Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: markdownlint-cli, textlint, textlint-rule-terminology #62

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

ekmixon
Copy link
Owner

@ekmixon ekmixon commented Sep 8, 2024

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name Versions Released on

markdownlint-cli
from 0.31.1 to 0.41.0 | 12 versions ahead of your current version | 3 months ago
on 2024-05-26
textlint
from 12.6.1 to 14.2.0 | 27 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 22 days ago
on 2024-08-18
textlint-rule-terminology
from 3.0.5 to 5.2.6 | 42 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-02

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Infinite loop
SNYK-JS-MARKDOWNIT-6483324
696 Proof of Concept
Release notes
Package name: markdownlint-cli
  • 0.41.0 - 2024-05-26
    • Change TOML parser to smol-toml which supports v1.0.0 of the specification
    • Update all dependencies via Dependabot
  • 0.40.0 - 2024-04-30
    • Update markdownlint dependency to 0.34.0
      • Use micromark in MD027/MD028/MD036/MD040/MD041/MD046/MD048
      • Improve MD013/MD034/MD049/MD050/MD051
    • Add support for TOML configuration files via --config
    • Add --configPointer argument for nested configuration
    • Update --ignore for directories to ignore all files within
    • Update all dependencies via Dependabot
  • 0.39.0 - 2024-01-28
    • Update markdownlint dependency to 0.33.0
      • Add MD055/table-pipe-style, MD056/table-column-count
      • Improve MD005/MD007/MD024/MD026/MD038
      • Incorporate micromark-extension-directive
      • Improve JSON schema, document validation
    • Handle trailing commas in JSONC configuration
    • Update all dependencies via Dependabot
  • 0.38.0 - 2023-12-09
    • Update markdownlint dependency to 0.32.1
      • Remove deprecated MD002/MD006
      • Remove rule aliases for "header"
      • Add MD054/link-image-style
      • Use micromark in MD005/MD007/MD030
      • Improve MD022/MD026/MD034/MD037/MD038/MD045/MD051
    • Remove support for end-of-life Node version 16
    • Update all dependencies via Dependabot
  • 0.37.0 - 2023-09-22
    • Update markdownlint dependency to 0.31.1
      • Improve MD032/MD034/MD037/MD043/MD044/MD051/MD052
      • Improve performance
    • Update all dependencies via Dependabot
  • 0.36.0 - 2023-09-03
    • Update markdownlint dependency to 0.30.0
      • Use micromark in MD022/MD026/MD032/MD037/MD045/MD051
      • Incorporate micromark-extension-math for math syntax
      • Allow custom rules to override information URL
    • Update all dependencies via Dependabot
  • 0.35.0 - 2023-06-17
    • Update markdownlint dependency to 0.29.0
      • Update micromark parser dependencies for better performance
      • Use micromark in MD049/MD050
      • Improve MD034/MD037/MD044/MD049/MD050
    • Update all dependencies via Dependabot
  • 0.34.0 - 2023-04-30
    • Update markdownlint dependency to 0.28.2
      • Introduce micromark parser for better positional data (internal only)
      • Use micromark in MD013/MD033/MD034/MD035/MD038/MD044/MD052/MD053
    • Update all dependencies via Dependabot
  • 0.33.0 - 2023-01-07
    • Update markdownlint dependency to 0.27.0
      • Improve MD011/MD013/MD022/MD031/MD032/MD033/MD034/MD040/MD043/MD051/MD053
      • Generate/separate documentation
      • Improve documentation
    • Publish Docker container images for both linux/amd64 and linux/arm64
    • Support JSONC and YAML inside markdownlint-configure-file comments
    • Update all dependencies via Dependabot
  • 0.32.2 - 2022-08-20
    • Update markdownlint dependency to 0.26.2
      • Improve MD037/MD051/MD053
    • Update all dependencies via Dependabot
  • 0.32.1 - 2022-07-25
  • 0.32.0 - 2022-07-16
  • 0.31.1 - 2022-02-09
from markdownlint-cli GitHub release notes
Package name: textlint
  • 14.2.0 - 2024-08-18

    What's Changed

    Features

    • feat(textlint-scripts): update to pkg-to-readme@3 and textlint-scripts init --yes by @ azu in #1417

    This release will reduce audit warning.

    Full Changelog: v14.1.0...v14.2.0

  • 14.1.0 - 2024-08-18

    What's Changed

    Features

    • feat(textlint): Add linter.scanFilePath API by @ azu in #1414

    Change Details

    • Update to glob@v10
    • Rewrite find-util - it is used in scanFilePath
      • Preserve old behavior by using old-find-util
      • We change this in next major updates
      • Ref #1412
    • Add linter.scanFilePath(filePath) API
    • Add tests

    linter.scanFilePath API Usage

    If you want to know the file path is lintable or not, please use scanFilePath API.

    import { createLinter, loadTextlintrc } from "textlint";
    const textlintrcDescriptor = await loadTextlintrc();
    const linter = createLinter({
        descriptor: textlintrcDescriptor
    });
    const result = await linter.scanFilePath("README.md");
    // result.status is "ok" or "ignored" or "error"
    if (result.status === "ok") {
        const lintResult = await linter.lintText("README content", "README.md");
        console.log(lintResult);
    }

    linter.scanFilePath is for combinating with lintText API because lintText API does not ignore any file.

    Dependency Updates

    • fix(deps): update dependency @ babel/preset-env to ^7.25.3 by @ renovate in #1404
    • chore(deps): update dependency eol-converter-cli to ^1.1.0 by @ renovate in #1405

    Other Changes

    New Contributors

    Full Changelog: v14.0.5...v14.1.0

  • 14.0.5 - 2024-08-07

    What's Changed

    Documentation

    Refactoring

    • refactor(markdown-to-ast): migrate to neotraverse by @ Jayllyz in #1401

    Dependency Updates

    • chore(deps): update dependency @ types/lodash to ^4.17.0 by @ renovate in #1371
    • fix(deps): update babel monorepo to ^7.24.1 (patch) by @ renovate in #1373
    • fix(deps): update babel monorepo to ^7.24.1 (minor) by @ renovate in #1374
    • fix(deps): update babel monorepo to ^7.24.3 (patch) by @ renovate in #1375
    • chore(deps): update dependency mocha to ^10.4.0 by @ renovate in #1376
    • fix(deps): update babel monorepo to ^7.24.4 (patch) by @ renovate in #1380
    • chore(deps): update dependency textlint-rule-preset-ja-spacing to ^2.4.1 by @ renovate in #1381
    • fix(deps): update babel monorepo to ^7.24.5 (patch) by @ renovate in #1385
    • fix(deps): update babel monorepo to ^7.24.6 (patch) by @ renovate in #1386
    • fix(deps): update dependency @ babel/register to ^7.24.6 by @ renovate in #1387
    • fix(deps): update babel monorepo to ^7.24.7 (patch) by @ renovate in #1390
    • chore(deps): update dependency mocha to ^10.5.0 by @ renovate in #1391
    • chore(deps): update dependency mocha to ^10.6.0 by @ renovate in #1392
    • fix(deps): update babel monorepo to ^7.24.8 (patch) by @ renovate in #1393
    • fix(deps): update dependency @ babel/core to ^7.24.9 by @ renovate in #1394
    • chore(deps): update dependency mocha to ^10.7.0 by @ renovate in #1395
    • chore(deps): update dependency chai to ^4.5.0 by @ renovate in #1396
    • fix(deps): update dependency @ babel/preset-env to ^7.25.0 by @ renovate in #1397
    • fix(deps): update dependency @ babel/preset-env to ^7.25.2 by @ renovate in #1398
    • fix(deps): update dependency @ babel/core to ^7.25.2 by @ renovate in #1399

    Other Changes

    • chore(deps): update dependency node to v18.20.0 by @ renovate in #1359
    • chore(deps): update dependency node to v18.20.1 by @ renovate in #1377
    • chore(deps): update peaceiris/actions-gh-pages action to v4 by @ renovate in #1378

    New Contributors

    Full Changelog: v14.0.4...v14.0.5

  • 14.0.4 - 2024-03-12

    What's Changed

    Bug Fixes

    Dependency Updates

    New Contributors

    Full Changelog: v14.0.3...v14.0.4

  • 14.0.3 - 2024-02-17

    What's Changed

    Bug Fixes

    • fix(formatter): fix missing is-file dependencies by @ azu in #1362

    Dependency Updates

    Full Changelog: v14.0.2...v14.0.3

  • 14.0.2 - 2024-02-11

    What's Changed

    Bug Fixes

    • add TxtCommentNode to StaticPhrasingContent by @ pddg in #1357

    New Contributors

    Full Changelog: v14.0.1...v14.0.2

  • 14.0.1 - 2024-02-04

    What's Changed

    Bug Fixes

    • fix(legacy-textlint-core): add resetRules() by @ azu in #1353

    Full Changelog: v14.0.0...v14.0.1

  • 14.0.0 - 2024-02-03

    What's Changed

    We published a blog as a release note.
    For more information, please read the following article.

    Breaking Changes

    • chore!: move gulp-textlint to out of monorepo by @ azu in #1319
    • fix(config-loader): enhance config-loader results by @ azu in #1322
    • CI: drop Node.js 16 by @ azu in #1337
    • Removes CLI from @ textlint/linter-formatter by @ kapooraryan in #1272
    • fix(textlint): remove --parallel and --maxConcurrency flag by @ azu in #1338
    • BREAKING CHANGE: textlint require Node.js v18.14.0>= by @ azu in #1343
    • BREAKING CHANGE: Change textlint-scirpts output target by @ azu in #1345

    Features

    • feat(textlint): add deprecation warning to old APIs by @ azu in #1312

    Refactoring

    • fix(kernel): remove unused TextlintConfigObject by @ azu in #1308

    CI

    • CI: add canary-release workflow by @ azu in #1350

    Dependency Updates

    • chore(deps): update dependency @ types/node to ^18.18.10 by @ renovate in #1297
    • fix(deps): update dependency @ babel/cli to ^7.23.4 by @ renovate in #1298
    • chore(deps): update patch updates (patch) by @ renovate in #1299
    • chore(deps): update dependency @ types/node to ^18.18.12 by @ renovate in #1300
    • chore(deps): update dependency @ types/node to ^18.18.13 by @ renovate in #1302
    • chore(deps): update dependency textlint-rule-helper to ^2.3.1 by @ renovate in #1303
    • fix(deps): update babel monorepo to ^7.23.5 (patch) by @ renovate in #1304
    • chore(deps): update dependency ts-node to ^10.9.2 by @ renovate in #1311
    • chore(deps): update patch updates (patch) by @ renovate in #1313
    • chore(deps): update dependency @ types/node to ^18.19.4 by @ renovate in #1314
    • fix(deps): update babel monorepo to ^7.23.7 (patch) by @ renovate in #1315
    • fix(deps): update dependency @ babel/register to ^7.23.7 by @ renovate in #1316
    • chore(deps): update dependency @ types/node to ^18.18.14 by @ renovate in #1318
    • chore(deps): update patch updates (patch) by @ renovate in #1321
    • chore(deps): update dependency chai to ^4.4.0 by @ renovate in #1323
    • chore(deps): update dependency @ types/node to ^18.19.5 by @ renovate in #1324
    • fix(deps): update dependency @ babel/preset-env to ^7.23.8 by @ renovate in #1325
    • chore(deps): update dependency @ types/node to ^18.19.6 by @ renovate in #1326
    • chore(deps): update dependency chai to ^4.4.1 by @ renovate in #1329
    • chore(deps): update dependency @ types/node to ^18.19.7 by @ renovate in #1330
    • chore(deps): update dependency @ types/node to ^18.19.8 by @ renovate in #1332
    • chore(deps): replace dependency npm-run-all with npm-run-all2 ^5.0.0 by @ renovate in #1333
    • chore(deps): update dependency npm-run-all2 to ^5.0.2 by

Snyk has created this PR to upgrade:
  - markdownlint-cli from 0.31.1 to 0.41.0.
    See this package in npm: https://www.npmjs.com/package/markdownlint-cli
  - textlint from 12.6.1 to 14.2.0.
    See this package in npm: https://www.npmjs.com/package/textlint
  - textlint-rule-terminology from 3.0.5 to 5.2.6.
    See this package in npm: https://www.npmjs.com/package/textlint-rule-terminology

See this project in Snyk:
https://app.snyk.io/org/ekmixon/project/c598cc85-edfc-4f87-b32d-cc8bcf2f1afa?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants