[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change
	Information Disclosure SNYK-JS-KINDOF-537849	Yes

Commit messages

Package name: hexo

The new version differs by 250 commits.

• 7fba3c1 3.9.0
• 9d09d2e DisableNunjucks: true should render markdown code block (#3573)
• 61cbc62 chore(stale): stale bot limit to only issue (#3555)
• 6e6ee20 add another test case (disableNunjucks === false) for PR #3573
• d21aa32 add unit test for disableNunjucks property of renderer; PR #3573 https://github.com/code block in markdown are not rendered correctly after set disableNunjucks to true hexojs/hexo#3573
• 61781ad chore(deps-dev): replace deprecated istanbul with nyc (#3570)
• 995097e fix the issue that code blocks in markdown are rendered as placeholder after disabling nunjucks
• 1b432c3 Merge pull request #3571 from weyusi/marked
• 18aa36c chore: remove .npmignore (#3569)
• 1345eaf test: fix new line
• e4c1748 chore(deps-dev): update hexo-renderer-marked requirement from ^0.3.0 to ^1.0.1
• a83280f chore(deps): update hexo-cli requirement from ^1.1.0 to ^2.0.0 (#3567)
• 244e482 updating ISSUE_TEMPLATE.md (#3562)
• a6dc0ea chore: update README for Contributing (#3522)
• 1323f96 add nodejs min version + ask for github repo (#3509)
• 979c988 Merge pull request #3399 from xiaomingplus/master
• 2a96c85 test: add unit test for asset id
• 9ec56ac Merge branch 'master' of github.com:hexojs/hexo
• 6b9acc0 chore(stale): update stale exemptLabels setting (#3458)
• 8cdf12a chore(deps-dev): update mocha requirement from ^5.0.5 to ^6.0.0 (#3460)
• 4c3a431 Merge pull request #3404 from chigix/work-toc-fix
• 00c6114 throw error on missing partial (#3413)
• dc7e7fc Ignore plugins whose name is started with "@types/" (#3431)
• cd7682b fix: scope of the getId function definition for `toc` helper

See the full diff

Package name: hexo-deployer-git

The new version differs by 56 commits.

• eed4219 1.0.0
• 288b415 docs(readme): update installation section
• ca449bb chore(package): specify files to shrink package size
• eeb6110 Update babel-eslint requirement from ^7.2.1 to ^10.0.1 (fix typo vuejs/v2.vuejs.org#116)
• d21879b Merge pull request Fixed a typo vuejs/v2.vuejs.org#115 from hexojs/dependabot/npm_and_yarn/hexo-fs-tw-1.0.0
• 3815504 Merge branch 'master' into dependabot/npm_and_yarn/hexo-fs-tw-1.0.0
• cc4b9bf Merge pull request fix tag vuejs/v2.vuejs.org#113 from hexojs/dependabot/npm_and_yarn/chai-tw-4.2.0
• 49c9f2a Merge pull request Translate filters guide to Korean vuejs/v2.vuejs.org#114 from hexojs/dependabot/npm_and_yarn/chalk-tw-2.4.1
• 6e3dcda Update hexo-fs requirement from ^0.2.0 to ^1.0.0
• 0118112 Update chalk requirement from ^1.1.3 to ^2.4.1
• 529935e Update chai requirement from ^3.5.0 to ^4.2.0
• 5e179c6 Merge pull request typo vuejs/v2.vuejs.org#111 from YoshinoriN/update-ci-service-node-version
• e6414bb Merge pull request Translate guide index (ko)(wip) vuejs/v2.vuejs.org#110 from YoshinoriN/update-vulnerabilities-dependencies
• bb99329 Update ci services target nodejs version
• de9fadb Disable no-useless-escape of eslint rule on repository regular expression line
• acdfa8f Fix indent
• 7f37848 Delete jscs & update eslint
• 1c67b6d Update mocha 5.2.0
• 4a2e283 Add Notice on pushing github errors
• 30b863f Use modern nodejs versions in appveyor.yml (Update link vuejs/v2.vuejs.org#101)
• d236fff Merge pull request Fix typo vuejs/v2.vuejs.org#100 from h404bi/master
• 86af0f2 Replace swig with swig-templates
• 5c1d3df fix(Small improvements vuejs/v2.vuejs.org#86): fix the install command in npm@5 ([Typo] 删除多余的字母W vuejs/v2.vuejs.org#89)
• 456bb1a Inherit stdio for spawned git process (Correct typo in components lifecycle vuejs/v2.vuejs.org#82)

See the full diff

Package name: hexo-generator-feed

The new version differs by 7 commits.

• 79fa418 Update package.json
• cbe2672 Make default length of content configurable (Vuejs logo license vuejs/v2.vuejs.org#51)
• 1b75605 Support for "atom:icon" Element (vuejs.org website translation vuejs/v2.vuejs.org#57)
• 16398e5 ignore posts which were set as draft in the front-matter ([Snyk] Fix for 58 vulnerabilities #44)
• 19ab397 Merge pull request fix broken demo vuejs/v2.vuejs.org#47 from daiyitastic/daiyi/update-readme
• cdca00c Update readme
• 7288860 Add 'content' config var to readme

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic