Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump pug from 2.0.0-rc.2 to 3.0.1 #273

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github Jun 3, 2021

Bumps pug from 2.0.0-rc.2 to 3.0.1.

Release notes

Sourced from pug's releases.

[email protected]

Bug Fixes

  • Update with to resolve core-js deprecation notice (#3259)

[email protected]

Bug Fixes

  • Sanitise the pretty option (#3314)

    If a malicious attacker could control the pretty option, it was possible for them to achieve remote code execution on the server rendering the template. All pug users should upgrade as soon as possible, see #3312 for more details.

[email protected]

Bug Fixes

  • Properly handle non-string values when rethrowing errors (#3269)

[email protected]

Breaking Changes

  • Drop support for node 6 and 8 (#3243)

Bug Fixes

  • wrap setting err.message with a try/catch (#2996)

[email protected]

Breaking Changes

  • Drop support for node 6 and 8 (#3243)

[email protected]

Breaking Changes

  • Drop support for node 6 and 8 (#3243)

New Features

  • Support EachOf nodes (#3179)

[email protected]

Breaking Changes

  • read plugins must now return Buffer if you want to support filters that use renderBuffer (#3213)

  • Drop support for node 6 and 8 (#3243)

New Features

  • File nodes now get a raw property that is a Buffer, in addition to the str (#3213)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by pug-bot, a new releaser for pug since your current version.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jun 3, 2021
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 5 times, most recently from 804263c to 20abe8b Compare June 3, 2021 12:32
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 5 times, most recently from c9cb32f to 9766ad9 Compare July 3, 2021 11:41
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 2 times, most recently from 3e9a3a8 to 3f199a1 Compare August 12, 2021 18:15
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 4 times, most recently from fb841d0 to ad2f1e5 Compare January 18, 2022 17:37
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 3 times, most recently from 373e79e to 4a57d79 Compare February 19, 2022 16:34
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 4a57d79 to cf3cd94 Compare April 12, 2022 15:06
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 4 times, most recently from d692b16 to 18e8da4 Compare April 26, 2022 21:58
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 18e8da4 to 2128622 Compare April 27, 2022 17:41
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 3 times, most recently from 3f05209 to f0af26a Compare May 12, 2022 08:11
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from f0af26a to 999cdf8 Compare September 16, 2022 14:10
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 999cdf8 to 291a68f Compare September 30, 2022 11:41
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 291a68f to 8156b75 Compare October 9, 2022 23:28
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 8156b75 to 3cb4465 Compare October 31, 2022 16:12
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch 2 times, most recently from 5b2e665 to 553cfa6 Compare November 25, 2022 10:01
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 553cfa6 to e05bb75 Compare December 6, 2022 13:16
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from e05bb75 to fbf92df Compare January 11, 2023 09:41
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from fbf92df to 9743e96 Compare March 4, 2023 00:25
Bumps [pug](https://github.com/pugjs/pug) from 2.0.0-rc.2 to 3.0.1.
- [Release notes](https://github.com/pugjs/pug/releases)
- [Commits](https://github.com/pugjs/pug/compare/[email protected]@3.0.1)

---
updated-dependencies:
- dependency-name: pug
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/pug-3.0.1 branch from 9743e96 to 08aaed2 Compare March 30, 2023 14:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants