Commits on Jun 14, 2024

1. Replace Wintersmith with Metalsmith …

   Wintersmith is no longer maintained given that the most recent version
   is from six years ago, and all vulnerabilities that NPM reports
   originate from Wintersmith's dependencies. Metalsmith, and its plugins,
   on the other hand have recently had releases and don't have known
   vulnerabilities. In fact, the number of reported vulnerabilities by NPM
   even goes down to zero with this patch applied.
   
   This commit therefore replaces Wintersmith with Metalsmith by providing
   a transparent drop-in replacement, in a way that requires the least
   amount of changes to the code and the generated output.
   
   Note that this patch does update our versions of jQuery, Bootstrap and
   the Highlight.js theme because the previous versions were very outdated
   and didn't work correctly with Metalsmith. Moreover, those old versions
   contained vulnerabilities that are hereby fixed.
   
   Fixes mozilla#18198.

   

   timvandermeij committed Jun 14, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for ce7cdf4
   • Browse repository at this point

   Copy the full SHA

   ce7cdf4 View commit details

   Browse the repository at this point in the history