Bump quill from 1.3.4 to 1.3.7

[dependabot[bot]]

Bumps quill from 1.3.4 to 1.3.7.

Release notes

Sourced from quill's releases.

Version 1.3.7

Security related bug fixes.

• https://app.snyk.io/vuln/npm:extend:20180424
• https://www.npmjs.com/advisories/1039

Thank you @​danfuzz, @​danielw93, @​jonathanlloyd, and @​k-sai-kiranmayee for your contributions to this release.

Version 1.3.6

• Make picker accessible #1999
• Fix Japanese composition in Chrome 65 #2009

Thanks to @​berylw and @​erinsinger93 for contributions to this release!

Version 1.3.5

• Fix indent preservation of a checked checklist item #1818
• • added as a shortcut to trigger bullet list formatting #1819
• Fix pasting text-align styles #1873
• Fix cursor position after dangerouslyPasteHTML #1886
• Fix value of history stack in text-change handler #1906
• Workaround for Webkit locking up when navigating around images using hotkeys #1910

Thank you @​araruna, @​bryanrsmith, @​haugstrup, @​icylace, @​leimig, @​LFDM, @​nikparo, @​rafpaf and @​vk2sky for your contributions to this release.

Changelog

Sourced from quill's changelog.

1.3.7

Security related bug fixes.

• https://app.snyk.io/vuln/npm:extend:20180424
• https://www.npmjs.com/advisories/1039

Thank you @​danfuzz, @​danielw93, @​jonathanlloyd, and @​k-sai-kiranmayee for your contributions to this release.

1.3.6

• Make picker accessible #1999
• Fix Japanese composition in Chrome 65 #2009

Thanks to @​berylw and @​erinsinger93 for contributions to this release!

1.3.5

• Fix indent preservation of a checked checklist item #1818
• • added as a shortcut to trigger bullet list formatting #1819
• Fix pasting text-align styles #1873
• Fix cursor position after dangerouslyPasteHTML #1886
• Fix value of history stack in text-change handler #1906
• Workaround for Webkit locking up when navigating around images using hotkeys #1910

Thank you @​araruna, @​bryanrsmith, @​haugstrup, @​icylace, @​leimig, @​LFDM, @​nikparo, @​rafpaf and @​vk2sky for your contributions to this release.

Commits

• 0148738 update version, changelog, docs
• 544a1f4 upgrade extend, fixes #2638
• ec5e3ce Fix tab nabbing vulnerability in formatted links
• cc8526d Fix tabnabbing vulnerability in Snow theme (#2439)
• 96e38e9 bump version and update changelog
• 1b836b5 Merge branch 'erinsinger93-develop' into develop
• 9e572fe recase non-constant
• ae99e07 use keyboard constants
• 22d7d60 update parchment, fixes #2009
• cf48ce8 Ensuring Quill picker is fully accessible
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.