[Snyk] Upgrade marked from 4.0.1 to 4.0.12

[snyk-bot]

Snyk has created this PR to upgrade marked from 4.0.1 to 4.0.12.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 11 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-01-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: marked

• 4.0.12 - 2022-01-27
  

  4.0.12 (2022-01-27)

  Bug Fixes

  • fix nbsp after table (#2372) (ed66bf8)
• 4.0.11 - 2022-01-26
  

  4.0.11 (2022-01-26)

  Bug Fixes

  • fix blank line after table header (#2332) (6e1f923)
• 4.0.10 - 2022-01-13
  

  4.0.10 (2022-01-13)

  Bug Fixes

  • security: fix redos vulnerabilities (8f80657)
• 4.0.9 - 2022-01-06
  

  4.0.9 (2022-01-06)

  Bug Fixes

  • retain line breaks in tokens properly (#2341) (a9696e2)
• 4.0.8 - 2021-12-19
  

  4.0.8 (2021-12-19)

  Bug Fixes

  • spaces on a newline after a table (#2319) (f82ea2c)
• 4.0.7 - 2021-12-09
  

  4.0.7 (2021-12-09)

  Bug Fixes

  • Fix every third list item broken (#2318) (346b162), closes #2314
• 4.0.6 - 2021-12-02
  

  4.0.6 (2021-12-02)

  Bug Fixes

  • speed up parsing long lists (#2302) (e0005d8)
• 4.0.5 - 2021-11-25
  

  4.0.5 (2021-11-25)

  Bug Fixes

  • table after paragraph without blank line (#2298) (5714212)
• 4.0.4 - 2021-11-19
  

  4.0.4 (2021-11-19)

  Bug Fixes

  • fix cli (#2294) (ab2977a)
• 4.0.3 - 2021-11-13
  

  4.0.3 (2021-11-13)

  Bug Fixes

  • build min from umd (#2283) (ea26ea9)
• 4.0.2 - 2021-11-12
• 4.0.1 - 2021-11-11

from marked GitHub release notes

Commit messages

Package name: marked

• 4c5b974 chore(release): 4.0.12 [skip ci]
• a200d0a 🗜️ build [skip ci]
• 5fba688 fix: fix nbsp after table
• ed66bf8 Add check in splitCells to prevent calling trim on undefined (refactor: use nodejs env var for --insecure #2372)
• 8375314 chore(release): 4.0.11 [skip ci]
• f77fa68 🗜️ build [skip ci]
• 6e1f923 fix: fix blank line after table header (fix: match package.json to workspace definition #2332)
• 5384d17 chore(deps-dev): Bump @ babel/preset-env from 7.16.8 to 7.16.11 (refactor: remove main cli export #2367)
• 00487d1 chore(deps-dev): Bump rollup from 2.64.0 to 2.66.0 (refactor: migrate spinner to use import/export #2366)
• 83ca3b1 chore(deps-dev): Bump semantic-release from 18.0.1 to 19.0.2 (fix: handle unexpected errors #2368)
• bd01abe chore(deps-dev): Bump node-fetch from 3.1.1 to 3.2.0 (chore: use commonjs instead of umd #2369)
• 6a16d1b chore(deps-dev): Bump @ babel/core from 7.16.7 to 7.16.12 (chore: remove dud webpack loader exclude rule #2370)
• dd22152 chore(deps-dev): Bump node-fetch from 3.1.0 to 3.1.1 (#2359)
• f049e52 chore(deps-dev): Bump eslint from 8.6.0 to 8.7.0 (docs: document new flag --tags which aliases to --project-tags #2360)
• 4241eca chore(deps-dev): Bump rollup from 2.63.0 to 2.64.0 (CLI docs using only markdown #2361)
• eef2bf5 chore(deps-dev): Bump jasmine from 4.0.1 to 4.0.2 (Add ARM64 support #2362)
• 84eac22 chore(deps-dev): Bump @ babel/preset-env from 7.16.7 to 7.16.8 (Feat: show confidence score #2363)
• 96c46c7 chore(readme): fix copyright date (chore: update cloud config to group iac ownership #2356)
• ae01170 chore(release): 4.0.10 [skip ci]
• fceda57 🗜️ build [skip ci]
• 8f80657 fix(security): fix redos vulnerabilities
• c4a3ccd Merge pull request from GHSA-rrrm-qjm4-v8hf
• d7212a6 chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (feat: don't hash emails in monitor command #2352)
• 5a84db5 chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (change msg when missing = in key=value #2350)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs