[Snyk] Upgrade codemirror from 5.49.2 to 5.65.2

[andmor-]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade codemirror from 5.49.2 to 5.65.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 35 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-02-21.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CODEMIRROR-1016937	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CODEMIRROR-569611	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: codemirror

• 5.65.2 - 2022-02-21
  

  Version 5.65.2

  Bug fixes

  clike mode: Recognize triple quoted string in Java.

  cypher mode: Fix handling of punctuation.

• 5.65.1 - 2022-01-20
  

  Version 5.65.1

  Bug fixes

  Fix miscalculation of vertical positions in lines that have both line widgets and replaced newlines.

• 5.65.0 - 2021-12-20
  

  Version 5.65.0

  Bug fixes

  brace-folding addon: Fix broken folding on lines with both braces and square brackets.

  New features

  vim bindings: Support g0, g$, g.

• 5.64.0 - 2021-11-20
  

  Version 5.64.0

  Bug fixes

  Fix a crash that occurred in some situations with replacing marks across line breaks.

  Make sure native scrollbars reset their position when hidden and re-shown.

  New features

  vim bindings: Support C-u to delete back a line.

• 5.63.3 - 2021-10-12
  

  Version 5.63.3

  Bug fixes

  Re-publish 5.63.2 because npm somehow swallowed that, but won't let me publish it again.-----BEGIN PGP SIGNATURE-----

  iQEzBAABCgAdFiEErLY20j+/ljvJRHotcD8b7W0zrh4FAmFlhk0ACgkQcD8b7W0z
  rh6lWgf/WRGEk/c0cqPKXuKvFAMK1El2R/IC6lapruHsOYuF4FilKHy0hssu4W+D
  Fm15suBTDmxGhlP06dcjbJfmS28qBPVzA061guHg63dzFgbCS10+6pBbiRTMgzsG
  rDWAlMawlIfFrW4LIzt7HajaenybGiJKgKezvChTmrhLeLDkvmn442u1PGmuRa5C
  ZtAhL0yPYhbpuqK0wQXL3OuGhgQFHwp3xAiuPVLUJZ4VI2T9caNmckic7y5cJ4NT
  8WXyDjwWTjboeEyYNyqm88uFqf0B0VO5B/vJnbcgfJbplCcQyn9kQDj1pb2jmuBp
  haki+zoTerm6nfBjyBpy6mv68Wcqzw==
  =mCdh
  -----END PGP SIGNATURE-----
  Mark version 5.63.3

• 5.63.2 - 2021-10-11
  

  Version 5.63.2

  Bug fixes

  Prevent external styles from giving the hidden textarea a min-height.

  Remove a stray autosave file that was part of the previous release.

• 5.63.1 - 2021-09-29
  

  Version 5.63.1

  Bug fixes

  Fix an issue with mouse scrolling on Chrome 94 Windows, which made scrolling by wheel move unusably slow.

• 5.63.0 - 2021-09-20
  

  Version 5.63.0

  Bug fixes

  Fix scroll position jumping when scrolling a document with very different line heights.

  xml mode: Look up HTML element behavior in a case-insensitive way.

  New features

  vim bindings: Support guu for case-changing.

• 5.62.3 - 2021-08-20
  

  Version 5.62.3

  Bug fixes

  Give the editor a translate=no attribute to prevent automatic translation from modifying its content.

  Give vim-style cursors a width that matches the character after them.

  merge addon: Make buttons keyboard-accessible.

  emacs bindings: Fix by-page scrolling keybindings, which were accidentally inverted.

• 5.62.2 - 2021-07-21
• 5.62.1 - 2021-07-20
• 5.62.0 - 2021-06-21
• 5.61.1 - 2021-05-20
• 5.61.0 - 2021-04-20
• 5.60.0 - 2021-03-20
• 5.59.4 - 2021-02-24
• 5.59.3 - 2021-02-20
• 5.59.2 - 2021-01-20
• 5.59.1 - 2020-12-31
• 5.59.0 - 2020-12-20
• 5.58.3 - 2020-11-19
• 5.58.2 - 2020-10-23
• 5.58.1 - 2020-09-23
• 5.58.0 - 2020-09-21
• 5.57.0 - 2020-08-20
• 5.56.0 - 2020-07-20
• 5.55.0 - 2020-06-21
• 5.54.0 - 2020-05-20
• 5.53.2 - 2020-04-21
• 5.53.0 - 2020-04-21
• 5.52.2 - 2020-03-20
• 5.52.0 - 2020-02-20
• 5.51.0 - 2020-01-20
• 5.50.2 - 2020-01-01
• 5.50.0 - 2019-12-20
• 5.49.2 - 2019-10-21

from codemirror GitHub release notes

Commit messages

Package name: codemirror

• 7f70233 Mark version 5.65.2
• 17634c2 [addon/edit/continuelist] Check mode.name AND helperType for "markdown"
• 3bfc1ae Allow mapping <Esc> in vim normal mode
• 18c12c9 Move way from Google Fonts
• 8f42af2 Fixed escaping in double-quote regex string
• 64b0dae [clike mode] Support triple-quoted string in Java mode
• 1a511c3 Add github sponsor link to FUNDING.yml
• c65a95d [cypher mode] Fix broken handling of punctuation
• b9e6190 Mark version 5.65.1
• b4a40b3 [mllike mode] Don't treat (*) as a comment
• 191ae47 [fortran mode] Fix named operator regexp
• 04323d0 [brace-fold addon] Add a brace-paren folding helper
• 42917b3 [perl mode] Allow underscore separators in numbers
• 7e0cd1d Properly access line widgets when computing coordinates in continued lines
• 621325d [nsis] allow case-insensitive syntax
• ec9a108 Add a z-index to CodeMirror-scroll to optimize drawing
• 8d3bac4 [lint demo] Upgrade jshint
• 3e5b5e9 [javascript mode] Fix bad context tracking for brackets at end of line
• 0d48b56 [css and stylus modes] Add conic-gradient keywords
• 7b2f2ce [sql mode] Highlight types as types, client commands as builtins
• d60fff6 Mark release 5.65.0
• 812eef0 Remove inline logo data from the front page HTML
• aaba815 [brace-fold addon] Fix confusion when there are both braces and brackets on a line
• b7bae95 [factor mode] Fix incorrect lineComment value

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs