[PR #221] Bump react-syntax-highlighter from 15.4.3 to 15.5.0 in /ui #269

New issue

Open

opened 2026-03-02 05:19:32 +03:00 by kerem · 0 comments

kerem commented

2026-03-02 05:19:32 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hibiken/asynqmon/pull/221
Author: @dependabot[bot]
Created: 3/15/2022
Status: 🔄 Open

Base: master ← Head: dependabot/npm_and_yarn/ui/react-syntax-highlighter-15.5.0

📝 Commits (1)

3185a9e Bump react-syntax-highlighter from 15.4.3 to 15.5.0 in /ui

📊 Changes

2 files changed (+17 additions, -57 deletions)

View changed files

📝 ui/package.json (+1 -1)
📝 ui/yarn.lock (+16 -56)

📄 Description

Bumps react-syntax-highlighter from 15.4.3 to 15.5.0.

Release notes

Sourced from react-syntax-highlighter's releases.

15.5.0

react-syntax-highlighter/react-syntax-highlighter#466: updated prismjs to 1.27.0, fixing the XSS vuln mentioned in react-syntax-highlighter/react-syntax-highlighter#461

As noted in the PR, updating prism usually brings along a few surprises; this one gave us a new programming language named false, which as you can imagine is fun to import and parse within Javascript.

Thanks to everyone for your patience. We'll be getting back in the groove of regular releases here.

Changelog

Sourced from react-syntax-highlighter's changelog.

Changelog

Commits

05300e6 15.5.0
4deb247 Update prism to 1.27.0, fix failing build (#466)
519b8cd Avoid adding extra newline to end of code string
ddc6fbb Apply white-space inline style when astGenerator missing
76d7f11 Update prism-light.js
c609476 Update config.yml
ac5df05 Expose refractor alias function on prism light syntax highlighter
a07d67e fix #349
3d9b4ac fix: Fix the increase in running time caused by using 'concat'
cae6a5c Create codeql-analysis.yml
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hibiken/asynqmon/pull/221 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/15/2022 **Status:** 🔄 Open **Base:** `master` ← **Head:** `dependabot/npm_and_yarn/ui/react-syntax-highlighter-15.5.0` --- ### 📝 Commits (1) - [`3185a9e`](https://github.com/hibiken/asynqmon/commit/3185a9ed9fe6fbc1544f74bafe79c442dfe9cba9) Bump react-syntax-highlighter from 15.4.3 to 15.5.0 in /ui ### 📊 Changes **2 files changed** (+17 additions, -57 deletions) <details> <summary>View changed files</summary> 📝 `ui/package.json` (+1 -1) 📝 `ui/yarn.lock` (+16 -56) </details> ### 📄 Description Bumps [react-syntax-highlighter](https://github.com/react-syntax-highlighter/react-syntax-highlighter) from 15.4.3 to 15.5.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/releases">react-syntax-highlighter's releases</a>.</em></p> <blockquote> <h2>15.5.0</h2> <ul> <li><a href="https://github-redirect.dependabot.com/react-syntax-highlighter/react-syntax-highlighter/pull/466">react-syntax-highlighter/react-syntax-highlighter#466</a>: updated prismjs to 1.27.0, fixing the XSS vuln mentioned in <a href="https://github-redirect.dependabot.com/react-syntax-highlighter/react-syntax-highlighter/issues/461">react-syntax-highlighter/react-syntax-highlighter#461</a></li> </ul> <p>As noted in the PR, updating <code>prism</code> usually brings along a few surprises; this one gave us a new programming language named <code>false</code>, which as you can imagine is fun to import and parse within Javascript.</p> <p>Thanks to everyone for your patience. We'll be getting back in the groove of regular releases here.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/blob/master/CHANGELOG.MD">react-syntax-highlighter's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/05300e67cfadeb25fbd6125a2df0c820db3d0673"><code>05300e6</code></a> 15.5.0</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/4deb247af2ca36b0bcae0f7ddee09eca3909d087"><code>4deb247</code></a> Update prism to 1.27.0, fix failing build (<a href="https://github-redirect.dependabot.com/react-syntax-highlighter/react-syntax-highlighter/issues/466">#466</a>)</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/519b8cdddd69bac9e3660abc67d6795cf420fa9e"><code>519b8cd</code></a> Avoid adding extra newline to end of code string</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/ddc6fbbe925c03845d041141aa7f45b68ad95336"><code>ddc6fbb</code></a> Apply white-space inline style when astGenerator missing</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/76d7f1136facee2ccb541e30283bd67ddce4f449"><code>76d7f11</code></a> Update prism-light.js</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/c609476694d548af0bb54f95d67fe7ca08624dcc"><code>c609476</code></a> Update config.yml</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/ac5df0594a93a7772d031213f401cccb8d055222"><code>ac5df05</code></a> Expose refractor alias function on prism light syntax highlighter</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/a07d67e0bd8527e072e40bbc873a226b647c647d"><code>a07d67e</code></a> fix <a href="https://github-redirect.dependabot.com/react-syntax-highlighter/react-syntax-highlighter/issues/349">#349</a></li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/3d9b4ac703e07bf992126dce3ff62cd15f795860"><code>3d9b4ac</code></a> fix: Fix the increase in running time caused by using 'concat'</li> <li><a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/commit/cae6a5cc643ef7cb44b7804e0dda4951626e0ef5"><code>cae6a5c</code></a> Create codeql-analysis.yml</li> <li>Additional commits viewable in <a href="https://github.com/react-syntax-highlighter/react-syntax-highlighter/compare/v15.4.3...15.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-syntax-highlighter&package-manager=npm_and_yarn&previous-version=15.4.3&new-version=15.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>