eleventy-jsx

eleventy-jsx copied to clipboard

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.8.8 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 Commits 8d4b369 chore(release): 2.8.9 29adfe5 fix: backport...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.15 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.7.6 to 4.7.7. Changelog Sourced from handlebars's changelog. v4.7.7 - February 15th, 2021 fix weird error in integration tests - eb860c0 fix: check prototype property access in...

dependabot[bot]

Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2. Commits See full diff in compare view Maintainer changes This version was pushed to npm by oss-bot, a new releaser for y18n since your...

dependabot[bot]

Bumps [pug-code-gen](https://github.com/pugjs/pug) from 2.0.2 to 2.0.3. Commits eedf9a3 Don't ask escaping for boolean attributes at the beginning of attributes-list... 6f38adf Add in additional resources of 2 packages (#2945) d86ac52 new...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. Commits a2c5da8 1.3.8 af5c6bb Do not use Object.create(null) 8b648a1 don't test where our devdeps don't even work c74c8af 1.3.7 024b8b5 update deps, add linting...

dependabot[bot]

Bumps [luxon](https://github.com/moment/luxon) from 1.23.0 to 1.28.1. Changelog Sourced from luxon's changelog. Changelog 3.2.0 (2022-12-29) Allow timeZone to be specified as an intl option Fix for diff's handling of end-of-month when...

dependabot[bot]

Bumps [luxon](https://github.com/moment/luxon) to 2.5.2 and updates ancestor dependency [@11ty/eleventy](https://github.com/11ty/eleventy). These dependencies need to be updated together. Updates `luxon` from 1.23.0 to 2.5.2 Changelog Sourced from luxon's changelog. Changelog 3.2.0 (2022-12-29)...

dependabot[bot]