[Snyk] Fix for 1 vulnerabilities

[one3chens]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hexo

The new version differs by 250 commits.

• 9662366 Merge pull request #3695 from curbengh/4.0.0
• ac03b72 Merge pull request #3768 from seaoak/bugfix/backtick_code_block_on_blockquote_always_terminates_the_blockquote_block
• 84c4c66 Disable to insert extra new line character into the end of backtick code block (fix #3767)
• 6b329e9 Merge pull request #3765 from seaoak/feature/correct_filter_backtick_code_block_on_blockquote
• deaad6b docs(backtick_code): mention PR #3765
• 894408a Correct processing of backtick code block on blockquote (fix Issue#2969)
• 6bf6e98 release: 4.0.0
• 79bdc95 fix(#2318): allow backtick code block in "blockquote" tag plugin (#2321)
• bd70086 Merge pull request #3760 from seaoak/bugfix/test-of-box-fails-on-race-condition
• e61116a Merge pull request #3761 from curbengh/warehouse-3-0-1
• e353f46 Fix up potential race condition in test cases of "box" (fix #3759)
• 6f6084c perf(cache): improve cache and reduce Memory Usages (#3756)
• 612a15a chore(deps): update warehouse from ^3.0.0 to ^3.0.1
• d2662d4 Merge pull request #3686 from curbengh/url-encoding
• 6f7fe0c test(asset_img): attribute shouldn't be similar to value, unless it's boolean
• 09ccc9f refactor: cheerio is no longer necessary
• 02041eb chore(deps): update hexo-util from ^1.3.1 to ^1.4.0
• 62e6e5c fix(open_graph): url might be null
• e6ed3f8 test(open_graph): avoid double-escaping
• 8bd3439 fix(open_graph): htmlTag escapes html by default
• d5fb012 refactor: utilize encodeURL of hexo-util
• c6190ca fix(open_graph): do not format empty url
• 5043bac test(open_graph): IDN handling
• 79ef191 fix(open_graph): support IDN url

See the full diff

Package name: hexo-deployer-git

The new version differs by 80 commits.

• aadcd16 Merge pull request 搜索 vuejs/v2.cn.vuejs.org#146 from curbengh/2.0.0
• c2d3b47 Merge pull request 移动端主页侧边栏按钮点击无效 vuejs/v2.cn.vuejs.org#147 from hexojs/dependabot/npm_and_yarn/hexo-fs-tw-2.0.0
• 22823e7 Update hexo-fs requirement from ^1.0.0 to ^2.0.0
• db86c0b chore(ci): remove node 6 and add node 12 (切换到1.0后变成英文了 vuejs/v2.cn.vuejs.org#148)
• 5cce456 release: 2.0.0
• d6e0aa0 docs(readme): add npmjs link (fix some envent wrong at guide/forms.md lazy vuejs/v2.cn.vuejs.org#142)
• 75eace4 Update hexo-util requirement from ^0.6.0 to ^1.0.0 (贡献者列表 vuejs/v2.cn.vuejs.org#145)
• 2be9486 Merge pull request Update components.md vuejs/v2.cn.vuejs.org#143 from segayuu/Remove-unused-babel-eslint
• 3d379f2 Remove unused babel-eslint
• addd676 Merge pull request Update components.md vuejs/v2.cn.vuejs.org#137 from hexojs/dependabot/npm_and_yarn/eslint-tw-6.1.0
• 0a25e0d Fix lint error: no-prototype-builtins
• d5a2a1e Update eslint requirement from ^5.6.1 to ^6.1.0
• 0d0ac32 chore: drop .npmignore (请问 Vue 2.0 的翻译是否可以合并进来？ vuejs/v2.cn.vuejs.org#140)
• f07c9f1 Merge pull request 列表渲染出来的多个勾选框绑定到同一数组目测有bug vuejs/v2.cn.vuejs.org#141 from curbengh/es6
• 7aa447d refactor: rest parameter
• 78dda7d refactor: array.map()
• be90171 refactor: spread syntax
• 6ea5837 refactor: es6-fy
• 7cd9d1f Merge pull request 有翻译2.0的计划么？ vuejs/v2.cn.vuejs.org#138 from curbengh/node6
• 46b9a19 Merge pull request 中文翻译中过渡部分内容中有错别字 vuejs/v2.cn.vuejs.org#139 from curbengh/nyc
• 214e64c test: replace istanbul with nyc
• a244e6c chore: require node 8 or above
• eed3dfe Update mocha requirement from ^5.2.0 to ^6.0.2 (Update components.md vuejs/v2.cn.vuejs.org#130)
• 7ea6261 Treat babel-eslint as dev dep (api/index.md 过滤器filterBy部分更新 vuejs/v2.cn.vuejs.org#127)

See the full diff

Package name: hexo-generator-feed

The new version differs by 7 commits.

• 79fa418 Update package.json
• cbe2672 Make default length of content configurable (Helpdesk #@ 1800 882 0652 AVG technical support phone number.*AVG support phone number*AVG customer support phone number. vuejs/v2.cn.vuejs.org#51)
• 1b75605 Support for "atom:icon" Element ($$$ 1 844 247 1987 $$$ Dell Printer tech support phone number, Dell printer Tech supp $$$  vuejs/v2.cn.vuejs.org#57)
• 16398e5 ignore posts which were set as draft in the front-matter ([Snyk] Fix for 58 vulnerabilities #44)
• 19ab397 Merge pull request 24*7 Kodak printer 1-800-439-2949 Customer Support Phone Number vuejs/v2.cn.vuejs.org#47 from daiyitastic/daiyi/update-readme
• cdca00c Update readme
• 7288860 Add 'content' config var to readme

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')