Bump marked from 0.6.0 to 0.7.0

[dependabot-preview[bot]]

Bumps marked from 0.6.0 to 0.7.0.

Release notes

Sourced from marked's releases.

0.7.0

Security

• Sanitize paragraph and text tokens #1504
• Fix ReDOS for links with backticks (issue #1493) #1515

Breaking Changes

• Deprecate sanitize and sanitizer options #1504
• Move fences to CommonMark #1511
• Move tables to GFM #1511
• Remove tables option #1511
• Single backtick in link text needs to be escaped #1515

Fixes

• Fix parentheses around a link #1509
• Fix headings (issue #1510) #1511

Tests

• Run tests with correct options #1511

0.6.3

Fixes

• Fix nested blockquotes #1464
• Fix <em> issue with mixed content #1451
• revert #1464 #1497
• Fix breaks: true #1507

Docs

• add docs for workers #1432
• Add security policy #1492
• Update supported spec versions #1491
• Update test folder descriptions #1506

DevOps

• Use latest commit for demo master #1457
• Update tests to commonmark 0.29 #1465
• Update tests to GFM 0.29 #1470
• Fix commonmark spec 57 and 40 (headings) #1475

0.6.2

Security

• Link redos #1426
• Text redos #1460

Fixes

• Links parens #1435

... (truncated)

Commits

• 26ae990 Release v0.7.0 (#1519)
• 204926c 0.7.0
• 15a6b4f 🗜️ minify [skip ci]
• 0ee3aa9 Merge pull request #1515 from UziTech/link-label-security
• cc9efe4 🗜️ minify [skip ci]
• e987a4d fix tests
• ded5e24 update link
• 7faa999 add test
• ac1e57c use correct options in specs (#1511)
• 63935f9 🗜️ minify [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by tonybrix, a new releaser for marked since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.