[Snyk] Upgrade prismjs from 1.20.0 to 1.29.0

[jcesarioatpeach]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade prismjs from 1.20.0 to 1.29.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 10 months ago, on 2022-08-23.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1076581	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1314893	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PRISMJS-1585202	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-597628	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-PRISMJS-2404333	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: prismjs

• 1.29.0 - 2022-08-23
  

  Release 1.29.0

• 1.28.0 - 2022-04-17
  

  Release 1.28.0

• 1.27.0 - 2022-02-17
  

  Release 1.27.0

• 1.26.0 - 2022-01-06
  

  Release 1.26.0

• 1.25.0 - 2021-09-16
  

  Release 1.25.0

• 1.24.1 - 2021-07-03
  

  Release 1.24.1

• 1.24.0 - 2021-06-27
  

  Release 1.24.0

• 1.23.0 - 2020-12-31
  

  Release 1.23.0

• 1.22.0 - 2020-10-10
  

  Release 1.22.0

• 1.21.0 - 2020-08-06
  

  Release 1.21.0

• 1.20.0 - 2020-04-04

from prismjs GitHub release notes

Commit messages

Package name: prismjs

• 59e5a34 1.29.0
• cd080f2 Updated npmignore to include new MD files (#3534)
• 751664b Added PR stop notice (#3532)
• 248f6ab Added changelog for v1.29.0 (#3533)
• 098e300 Line Highlight: Account for offset when clamping ranges (#3518)
• 6b824d4 Bash: Added "sh" alias (#3509)
• 15272f7 Website: Added third-party tutorial for Pug template (#3459)
• c8462a2 Cilk: Add support for Cilk (with C/C++) (#3522)
• 859f99a Added bqn language support (#3515)
• 0cad9ae BBj: Improve regexes (#3512)
• 1134bdf BBj Langauge Support (#3511)
• 342a003 Java: Added support for constants (#3507)
• 05ee042 Added security policy (#3070)
• 866b302 Added list of maintainers (#3410)
• a090d06 Scala: Updated keywords to support Scala 3 (#3506)
• b9512b2 Bash: Added support for parameters and the `java` and `sysctl` commands. (#3505)
• b0c2a9b NSIS: Added missing commands (#3504)
• 3a53cf0 Bump moment from 2.29.2 to 2.29.4 (#3503)
• 761b32c Bump terser from 5.12.1 to 5.14.2 (#3502)
• 2aed9ce SCSS: Fix casing in title of the `scss` lang (#3501)
• 9d603ef Docs: Add missing word (#3489)
• 3e93713 Bash: Added `cargo` command (#3488)
• c4cbeea AsciiDoc: Some regexes are too greedy (#3481)
• 5665930 Bump shell-quote from 1.7.2 to 1.7.3 (#3483)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs