[Snyk] Upgrade @metalsmith/markdown from 1.6.0 to 1.9.2

[jydmyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @metalsmith/markdown from 1.6.0 to 1.9.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-05-08.

Release notes

Package name: @metalsmith/markdown

• 1.9.2 - 2023-05-08
  
  • Fixes missing types and adds source maps to package 78eaefc
• 1.9.1 - 2023-02-26
  
  • Updates marked from 4.2.4 -> 4.2.12 c9881d1
  • fix: don't log a warning for undefined key values, only when typeof is not string 53feb48
  • fix: don't crash but gracefully ignore undefined for wildcard keypaths d05e39a
• 1.9.0 - 2023-02-02
  
  • Resolves #65: adds globalRefs option #65
  • Resolves #63: provides a render option allowing usage of any markdown parser. #63
  • Documents the render option and restructures README.md in alignment with other core plugins 2ea44cd
• 1.8.0 - 2022-12-18
  
  • Resolves #62, deprecates markdown options.<option> in favor of options.engineOptions.<option> #62
  • Provides dual ESM/CJS module a3b6271
  • Adds Typescript support 5ce04b8
  • Updates marked from 4.2.0 -> 4.2.4 fd2fc65
  • Renames default export to markdown for better auto-complete ba9c515
• 1.6.0 - 2022-05-29
  
  • Resolves #60: support nested keypaths for keys option #60
  • Fixes #61: replace Travis CI badge with GH actions in README.md #61
  • Feature: Add support for simple wildcards, get 100% test coverage 9c53cfe
  • Update supported Node version to >=10, update marked 4.0.12 -> 4.0.16 c0d1a86

from @metalsmith/markdown GitHub release notes

Commit messages

Package name: @metalsmith/markdown

• faf9e40 Release 1.9.2
• 78eaefc Fixes missing types and adds source maps to package
• 61976dc Release 1.9.1
• 1d73ca3 chore: fix tests typo
• 4cef519 ci: remove gitter notify workflow & use engineOptions in tests
• d05e39a fix: don't crash but gracefully ignore undefined for wildcard keypaths
• 53feb48 fix: don't log a warning for undefined key values, only when typeof is not string
• c9881d1 Updates marked from 4.2.4 -> 4.2.12
• 2eb0312 dev: update devDependencies
• 4c155ab dev: update devDependencies
• f996354 chore: update CHANGELOG.md
• 1071086 Release 1.9.0
• 77e6f20 Resolves Various styling fixes nodejs/nodejs.org#65: adds globalRefs option
• 2ea44cd Documents the render option and restructures README.md in alignment with other core plugins
• 509e24c Resolves Make footer look better on mobile nodejs/nodejs.org#63: provides a render option allowing usage of any markdown parser.
• 235df4b Release 1.8.0
• 5652c26 Resolves Linux Foundation svg is cutoff on smaller mobile devices nodejs/nodejs.org#62, deprecates markdown options.<option> in favor of options.engineOptions.<option>
• d90437f chore: update devDependencies & fix npm audit vulnerability
• fd2fc65 Updates marked from 4.2.0 -> 4.2.4
• ba9c515 Renames default export to markdown for better auto-complete
• 582c5f3 chore: rename master to main
• 5ce04b8 Adds Typescript support
• f8bfb6b dev: move from abandoned eslint-plugin-node to eslint-plugin-n
• a3b6271 Provides dual ESM/CJS module

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Added Capability Access	+/- Transitive Count	Publisher
@metalsmith/markdown@1.9.2	1.6.0...1.9.2	None	+1/-1	webketje
marked@4.3.0	4.2.5...4.3.0	None	+0/-0	tonybrix