-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[Snyk] Upgrade @docusaurus/core from 3.0.0 to 3.4.0 #46
Conversation
Snyk has created this PR to upgrade @docusaurus/core from 3.0.0 to 3.4.0. See this package in npm: @docusaurus/core See this project in Snyk: https://app.snyk.io/org/abuchtela/project/b5ab1679-eaee-4452-98f5-337f62e5bc2d?utm_source=github&utm_medium=referral&page=upgrade-pr
The latest updates on your projects. Learn more about Vercel for Git ↗︎
|
🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎ To accept the risk, merge this PR and you will not be notified again.
Next stepsWhat is an install script?Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts. Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead. Take a deeper look at the dependencyTake a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev. Remove the packageIf you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency. Mark a package as acceptable riskTo ignore an alert, reply with a comment starting with
|
Quality Gate passedIssues Measures |
This issue is stale because it has been open 45 days with no activity. Remove the |
This PR was automatically created by Snyk using the credentials of a real user.
![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)
Snyk has created this PR to upgrade @docusaurus/core from 3.0.0 to 3.4.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 9 versions ahead of your current version.
The recommended version was released on 21 days ago.
Release notes
Package name: @docusaurus/core
3.4.0 (2024-05-31)
🚀 New Feature
create-docusaurus
,docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-theme-classic
,docusaurus-utils-validation
,docusaurus-utils
tags.yml
, predefined list of tags (@ OzakIOne)docusaurus-theme-translations
docusaurus-plugin-client-redirects
,docusaurus-plugin-content-blog
,docusaurus-plugin-pwa
,docusaurus-plugin-sitemap
,docusaurus-theme-search-algolia
,docusaurus-types
,docusaurus-utils
,docusaurus
docusaurus-module-type-aliases
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-types
,docusaurus
🐛 Bug Fix
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-utils
docusaurus-theme-search-algolia
contextualSearch: false
setting (@ ncoughlin)docusaurus-mdx-loader
,docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-utils
docusaurus-theme-translations
docusaurus
docusaurus serve
broken for assets when using trailingSlash (@ slorber)docusaurus-theme-classic
,docusaurus-theme-common
docusaurus-plugin-content-docs
,docusaurus
configurePostCss()
should run afterconfigureWebpack()
(@ slorber)docusaurus-utils
,docusaurus
docusaurus-theme-classic
,docusaurus-theme-translations
📝 Documentation
<details>
(@ tats-u){<...>...</...>}
if don't use Markdown in migra… (@ tats-u)🤖 Dependencies
Committers: 11
v3.3.2
v3.3.1
3.3.0 (2024-05-03)
🚀 New Feature
docusaurus-plugin-sitemap
docusaurus-mdx-loader
,docusaurus-types
,docusaurus
siteConfig.markdown.anchors.maintainCase
(@ iAdramelk)docusaurus
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-plugin-debug
,docusaurus-types
,docusaurus
docusaurus-plugin-content-pages
,docusaurus-theme-classic
,docusaurus-theme-common
🐛 Bug Fix
docusaurus-cssnano-preset
,docusaurus-utils
,docusaurus
docusaurus-theme-classic
<Tabs>
props should allow overriding defaults (@ gagdiez)<Admonition>
should render properly without heading/icon (@ andrmaz)docusaurus
docusaurus serve
redirects should include the site/baseUrl/
prefix (@ slorber)docusaurus-module-type-aliases
,docusaurus-preset-classic
,docusaurus-theme-classic
,docusaurus-theme-live-codeblock
,docusaurus
docusaurus-theme-translations
docusaurus-theme-search-algolia
docusaurus-plugin-content-docs
,docusaurus
docusaurus-plugin-content-docs
docusaurus-utils
log.showSignature=true
(@ slorber)🏃♀️ Performance
docusaurus
💅 Polish
docusaurus-theme-classic
docusaurus-theme-common
📝 Documentation
déja
todéjà
inswizzling.mdx
(@ Zwyx)ThemedImage
example work out of the box (@ lebalz)🤖 Dependencies
🔧 Maintenance
create-docusaurus
,docusaurus-cssnano-preset
,docusaurus-logger
,docusaurus-mdx-loader
,docusaurus-plugin-client-redirects
,docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-plugin-debug
,docusaurus-plugin-google-analytics
,docusaurus-plugin-google-gtag
,docusaurus-plugin-google-tag-manager
,docusaurus-plugin-ideal-image
,docusaurus-plugin-pwa
,docusaurus-plugin-sitemap
,docusaurus-plugin-vercel-analytics
,docusaurus-preset-classic
,docusaurus-remark-plugin-npm2yarn
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-theme-live-codeblock
,docusaurus-theme-mermaid
,docusaurus-theme-search-algolia
,docusaurus-theme-translations
,docusaurus-utils-common
,docusaurus-utils-validation
,docusaurus-utils
,docusaurus
,eslint-plugin
,lqip-loader
,stylelint-copyright
Committers: 20
3.2.1 (2024-04-04)
🐛 Bug Fix
docusaurus
📝 Documentation
🤖 Dependencies
Committers: 2
3.2.0 (2024-03-29)
🚀 New Feature
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-plugin-sitemap
,docusaurus-types
,docusaurus-utils
,docusaurus
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-utils-validation
,docusaurus-utils
docusaurus-plugin-debug
,docusaurus-types
,docusaurus
docusaurus-theme-translations
docusaurus-plugin-content-blog
docusaurus
create-docusaurus
,docusaurus-utils
docusaurus-plugin-vercel-analytics
docusaurus-mdx-loader
🐛 Bug Fix
docusaurus-mdx-loader
docusaurus-theme-search-algolia
docusaurus-plugin-content-blog
docusaurus-theme-classic
docusaurus-theme-translations
docusaurus-utils
docusaurus
docusaurus-remark-plugin-npm2yarn
docusaurus-theme-classic
,docusaurus-theme-translations
🏃♀️ Performance
docusaurus-types
,docusaurus-utils
,docusaurus
docusaurus-types
,docusaurus
docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-types
,docusaurus
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-utils
docusaurus
💅 Polish
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-theme-classic
,docusaurus-theme-common
docusaurus-plugin-content-blog
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-types
docusaurus-plugin-content-docs
📝 Documentation
🤖 Dependencies
🔧 Maintenance
docusaurus-plugin-client-redirects
,docusaurus-plugin-content-docs
,docusaurus-utils-common
,docusaurus-utils-validation
,docusaurus-utils
,docusaurus
docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-utils
Committers: 22
3.1.1 (2024-01-26)
🐛 Bug Fix
docusaurus-types
,docusaurus
docusaurus
hostname
parameter when using… (@ jack-robson)docusaurus-utils
mdx-code-block
info string (@ eitsupi)create-docusaurus
docusaurus-theme-common
docusaurus-theme-classic
,docusaurus-theme-mermaid
docusaurus-module-type-aliases
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-utils
,docusaurus
🏃♀️ Performance
docusaurus
💅 Polish
docusaurus-theme-classic
Committers: 6
3.1.0 (2024-01-05)
🚀 New Feature
docusaurus-mdx-loader
,docusaurus-module-type-aliases
,docusaurus-theme-classic
,docusaurus-types
,docusaurus-utils
,docusaurus
onBrokenAnchors
config (@ OzakIOne)docusaurus-mdx-loader
,docusaurus-types
,docusaurus
docusaurus-theme-common
docusaurus-mdx-loader
,docusaurus-plugin-content-blog
,docusaurus-plugin-content-docs
,docusaurus-plugin-content-pages
,docusaurus-types
,docusaurus-utils
,docusaurus
docusaurus-utils
🐛 Bug Fix
docusaurus-theme-classic
,docusaurus-theme-live-codeblock
create-docusaurus
docusaurus-plugin-pwa
docusaurus
docusaurus-theme-live-codeblock
docusaurus-utils
docusaurus-module-type-aliases
title
prop for imported inline SVG React components (@ axmmisaka)docusaurus-plugin-content-blog
docusaurus-theme-translations
💅 Polish
docusaurus-theme-common
🔧 Maintenance
docusaurus-theme-search-algolia
Committers: 8
3.0.1 (2023-11-30)
🐛 Bug Fix
docusaurus-utils
create-docusaurus
,docusaurus-theme-classic
,docusaurus-theme-common
docusaurus-theme-common
docusaurus-theme-classic
create-docusaurus
🤖 Dependencies
docusaurus-plugin-debug
create-docusaurus
,docusaurus-theme-classic
,docusaurus-theme-common
create-docusaurus
,docusaurus-plugin-pwa
,docusaurus-theme-classic
,docusaurus-theme-common
,docusaurus-theme-live-codeblock
,docusaurus-theme-search-algolia