[Snyk] Upgrade @metalsmith/permalinks from 2.3.0 to 2.4.1 #177

snyk-bot · 2022-11-26T19:09:39Z

Snyk has created this PR to upgrade @metalsmith/permalinks from 2.3.0 to 2.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 2 versions ahead of your current version.
The recommended version was released a month ago, on 2022-10-31.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-UGLIFYJS-3113873	311/1000 Why? Recently disclosed, CVSS 4.8	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @metalsmith/permalinks

2.4.1 - 2022-10-31
- Updates regexparam 2.0.0 -> 2.0.1, debug 4.3.3 -> 4.3.4 309e998
- Dropped support for Node < 12 ec20c30
2.4.0 - 2022-01-30
- Resolves #122: remove deprecated substitute pkg, add regexparam instead #122
- Fixes #120: default linkset options should be overwritten by other linksets #120
- Resolves #121: Align dot & repo files with core plugins #121
- Update debug to 4.3.3, moment to 2.29.1, slugify to 1.6.5 4360a30 13e3dbf
- feat: proper jsdocs, cleaner option handling code 4684767
- feat: allow optional pattern placeholder a7f89ea
- fix: remove console.log typo, fix few README typo's 2ea03de
- Fixes debug channel to '@ metalsmith/permalinks' 21bc858
2.3.0 - 2021-05-29
2.3.0

from @metalsmith/permalinks GitHub release notes

Commit messages

Package name: @metalsmith/permalinks

6f4599b Release 2.4.1
01c0235 ci: upgrade GH actions
d5d0541 chore: rename master to main
f548092 dev: package.json scripts, formatting
309e998 Updates regexparam 2.0.0 -> 2.0.1, debug 4.3.3 -> 4.3.4
ec20c30 Dropped support for Node < 12
9176a8d dev: update .eslintrc.yml & fix no-use-before-define error
0481154 dev: update devDependencies & fix security issues
bb79a44 ci: migrate from Travis to GH actions
5faed4c Release 2.4.0
8ba86a7 chore: fix readme typo, add missing release-it
30caa64 chore: update CHANGELOG.md
a7f89ea feat: allow optional pattern placeholder
796a7f0 chore: remove rimraf devDep, format with prettier
13e3dbf Update slugify 1.6.4 -> 1.6.5
6f225b3 Resolves build(deps): bump moment from 2.29.1 to 2.29.4 #122: remove deprecated substitute pkg, add regexparam instead
4684767 feat: proper jsdocs, cleaner option handling code
2ea03de fix: remove console.log typo, fix few README typo's
dd8ec97 chore: fix typo in package.json
4360a30 Update debug to 4.3.3, moment to 2.29.1, slugify to 1.6.4
48b4fa2 Fixes [Snyk] Upgrade sass from 1.45.2 to 1.52.3 #120: default linkset options should be overwritten by other linksets
21bc858 Fixes debug channel to '@ metalsmith/permalinks'
60e75da Resolves build(deps-dev): bump nock from 13.2.1 to 13.2.8 #121: Align dot & repo files with core plugins