[Snyk] Upgrade highlight.js from 11.9.0 to 11.11.1#8
Conversation
Snyk has created this PR to upgrade highlight.js from 11.9.0 to 11.11.1. See this package in npm: highlight.js See this project in Snyk: https://app.snyk.io/org/dustin4444/project/e7544824-e775-43f4-b576-583eba5c654b?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Important Review skippedIgnore keyword(s) in the title. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Summary of ChangesHello @Dustin4444, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request updates the Highlights
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request, generated by Snyk, upgrades highlight.js from version 11.9.0 to 11.11.1. This is a crucial security update that patches several vulnerabilities, including a high-severity Regular Expression Denial of Service (ReDoS) issue. I have reviewed the changes and the release notes, and the upgrade appears safe to merge. It is a minor version bump with no breaking changes that should impact this project. The change is correct and necessary.
2 participants
Snyk has created this PR to upgrade highlight.js from 11.9.0 to 11.11.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 3 versions ahead of your current version.
The recommended version was released 10 months ago.
Issues fixed by the recommended upgrade:
SNYK-JS-CROSSSPAWN-8303230
SNYK-JS-MICROMATCH-6838728
SNYK-JS-PATHTOREGEXP-7925106
SNYK-JS-BRACEEXPANSION-9789073
SNYK-JS-BRACEEXPANSION-9789073
Release notes
Package name: highlight.js
-
11.11.1 - 2024-12-25
- Fixes regressions with Rust grammar in 11.11.0 release.
-
11.11.0 - 2024-12-14
- Nothing.
- fix(rust) - adds emoji support in single quote strings [joshgoebel][]
- fix(apache) - support line continuation via
- fix(makefile) - allow strings inside
- enh(arcade) updated to ArcGIS Arcade version 1.29 Kristian Ekenes
- enh(css) add all properties listed on MDN (96 additions including
- enh(excel) add built-in functions for Excel 365 release to 2024 Danny Winrow
- enh(erlang) OTP 27 triple-quoted strings nixxquality
- enh(erlang) OTP 27 doc attribute nixxquality
- enh(erlang) OTP 27 Sigil type nixxquality
- enh(erlang) OTP25/27 maybe statement nixxquality
- enh(dart) Support digit-separators in number literals [Sam Rawlins][]
- enh(csharp) add Contextual keywords
- enh(lua) add 'pluto' as an alias Sainan
- enh(bash) add reserved keywords
- enh(nix) update keywords [h7x4][]
- enh(nix) support paths [h7x4][]
- enh(nix) support lookup paths [h7x4][]
- enh(nix) support operators [h7x4][]
- enh(nix) support REPL keywords [h7x4][]
- enh(nix) support markdown comments [h7x4][]
- enh(nix) support basic function params [h7x4][]
- enh(nix) better parsing of attrsets [h7x4][]
- fix(c) - Fixed hex numbers with decimals Dxuian
- fix(typescript) - Fixedoptional property not highlighted correctly Dxuian
- fix(ruby) - fix
- enh(gcode) rewrote language for modern gcode support Barthélémy Bonhomme
- fix(sql) - Fixed sql primary key and foreign key spacing issue Dxuian
- fix(cpp) added flat_set and flat_map as a part of cpp 23 version Lavan
- fix(yaml) - Fixed special chars in yaml Dxuian
- fix(basic) - Fixed closing quotation marks not required for a PRINT statement Somya
- fix(nix) remove
- fix(nix) mark
- fix(nix) handle
- fix(nix) handle backslash string escapes [h7x4][]
- fix(nix) don't mix escapes for
- fix(swift) - Fixed syntax highlighting for class func/var declarations guuido
- fix(yaml) - Fixed wrong escaping behavior in single quoted strings guuido
- enh(nim) - Add
- added 3rd party TTCN-3 grammar to SUPPORTED_LANGUAGES Osmocom
- added 3rd party Odin grammar to SUPPORTED_LANGUAGES clsource
- added 3rd party Liquid grammar to SUPPORTED_LANGUAGES Laurel King
- Nothing yet.
- Added
- Added
- Added
- Added
- Added
- Resolve the memory leak problem when creating multiple Highlight.js instances Imken
-
11.10.0 - 2024-07-06
- enh(typescript) add support for
- enc(c) added more C23 keywords Melkor-1
- enh(json) added jsonc as an alias BackupMiles
- enh(gml) updated to latest language version (GML v2024.2) gnysek
- enh(c) added more C23 keywords and preprcoessor directives Eisenwave
- enh(js/ts) support namespaced tagged template strings Aral Balkan
- enh(perl) fix false-positive variable match at end of string Josh Goebel
- fix(cpp) not all kinds of number literals are highlighted correctly Lê Duy Quang
- fix(css) fix overly greedy pseudo class matching Bradley Mackey
- enh(arcade) updated to ArcGIS Arcade version 1.24 Kristian Ekenes
- fix(typescript): params types Mohamed Ali
- fix(rust) fix escaped double quotes in string Mohamed Ali
- fix(rust) fix for r# raw identifier not being highlighted correctly. JaeBaek Lee
- enh(rust) Adding union to be recognized as a keyword in Rust. JaeBaek Lee
- fix(yaml) fix for yaml with keys having brackets highlighted incorrectly Aneesh Kulkarni
- fix(csharp) add raw string highlighting for C# 11. Tara
- fix(bash) fix # within token being detected as the start of a comment Felix Uhl
- fix(python) fix
- enh(python) adds a scope to the
- enh(delphi) allow digits to be omitted for hex and binary literals Jonah Jeleniewski
- enh(delphi) add support for digit separators Jonah Jeleniewski
- enh(delphi) add support for character strings with non-decimal numerics Jonah Jeleniewski
- fix(javascript) incorrect function name highlighting CY Fung
- fix(1c) fix escaped symbols "+-;():=,[]" literals Vitaly Barilko
- fix(swift) correctly highlight generics and conformances in type definitions Bradley Mackey
- enh(swift) add package keyword Bradley Mackey
- fix(swift) ensure keyword attributes highlight correctly Bradley Mackey
- fix(types) fix interface LanguageDetail > keywords Patrick Chiu
- enh(java) add
- enh(bash) add keyword
- fix(haxe) captures
- fix(go) fix go number literals to accept
- enh(markdown) add entity support David Schach TaraLei
- enh(css) add
- enh(css) add
- fix(fortran) fixes parsing of keywords delimited by dots Julien Bloino
- enh(css) add
- enh(css) add
- enh(css) add
- added 3rd party CODEOWNERS grammar to SUPPORTED_LANGUAGES nataliia-radina
- added 3rd party Luau grammar to SUPPORTED_LANGUAGES Robloxian Demo
- added 3rd party ReScript grammar to SUPPORTED_LANGUAGES Paul Tsnobiladzé
- added 3rd party Zig grammar to SUPPORTED_LANGUAGES [Hyou BunKen][]
- added 3rd party WGSL grammar to SUPPORTED_LANGUAGES Arman Uguray
- added 3rd party Unison grammar to SUPPORTED_LANGUAGES Rúnar Bjarnason
- added 3rd party Phix grammar to SUPPORTED_LANGUAGES PeteLomax
- added 3rd party Mirth grammar to SUPPORTED_LANGUAGES Sierra
- added 3rd party JSONata grammar to SUPPORTED_LANGUAGES Vlad Dimov
- enh(tools): order CSS options picklist David Schach
- enh(tools): remove duplicate CSS options David Schach
- (typescript): deprecate old
- Added
-
11.9.0 - 2023-10-09
- Drops support for Node 14.x, which is no longer supported by Node.js.
- In the
- (enh) prevent re-highlighting of an element [joshgoebel][]
- (chore) Remove discontinued badges from README Bradley Mackey
- (chore) Fix build size report Bradley Mackey
- added 3rd party Iptables grammar to SUPPORTED_LANGUAGES Checconio
- added 3rd party x86asmatt grammar to SUPPORTED_LANGUAGES gondow
- added 3rd party riscv64 grammar to SUPPORTED_LANGUAGES aana-h2
- added 3rd party Ballerina grammar to SUPPORTED_LANGUAGES Yasith Deelaka
- fix(rust) added negative-lookahead for callable keywords
- enh(armasm) added
- enh(haxe) added
- enh(haxe) support numeric separators and suffixes Robert Borghese
- fix(haxe) fixed metadata arguments and support non-colon syntax Robert Borghese
- fix(haxe) differentiate
- fix(bash) do not delimit a string by an escaped apostrophe [hancar][]
- enh(swift) support
- enh(swift) support parameter pack keywords Bradley Mackey
- enh(swift) regex literal support Bradley Mackey
- enh(swift)
- enh(scala) add using directives support
- fix(scala) fixed comments in constructor arguments not being properly highlighted Isaac Nonato
- enh(swift) ownership modifiers support Bradley Mackey
- enh(nsis) Add
- fix(haskell) do not treat double dashes inside infix operators as comments [Zlondrej][]
- enh(rust) added
- enh(leaf) update syntax to 4.0 Samuel Bishop
- fix(reasonml) simplify syntax and align it with ocaml jchavarri
- fix(swift)
- enh(swift) macro attributes are highlighted as keywords Bradley Mackey
- enh(stan) updated for version 2.33 (#3859) Brian Ward
- fix(css) added '_' css variable detection Md Saad Akhtar
- enh(groovy) add
- (chore) Update dev tool to use the new
- (enh) Auto-update the highlighted output when the language dropdown changes. Shah Shabbir Ahmmed
from highlight.js GitHub release notesVersion 11.11.1
Version 11.11.0
CAVEATS / POTENTIALLY BREAKING CHANGES
Core Grammars:
\Josh Goebel$()expressions aneesh98anchor-name,aspect-ratio,backdrop-filter,container,margin-trim,place-content,scroll-timeline, ...) BaliBalofile,args,dynamic,record,requiredandscopedAlvin JoytimeandcoprocÁlvaro Mondéjar|=operator false positives (as block arguments) Aboobacker MKaddbuiltin [h7x4][]oras builtin instead of literal [h7x4][]'''string escapes [h7x4][]"and''strings [h7x4][]conceptanddeferto list of Nim keywords Jake LeahyNew Grammars:
Developer Tools:
Themes:
Rosé Pinetheme William WilkinsonCybertopia Cherrytheme Alexandre ZANNICybertopia Dimmertheme Alexandre ZANNICybertopia Icecaptheme Alexandre ZANNICybertopia Saturatedtheme Alexandre ZANNIImprovements:
CONTRIBUTORS
Sorry for the wait, this one is a doozie, thanks to all the contributors who made it possible!
CAVEATS / POTENTIALLY BREAKING CHANGES
Important
This version drops support for Node 16.x, which is no longer supported by Node.js.
Core Grammars:
satisfiesoperator Kisaragi Hiuorconflicts with string highlighting Mohamed Aliselfvariable [Lee Falin][]gototo be recognized as a keyword in Java Alvin JoysudoAlvin Joynewkeyword without capturing it within variables/class names Cameron Taylor_separators, add hex p exponents Lisa Ugrayjustify-itemsandjustify-selfattributes Vasily Polovnyovaccent-color,appearance,color-scheme,rotate,scaleandtranslateattributes Carl Räftingselect,option,optgroup,pictureandsourceto list of known tags Vasily Polovnyovinset,inset-*,border-start-*-radiusandborder-end-*-radiusattributes Vasily Polovnyovtext-decoration-skip-ink,text-decoration-thicknessandtext-underline-offsetattributes Vasily PolovnyovNew Grammars:
Developer Tool:
highlightAPI Misha KaletskyThemes:
1c-lighttheme a like in the IDE 1C:Enterprise 8 (for 1c) Vitaly BarilkoVersion 11.9.0
CAVEATS / POTENTIALLY BREAKING CHANGES
nodebuildstyles/*.cssfiles now ship un-minifiedwith minified counterparts as:
styles/*.min.cssmvorisek(this makes things consistent with our
cdnbuilds)Parser:
New Grammars:
Core Grammars:
ifwhilefor[Omar Hussein][]x0-x30andw0-w30ARMv8 registers Nicholas Thompsonfinal,is,macrokeywords and$identifiers Robert Borgheseabstractdeclaration from keyword Robert Borghesemacrokeyword Bradley Mackey@ uncheckedand@ Sendablesupport Bradley Mackey//> using foo bar[Jamie Thompson][]!assertcompiler flag [idleberg][]eprintln!macro qoheniacwarn_unqualified_accessis an attribute Bradley Mackeyrecordandvaras keywords Guillaume LaforgeDeveloper Tool:
highlightAPI. Shah Shabbir AhmmedImportant
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: