hugo-extended issues

dependabot: check for updates of GitHub workflow actions

1

This PR adds update check for GitHub workflow actions to dependabot. It also fixes a deprecation warning emitted by hugo and bumps GitHub workflow actions to their latest versions.

deining

Bumps [del](https://github.com/sindresorhus/del) from 7.0.0 to 7.1.0. Release notes Sourced from del's releases. v7.1.0 Add path to onProgress event (#155) f5d31e6 https://github.com/sindresorhus/del/compare/v7.0.0...v7.1.0 Commits 7df7949 7.1.0 f5d31e6 Add path to onProgress event...

dependabot[bot]

dependencies

Bump eslint from 8.41.0 to 8.48.0

Bumps [eslint](https://github.com/eslint/eslint) from 8.41.0 to 8.48.0. Release notes Sourced from eslint's releases. v8.48.0 Features 1fbb3b0 feat: correct update direction in for-direction (#17483) (Francesco Trotta) d73fbf2 feat: rule tester do not...

dependabot[bot]

dependencies

Bump read-pkg-up from 9.1.0 to 10.1.0

Bumps [read-pkg-up](https://github.com/sindresorhus/read-pkg-up) from 9.1.0 to 10.1.0. Release notes Sourced from read-pkg-up's releases. v10.1.0 Update dependencies e4e2564 https://github.com/sindresorhus/read-pkg-up/compare/v10.0.0...v10.1.0 v10.0.0 Breaking Require Node.js 16 d027a92 Improvements Update dependencies d027a92 https://github.com/sindresorhus/read-pkg-up/compare/v9.1.0...v10.0.0 Commits ec9827e...

dependabot[bot]

dependencies

Bump word-wrap from 1.2.3 to 1.2.4

Bumps [word-wrap](https://github.com/jonschlinkert/word-wrap) from 1.2.3 to 1.2.4. Release notes Sourced from word-wrap's releases. 1.2.4 What's Changed Remove default indent by @mohd-akram in jonschlinkert/word-wrap#24 🔒fix: CVE 2023 26115 (2) by @OlafConijn in...

dependabot[bot]

dependencies

Update package.json

Update for the newly released 0.115.3 to get the fix for esbuild with tsconfig files

lschierer

Bump semver from 7.5.1 to 7.5.4

Bumps [semver](https://github.com/npm/node-semver) from 7.5.1 to 7.5.4. Release notes Sourced from semver's releases. v7.5.4 7.5.4 (2023-07-07) Bug Fixes cc6fde2 #588 trim each range set before parsing (@lukekarrys) 99d8287 #583 correctly parse...

dependabot[bot]

dependencies

Security vulnerability CVE-2022-36313 in file-type dependency

Our scans detected [CVE-2023-34462](https://github.com/advisories/GHSA-mhxj-85r3-2x55) in huge-extended via file-type. The version of Hugo we are using is 0.113.0. Even the latest Hugo versions - 0.115.1 - have this issue. Could you...

anoophp777