[Snyk] Upgrade hexo from 3.8.0 to 3.9.0

[snyk-bot]

Snyk has created this PR to upgrade hexo from 3.8.0 to 3.9.0.

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 4 months ago, on 2019-06-16.

The recommended version fixes:

Severity	Title	Issue ID
	Regular Expression Denial of Service (ReDoS)	npm:braces:20180219

Release notes

• Package name: hexo
  • 3.9.0 - 2019-06-16

    New Features

    • Updated hexo-renderer-marked to 1.0.1 (#3571)
    • Updated hexo-fs to 1.0.0 (#3301)
    • TOC: Seek anchor id from parent nodes when target is not available (#3404)
    • tag/include_code now can include ranged code lines (#3393)

    Bug Fixes

    • DisableNunjucks: true should render markdown code block (#3573)
    • Changing source config should generate assets (#3399)

    Refactor

    • Spread function: Hexo built-in plugin blockquote (#3291)
    • ES6 block scoping refactor (#3294)
    • Use spread syntax (#3333)

    Housekeeping

    • #3326 #3324 #3315 #3300 #3329 #3359 #3369 #3368 #3367 #3569

    It is a great release and thanks for hardworking from all contributors. 🤗

  • 3.8.0 - 2018-10-19

    New Features

    • Supported absolute config path (#3118)
    • Added command line option --output to write db.json and _multiconfig to different paths (#3122)
    • Added meta generator injection filter (#3129)

    Housekeeping

    • #3124, #3117, #3102, #3276, #3284, #3285, #3290, #3293
from hexo GitHub Release Notes

------------

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs