEBUG is a non-string value. (#444, @LucianBuzzo)

Chore: ignore bower.json in npm installations. (#437, @joaovieira)

Misc: update "ms" to v0.7.3 (@tootallnate)

2.6.3 / 2017-03-13

Fix: Electron reference to process.env.DEBUG (#431, @paulcbetts)

Docs: Changelog fix (@thebigredgeek)

2.6.2 / 2017-03-10

Fix: DEBUG_MAX_ARRAY_LENGTH (#420, @slavaGanzin)

Docs: Add backers and sponsors from Open Collective (#422, @piamancini)

Docs: Add Slackin invite badge (@tootallnate)

2.6.1 / 2017-02-10

Fix: Module's export default syntax fix for IE8 Expected identifier error

Fix: Whitelist DEBUG_FD for values 1 and 2 only (#415, @pi0)

... (truncated)

Commits

13abeae Release 2.6.9
f53962e remove ReDoS regexp in %o formatter (#504)
52e1f21 Release 2.6.8
2482e08 Check for undefined on browser globals (#462)
6bb07f7 release 2.6.7
15850cb Fix Regular Expression Denial of Service (ReDoS)
4a6c85c update "debug" to v1.0.0 (#454)
b68dbf8 Fix typo (#455)
1351d2f Inline extend function in node implementation (#452)
c211947 update version for component
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by tootallnate, a new releaser for debug since your current version.

Updates metalsmith-collections from 0.7.0 to 0.9.0

Changelog

Sourced from metalsmith-collections's changelog.

Changelog

v1.3.0 / 2022-09-27

Provides dual ESM/CJS bundle 61430d4

Adds Typescript types support 9f9b36c

Replaced debug with metalsmith.debug 8df9e65 (by @leviwheatcroft)

v1.2.2 / 2022-07-28

Resolves [#102](https://github.com/segmentio/metalsmith-collections/issues/102): removes multimatch dependency, uses metalsmith.match instead

Drops support for Metalsmith < 2.4.1

Drops support for Node < 12

v1.2.1 / 2022-02-03

Fixes [#99](https://github.com/segmentio/metalsmith-collections/issues/99): collection key on file metadata - no dupes, no nested arrays

Fixes regression: incorrect previous & next refs when reverse: true

Fixes typo's in README

v1.2.0 / 2022-01-29

Feature: sortBy now also understands nested metadata properties, e.g. sortBy: 'meta.display.order'

Fixed JSDoc typo that made type hints unavailable

Documented limit & refer options

Improved README.md with more elaborate examples

Refactored to cleaner code

Removed dependencies: extend,uniq

Added dependency lodash.get

Added core-plugin tests

Updated devDependencies release-it, prettier, eslint

v1.1.0 / 2021-15-12

Added standardised code formatting and QA [#86](https://github.com/segmentio/metalsmith-collections/issues/86)

Updated History with v1 PRs [#85](https://github.com/segmentio/metalsmith-collections/issues/85)

Added better JSDoc types, return named plugin function 3aa3443

Updated multimatch to 4.0.0, debug to 4.3.3 71d6f65

[1.0.0][] / 2018-10-17

Fixed API and merged many PRs

Allow metadata-based filtering with filterBy option

removed unused module

Add documentation: sortBy can be a function

display only matching files when debugging

assign data.path where undefined

Clear collections

Added multiple collections syntax to Readme.md

Commits

d30f750 0.9.0
393f31a updated package.json
381f45a Merge pull request #67 from woodyrew/multimatch
8c36d63 Multimatch: Added
caa1c45 Merge pull request #51 from rgladwell/filename
8163c4e Added file name data to collection items
See full diff in compare view

Updates metalsmith-markdown from 0.2.2 to 1.3.0

Changelog

Sourced from metalsmith-markdown's changelog.

[1.3.0][] - 2019-10-30

Updated packages

marked v0.7.0

eslint

eslint-config-prettier

eslint-plugin-prettier

mocha

prettier

[1.2.0][] - 2019-02-20

Docs updated

Updated packages

debug

marked

eslint

eslint-config-prettier

eslint-plugin-prettier

mocha

prettier

[1.1.0][] - 2018-10-26

Updated packages

debug

marked

eslint

eslint-config-prettier

eslint-plugin-prettier

prettier

[1.0.1][] - 2018-09-14

Added Prettier and ESLint

Updated Badges

Updated debug package

[1.0.0][] - 2018-07-17

Fixed API

Upgraded to Marked 0.4.0 #31

Fixed security issue with Buffer #29

Ensure key is string #24

Cross platform path separators (Windows) #16

Strict file endings #10

Allow missing keys #9

Docs: Usage with highlighting lib #6

Updated all packages

Commits

082f13f 1.3.0
d05756c Updated history with latest version
8fd54b0 Merge pull request #44 from segmentio/maintenance
da9bcb0 Updated Packages and history
c72799c History listing updated with comparisons
2a4eede 1.2.0
a1a360e Updated packages
766d1b6 Merge pull request #36 from firmgently/docs-patch-custom-renderer-info
22a1015 example corrected
95cea93 docs clarify how to use custom renderer
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by woodyrew, a new releaser for metalsmith-markdown since your current version.

Updates metalsmith-permalinks from 0.4.1 to 2.2.0

Changelog

Sourced from metalsmith-permalinks's changelog.

[2.2.0][] - 2019-02-21

Added functionality to extend slugify

Updated Docs

Previous

[2.1.0][] - 2019-01-31

Added functionality to make URIs unique or report error

Tests added

Test boiler plate removed

[2.0.1][] - 2019-01-31

Fixed permalink override option

Test added

[2.0.0][] - 2018-10-15

Migrated to slugify to fix security issues: slug options changed slightly

Tests added

[1.0.0][] - 2018-09-06

Published latest version and fixed API by releasing v1

[0.4.0][] - 2014-09-02

Published latest version and fixed API by releasing v1

[0.3.2][] - 2014-06-11

add permalink: false option to disable permalinking

[0.3.1][] - 2014-06-02

fix installing substitute dependency

[0.3.0][] - 2014-04-02

fix backslashes in permalinks on windows

cleanup tests

[0.2.2][] - 2014-03-14

fix relative file copying

add option to turn off relative file copying

[0.2.1][] - 2014-03-14

... (truncated)

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

…h-permalinks Bumps [debug](https://github.com/debug-js/debug) to 2.6.9 and updates ancestor dependencies [debug](https://github.com/debug-js/debug), [metalsmith-collections](https://github.com/segmentio/metalsmith-collections), [metalsmith-markdown](https://github.com/segmentio/metalsmith-markdown) and [metalsmith-permalinks](https://github.com/segmentio/metalsmith-permalinks). These dependencies need to be updated together. Updates `debug` from 0.7.4 to 2.6.9 - [Release notes](https://github.com/debug-js/debug/releases) - [Changelog](https://github.com/debug-js/debug/blob/2.6.9/CHANGELOG.md) - [Commits](debug-js/debug@0.7.4...2.6.9) Updates `metalsmith-collections` from 0.7.0 to 0.9.0 - [Release notes](https://github.com/segmentio/metalsmith-collections/releases) - [Changelog](https://github.com/metalsmith/collections/blob/main/CHANGELOG.md) - [Commits](metalsmith/collections@0.7.0...v0.9.0) Updates `metalsmith-markdown` from 0.2.2 to 1.3.0 - [Release notes](https://github.com/segmentio/metalsmith-markdown/releases) - [Changelog](https://github.com/metalsmith/markdown/blob/main/CHANGELOG.md) - [Commits](metalsmith/markdown@0.2.2...v1.3.0) Updates `metalsmith-permalinks` from 0.4.1 to 2.2.0 - [Release notes](https://github.com/segmentio/metalsmith-permalinks/releases) - [Changelog](https://github.com/metalsmith/permalinks/blob/main/CHANGELOG.md) - [Commits](https://github.com/segmentio/metalsmith-permalinks/commits/v2.2.0) --- updated-dependencies: - dependency-name: debug dependency-type: indirect - dependency-name: metalsmith-collections dependency-type: direct:production - dependency-name: metalsmith-markdown dependency-type: direct:production - dependency-name: metalsmith-permalinks dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Jan 11, 2023

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks #108

Bump debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks #108

dependabot bot commented on behalf of github Jan 11, 2023

Bump debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks #108

Are you sure you want to change the base?

Bump debug, metalsmith-collections, metalsmith-markdown and metalsmith-permalinks #108

Conversation

dependabot bot commented on behalf of github Jan 11, 2023

2.6.9

Patches

Credits

release 2.6.7

release 2.6.6

release 2.6.5

release 2.6.4

release 2.6.3

release 2.6.2

release 2.6.1

release 2.6.0

release 2.5.2

release 2.5.1

release 2.4.5

release 2.4.4

release 2.4.3

release 2.4.2

2.6.9 / 2017-09-22

2.6.8 / 2017-05-18

2.6.7 / 2017-05-16

2.6.5 / 2017-04-27

2.6.4 / 2017-04-20

2.6.3 / 2017-03-13

2.6.2 / 2017-03-10

2.6.1 / 2017-02-10

Changelog

v1.3.0 / 2022-09-27

v1.2.2 / 2022-07-28

v1.2.1 / 2022-02-03

v1.2.0 / 2022-01-29

v1.1.0 / 2021-15-12

[1.0.0][] / 2018-10-17

[1.3.0][] - 2019-10-30

[1.2.0][] - 2019-02-20

[1.1.0][] - 2018-10-26

[1.0.1][] - 2018-09-14

[1.0.0][] - 2018-07-17

[2.2.0][] - 2019-02-21

Previous

[2.1.0][] - 2019-01-31

[2.0.1][] - 2019-01-31

[2.0.0][] - 2018-10-15

[1.0.0][] - 2018-09-06

[0.4.0][] - 2014-09-02

[0.3.2][] - 2014-06-11

[0.3.1][] - 2014-06-02

[0.3.0][] - 2014-04-02

[0.2.2][] - 2014-03-14

[0.2.1][] - 2014-03-14