[Snyk] Fix for 1 vulnerabilities

[jmatsushita]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: metalsmith-dynamic-collections

The new version differs by 2 commits.

• 77c2f8a 0.1.1
• e9968e9 Fix vulnerable deps

See the full diff

Package name: metalsmith-layouts

The new version differs by 5 commits.

• 1c547d9 Prepare 2.0.0 (#140)
• 0e434ac Update dependencies to enable Greenkeeper 🌴 (#135)
• 4ddd399 v2 (#132)
• 5f83be3 Update after move (#136)
• 7b8bd9b Add custom error message to include file path (#130)

See the full diff

Package name: metalsmith-markdown

The new version differs by 26 commits.

• 64dce32 1.0.1
• 9303875 Scripts: Added post version push and publish
• 902f1f8 Package - Debug: upgraded
• 6189068 relocated badges
• fdb9b16 Updated badge
• 4f90b65 Added Prettier and ESLint
• 77d81e7 1.0.0
• 8136dea History file: updated
• 2a0c309 Packages Updated
• c232a98 Merge pull request [Snyk] Security upgrade lodash from 4.17.4 to 4.17.16 #10 from haohui/haohui-precise-match-extname
• 2685861 Merge branch 'stefanhenze-master'
• e960bfd Merge branch 'master' of https://github.com/stefanhenze/metalsmith-markdown into stefanhenze-master
• 7bd82f9 Merge pull request [Snyk] Fix for 1 vulnerabilities #24 from datesss/master
• 7c40a6a Merge pull request [Snyk] Security upgrade pug from 2.0.0-rc.4 to 3.0.1 #16 from martinvehmas/master
• a67fed1 Merge pull request [Snyk] Fix for 1 vulnerabilities #30 from Zearin/fix/Buffer
• 245dbb3 Merge pull request [Snyk] Upgrade pug from 2.0.0-rc.4 to 2.0.4 #6 from blakeembrey/patch-1
• baacb43 Merge pull request #32 from ilyaigpetrov/master
• dcfde68 Upgrade marked to 0.4.0, [Snyk] Fix for 12 vulnerabilities #31
• 1f14938 fix: Add `try`/`catch` fallback around `Buffer.from`
• fa09481 fix: `new Buffer` ▶︎ `Buffer.from`
• b7eddfa key to string to string before converting
• 491edbb Join the path as a file path with path.join
• 2ad15cc Replace backslash with slash in directory path.
• 2e049f1 Match of extension name of the markdown files with precise regex.

See the full diff

Package name: metalsmith-pandoc

The new version differs by 7 commits.

• 8738a31 1.0.0
• 5c0d2a2 readme: add note about docx in intro
• 756170b update packages
• 7ea6b85 fix docx test
• 240d6f6 add test for docx
• ca08334 use pdc.stream to support binary output from pandoc
• cdd20aa use pdc.stream to support binary output from pandoc

See the full diff

Package name: metalsmith-permalinks

The new version differs by 39 commits.

• 925c9e1 1.0.0
• 7c44016 Merge branch 'gaggle-sibling-folder-strategy'
• edede6e Prettier applied
• 5c47416 Merge branch 'sibling-folder-strategy' of https://github.com/gaggle/metalsmith-permalinks into gaggle-sibling-folder-strategy
• 832842b Merge branch 'gratex-feature-better-filenames'
• f6e9192 Merge branch 'feature-better-filenames' of https://github.com/gratex/metalsmith-permalinks into gratex-feature-better-filenames
• 14f7d3d Fixed tests
• 13e598e Merge branch 'simbo-master'
• bafa5ba Merge branch 'master' of https://github.com/simbo/metalsmith-permalinks into simbo-master
• 3ac23d4 Fixed ESLint issues introduced by PR before Travis was applied
• 27aa74b Add folder strategy to readme
• deaa8b9 Allow use of sibling-folder strategy
• 78f4b5b Test sibling folder functionality
• 937a52c Merge pull request #35 from mdvorscak/master
• 9131829 Makefile not necessary
• d65bcd3 Merge pull request #80 from segmentio/add-badges
• 07e6d37 Create PULL_REQUEST_TEMPLATE.md
• 7105998 Update issue templates
• e8bad5e Create CODE_OF_CONDUCT.md
• 3f2fb06 Badges added
• 5a1476e Merge pull request #79 from segmentio/travis-fix
• b28df2c Travis: Removed Node.js v4 and v5
• 7ba5342 Substitue package path fix for old versions of npm
• 399bfb8 Merge pull request #78 from segmentio/travis-and-package-updates

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)