chore: update dependency gh-pages to v5 [security] #87

renovate · 2024-04-23T00:05:15Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
gh-pages	`2.0.1` -> `5.0.0`

GitHub Vulnerability Alerts

CVE-2022-37611

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js.

Release Notes

tschaub/gh-pages (gh-pages)

`v5.0.0`

Compare Source

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

#438 - Remove quotation marks (@Vicropht)
#459 - Bump async from 2.6.4 to 3.2.4 (@tschaub)
#454 - Bump email-addresses from 3.0.1 to 5.0.0 (@tschaub)
#455 - Bump actions/setup-node from 1 to 3 (@tschaub)
#453 - Bump actions/checkout from 2 to 3 (@tschaub)
#445 - Update README to clarify project site configuration requirements with tools like CRA, webpack, Vite, etc. (@Nezteb)
#452 - Assorted updates (@tschaub)

`v4.0.0`

Compare Source

This release doesn't include any breaking changes, but due to updated development dependencies, tests are no longer run on Node 10.

#432 - Updated dev dependencies and formatting (@tschaub)
#430 - Bump ansi-regex from 3.0.0 to 3.0.1 (@tschaub)
#431 - Bump path-parse from 1.0.6 to 1.0.7 (@tschaub)
#427 - Bump async from 2.6.1 to 2.6.4 (@tschaub)
#423 - Bump minimist from 1.2.5 to 1.2.6 (@tschaub)

`v3.2.3`

Compare Source

#398 - Update glob-parent (@tschaub)
#395 - Switch from filenamify-url to filenamify (@tw0517tw)

`v3.2.2`

Compare Source

#396 - Revert "security(deps): bump filenamify-url to 2.1.1" (@tschaub)

`v3.2.1`

Compare Source

#393 - security(deps): bump filenamify-url to 2.1.1 (@AviVahl)

`v3.2.0`

Compare Source

This release updates a few development dependencies and adds a bit of documentation.

#391 - Update dev dependencies (@tschaub)
#375 - Add note about domain problem (@demee)
#390 - Fix little typo in the README (@cizordj)
#388 - Bump hosted-git-info from 2.8.8 to 2.8.9 (@tschaub)
#387 - Bump y18n from 4.0.0 to 4.0.3 (@tschaub)
#378 - Add GitHub Actions tips to readme.md (@mickelsonmichael)
#386 - Bump lodash from 4.17.14 to 4.17.21 (@tschaub)

`v3.1.0`

Compare Source

The cache directory used by gh-pages is now node_modules/.cache/gh-pages. If you want to use a different location, set the CACHE_DIR environment variable.

#362 - Move the cache directory (@tschaub)
#361 - Update dev dependencies (@tschaub)

`v3.0.0`

Compare Source

Breaking changes:

None really. But tests are no longer run on Node < 10. Development dependencies were updated to address security warnings, and this meant tests could no longer be run on Node 6 or 8. If you still use these Node versions, you may still be able to use this library, but be warned that tests are no longer run on these versions.

All changes: