Bump markdown-it and @11ty/eleventy #478

dependabot · 2023-02-11T16:21:43Z

Bumps markdown-it to 13.0.1 and updates ancestor dependency @11ty/eleventy. These dependencies need to be updated together.

Updates markdown-it from 8.4.2 to 13.0.1

Changelog

Sourced from markdown-it's changelog.

[13.0.1] - 2022-05-03

Fixed

Bumped linkify-it to 4.0.1. That should fix some hangs, caused by wrong data, returned from linkify-it.

[13.0.0] - 2022-04-22

Added

Added a new token type text_special to store escaped characters, same as text but unaffected by replacement plugins (smartquotes, typographer, linkifier, etc.).

Added a new rule text_join in core ruler. Text replacement plugins may choose to insert themselves before it.

Changed

(p) is no longer replaced with § by typographer (conflicts with ℗), #763.

text_collapse rule is renamed to fragments_join.

Fixed

Smartquotes, typographic replacements and plain text links can now be escaped with backslash (e.g. \(c) or google\.com are no longer replaced).

Fixed collision of emphasis and linkifier (so http://example.org/foo._bar_-_baz is now a single link, not emphasized). Emails and fuzzy links are not affected by this.

[12.3.2] - 2022-01-08

Security

Fix possible ReDOS in newline rule. Thanks to @MakeNowJust.

[12.3.1] - 2022-01-07

Fixed

Fix corner case when tab prevents paragraph continuation in lists, #830.

[12.3.0] - 2021-12-09

Changed

StateInline.delimiters[].jump is removed.

Fixed

Fixed quadratic complexity in pathological ***<10k stars>***a***<10k stars>*** case.

[12.2.0] - 2021-08-02

Added

Ordered lists: add order value to token info.

Fixed

Always suffix indented code block with a newline, #799.

[12.1.0] - 2021-07-01

... (truncated)

Commits

e843acc Merge branch 'master' of github.com:markdown-it/markdown-it
bda7182 13.0.1 released
b8b610f Dist rebuild
d17df13 Bump linkify-it to 4.0.1
0c19c37 Merge pull request #866 from yne/patch-1
e157cd2 doc: Add syntax highlighting
6ec0b76 13.0.0 released
0e4c0f4 Dist rebuild
d1757ed Bump linkify-it to v4
bab0baf Added examples on how to add and modify rules (#619)
Additional commits viewable in compare view

Updates @11ty/eleventy from 0.10.0 to 2.0.0

Release notes

Sourced from @11ty/eleventy's releases.

Eleventy v2.0.0: Now with twice as many Possums

🚨 The full release notes are available on The Eleventy Blog: Eleventy v2.0.0 or you can watch me talk about v2.0 on YouTube.

Eleventy v2.0.0 is now available! You can try it out now:
# Local project
npm install @11ty/eleventy@latest
Global install
npm install @11ty/eleventy@latest -g
Read more about local versus global installation.

Watch a short video about 2.0 on YouTube.

New to Eleventy?

Eleventy is a flexible and production-ready site generator known for its zero-client JavaScript footprint, speedy sites, speedy builds, and full control over the output. Watch The State of Eleventy in Two Minutes or read more about Eleventy’s project goals.

The Big Features

Smaller, More Secure

✅ Dependencies decreased by 32.1%: 211 modules (311 in v1.0.2)

✅ node_modules file weight decreased by 77.8%: 34.3 MB (155 MB in v1.0.2)

✅ 30.5% faster npm install time

Faster Builds

Improved build performance (tested on a sample 500 page site against v1.0.2) using:

Liquid: ✅ 18.18% faster

Nunjucks: ✅ 17.74% faster

Markdown (with Liquid): ✅ 17.95% faster

JavaScript (11ty.js): ✅ 8.33% faster

--incremental for incremental builds #108

Smarter incremental builds with support for layout dependencies, registered dependencies on custom templates, dependencies in pagination data or eleventyImport #975

--ignore-initial command line option to skip the first build (best paired with --incremental)

Use emulated passthrough copy to serve passthrough files directly without triggering a build (will still work with live reload) #2456

Plugins

Support for WebC, the new single file format for web components

Eleventy Edge will render Eleventy templates in an Edge Function for dynamic content (bundled with Eleventy)

Eleventy Dev Server replaces Browsersync, adds support for DOM-diffing live reloads. #1305 (bundled with Eleventy)

Render Plugin will render any template syntax inside other files (bundled with Eleventy)

Internationalization (i18n) Plugin makes it easy to create localized sites (bundled with Eleventy)

HTML <base> Plugin makes it easy to deploy your site to any folder path without changing any content (works great with the path prefix feature) (bundled with Eleventy)

Support for the Vite plugin

... (truncated)

Changelog

Sourced from @11ty/eleventy's changelog.

Dependency notes

@iarna/toml has a 3.0 that we have never been on but it was released the same day as the last 2.x https://github.com/BinaryMuse/toml-node/commits/master (needs more investigation)

List of dependencies that went ESM

@sindresorhus/slugify ESM at 2.x

multimatch is ESM at 6

bcp-47-normalize at 1.x

Release Procedure

(Optional) Update minor dependencies in package.json

npx npm-check-updates

or npm outdated + npm update --save

If the minimum Node version changed, make sure you update package.json engines property.

Make sure the error message works correctly for Node versions less than 10.

0.12.x+ requires Node 10+

1.x+ requires Node 12+

2.x+ requires Node 14+

rm -rf node_modules && rm -f package-lock.json && npm install

npm audit

Make sure npx ava runs okay

Update version in package.json

(Canary) Use -canary.1 suffix

(Beta) Use -beta.1 suffix

Run npm run coverage

Check it all in and commit

Tag new version

Release

(Canary) npm publish --access=public --tag=canary

NOTE: that in 3.0 we need to switch this to alpha to avoid 11ty/eleventy#2758

(Beta) npm publish --access=public --tag=beta

NOTE: When releasing a beta, make sure to also release a canary to mitigate 11ty/eleventy#2758.

(Main) npm publish --access=public

(Optional) Build and commit a new the eleventy-edge-cdn project to generate a new Eleventy Edge lib.

Unfortunate note about npm canary tag: if you push a 1.0.0-canary.x to canary after a 2.0.0-canary.x, it will use the last pushed tag when you npm install from canary (not the highest version number)

Docs/Website (Main releases only)

Maybe search for 2.0.0-canary. or 2.0.0-beta. in the docs copy to update to the stable release, if applicable.

Check in a new 11ty-website site with updated package.json version.

Add version to 11ty-website versions.json

Commit it

Create a new branch for branched version

(Main) Check out the previous version git branch and add outdated: true to _data/config.json and commit/push.

Go to https://app.netlify.com/sites/11ty/settings/domain and set up a subdomain for it.

Release Notes on GitHub (Main releases only)

... (truncated)

Commits

05c6263 v2.0.0
5c2a5bf Update dev-dependencies
7ed1fef Merge pull request #2781 from danburzo/mdlib-set
97243b6 v2.0.0-beta.3
55e0a62 v2.0.0-canary.35
23b80d9 Merge pull request #2783 from mrmartineau/fix/serverless-var
9f13b8e Fixes serverlessFilePath is not defined (2.0.0-beta.2) #2782
b466258 Make markdown library .set() method optional
bde84b4 v2.0.0-beta.2
6f877de v2.0.0-canary.34
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 13.0.1 and updates ancestor dependency [@11ty/eleventy](https://github.com/11ty/eleventy). These dependencies need to be updated together. Updates `markdown-it` from 8.4.2 to 13.0.1 - [Release notes](https://github.com/markdown-it/markdown-it/releases) - [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md) - [Commits](markdown-it/markdown-it@8.4.2...13.0.1) Updates `@11ty/eleventy` from 0.10.0 to 2.0.0 - [Release notes](https://github.com/11ty/eleventy/releases) - [Changelog](https://github.com/11ty/eleventy/blob/master/docs/release-instructions.md) - [Commits](11ty/eleventy@v0.10.0...v2.0.0) --- updated-dependencies: - dependency-name: markdown-it dependency-type: indirect - dependency-name: "@11ty/eleventy" dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

vercel · 2023-02-11T16:21:46Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated
tiny-helpers	✅ Ready (Inspect)	Visit Preview	💬 Add your feedback	Feb 11, 2023 at 4:23PM (UTC)

dependabot bot added the dependencies Pull requests that update a dependency file label Feb 11, 2023

dependabot bot mentioned this pull request Feb 11, 2023

Bump markdown-it and @11ty/eleventy #469

Closed

vercel bot deployed to Preview February 11, 2023 16:23 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump markdown-it and @11ty/eleventy #478

Bump markdown-it and @11ty/eleventy #478

dependabot bot commented on behalf of github Feb 11, 2023

vercel bot commented Feb 11, 2023 •

edited

Bump markdown-it and @11ty/eleventy #478

Are you sure you want to change the base?

Bump markdown-it and @11ty/eleventy #478

Conversation

dependabot bot commented on behalf of github Feb 11, 2023

[13.0.1] - 2022-05-03

Fixed

[13.0.0] - 2022-04-22

Added

Changed

Fixed

[12.3.2] - 2022-01-08

Security

[12.3.1] - 2022-01-07

Fixed

[12.3.0] - 2021-12-09

Changed

Fixed

[12.2.0] - 2021-08-02

Added

Fixed

[12.1.0] - 2021-07-01

Eleventy v2.0.0: Now with twice as many Possums

New to Eleventy?

The Big Features

Smaller, More Secure

Faster Builds

Plugins

Dependency notes

List of dependencies that went ESM

Release Procedure

Docs/Website (Main releases only)

Release Notes on GitHub (Main releases only)

vercel bot commented Feb 11, 2023 • edited

vercel bot commented Feb 11, 2023 •

edited