[Snyk] Upgrade markdownlint-cli from 0.23.1 to 0.29.0

[snyk-bot]

Snyk has created this PR to upgrade markdownlint-cli from 0.23.1 to 0.29.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2021-10-05.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-608086	375/1000 Why? CVSS 7.5	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-INI-1048974	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	375/1000 Why? CVSS 7.5	Proof of Concept
	Denial of Service SNYK-JS-NODEFETCH-674311	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-590103	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	375/1000 Why? CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: markdownlint-cli

• 0.29.0 - 2021-10-05
  
  • Update markdownlint dependency to 0.24.0
    • Improve MD010/MD011/MD037/MD043/MD044
  • Remove support for end-of-life Node version 10
  • Update all dependencies via Dependabot
• 0.28.1 - 2021-07-23
  
  • Fix outdated reference to rc (thanks @ shhdgit!)
• 0.28.0 - 2021-07-23
  
  • Add --json option to output results in JSON format
  • Switch rc dependency to run-con to address CVE-2020-7788
  • Update all dependencies via Dependabot
• 0.27.1 - 2021-03-02
  
  • Fix bug introduced during commander upgrade that caused -c/--config not to be honored for non-JSON files
• 0.27.0 - 2021-03-02
  
  • Update markdownlint dependency to 0.23.1
    • Add comprehensive example .markdownlint.jsonc/.markdownlint.yaml files
    • Add fix information for MD004/ul-style
    • Improve MD018/MD019/MD020/MD021/MD037/MD041
    • Improve HTML comment handling
  • Add --dot option to include "dotfiles" by default
  • Update all dependencies via Dependabot
• 0.26.0 - 2020-12-16
  
  • Update markdownlint dependency to 0.22.0
    • Allow extends in config to reference installed packages by name
    • Add markdownlint-disable-next-line inline comment
    • Support JSON front matter
    • Improve MD009/MD026/MD028/MD043
    • Update dependencies (including markdown-it to v12).
  • Update all dependencies via Dependabot
• 0.25.0 - 2020-11-17
  
  • Update markdownlint dependency to 0.21.1
    • Improve MD011/MD031
  • Update all dependencies via Dependabot
• 0.24.0 - 2020-10-02
  
  • Update markdownlint dependency to 0.21.0
    • Improve MD042/MD044
• 0.23.2 - 2020-06-30
  
  • Update markdownlint dependency to 0.20.4
• 0.23.1 - 2020-05-17
  
  • Update markdownlint dependency to 0.20.3

from markdownlint-cli GitHub release notes

Commit messages

Package name: markdownlint-cli

• 763b70c Update required Node.js version to 12 (10 is no longer supported).
• ae1ed29 Bump version 0.29.0
• fc4fd79 Bump xo from 0.44.0 to 0.45.0 (Bump jinja2 from 2.11.0 to 2.11.1 pi-hole/docs#224)
• ad7f521 Bump actions/setup-node from 2.4.0 to 2.4.1 (Make main text font-size bigger. pi-hole/docs#222)
• fcc0be5 Bump glob from 7.1.7 to 7.2.0 (docs/index.md: switch to the SVG image. pi-hole/docs#221)
• f8c377f Bump commander from 8.1.0 to 8.2.0 (Reindent mkdocs.yml pi-hole/docs#220)
• 981dd34 Bump husky from 7.0.1 to 7.0.2 (Update supported distributions. pi-hole/docs#219)
• f4aad11 Bump markdownlint from 0.23.1 to 0.24.0 (Bump jinja2 from 2.10.3 to 2.11.0 pi-hole/docs#218)
• 6f94c77 Bump markdownlint-rule-helpers from 0.14.0 to 0.15.0 (Update favicon. pi-hole/docs#217)
• 910f451 Bump actions/setup-node from 2.3.0 to 2.4.0 (Move client.ovpn to the repo. pi-hole/docs#216)
• 65da4b4 Bump xo from 0.42.0 to 0.44.0 (Add instuctions for updating cloudflared binary. pi-hole/docs#215)
• a42efbe Bump commander from 8.0.0 to 8.1.0 (requirements.txt: bring it up to date  pi-hole/docs#213)
• fb029a2 Bump actions/setup-node from 2.2.0 to 2.3.0 (Remove the unused mkdocs-bootswatch package. pi-hole/docs#211)
• ed826b5 Bump version 0.28.1
• 8fd56fb fix: Cannot find module 'rc' error when use npx (Remove the unused docs.iml pi-hole/docs#210)
• 09cd9b0 Bump version 0.28.0
• 2462df0 Bump glob-parent from 5.1.1 to 5.1.2 (Update guide for Unbound pi-hole/docs#207)
• d46d743 Bump xo from 0.41.0 to 0.42.0 (Bump pymdown-extensions from 6.2 to 6.2.1 pi-hole/docs#206)
• 3044808 Bump husky from 7.0.0 to 7.0.1 (Travis CI: cache pip pi-hole/docs#204)
• b78a39e Bump actions/setup-node from 2.1.5 to 2.2.0 (dual operation page in the guide returns 404 pi-hole/docs#202)
• 9d427e1 Bump xo from 0.40.3 to 0.41.0 (Pi-hole v5.0 release documentation pi-hole/docs#201)
• 6cd8e49 Bump husky from 6.0.0 to 7.0.0 (Revert "Removed obsolete Optional: Dual operation: LAN & VPN at the same time…" pi-hole/docs#200)
• 596386e Bump commander from 7.2.0 to 8.0.0 (Add external image to the repo pi-hole/docs#198)
• c3d2ca6 Bump xo from 0.40.2 to 0.40.3 (Many Markdown tweaks pi-hole/docs#197)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs