Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jul 29, 2025

Bumps the npm_and_yarn group with 5 updates in the / directory:

Package From To
highlight.js 9.18.5 11.11.1
koa 2.16.1 3.0.1
marked 0.7.0 16.1.1
next 7.0.3 15.4.4
node-sass 4.14.1 9.0.0

Updates highlight.js from 9.18.5 to 11.11.1

Release notes

Sourced from highlight.js's releases.

v11.11.1 - Merry Christmas!

Version 11.11.1

  • Fixes regressions with Rust grammar in 11.11.0 release.

v11.11.0 - Happy Holidays

Version 11.11.0

CAVEATS / POTENTIALLY BREAKING CHANGES

  • Nothing.

Core Grammars:

  • fix(rust) - adds emoji support in single quote strings [joshgoebel][]
  • fix(apache) - support line continuation via \ [Josh Goebel][]
  • fix(makefile) - allow strings inside $() expressions [aneesh98][]
  • enh(arcade) updated to ArcGIS Arcade version 1.29 [Kristian Ekenes][]
  • enh(css) add all properties listed on MDN (96 additions including anchor-name, aspect-ratio, backdrop-filter, container, margin-trim, place-content, scroll-timeline, ...) [BaliBalo][]
  • enh(excel) add built-in functions for Excel 365 release to 2024 [Danny Winrow][]
  • enh(erlang) OTP 27 triple-quoted strings [nixxquality][]
  • enh(erlang) OTP 27 doc attribute [nixxquality][]
  • enh(erlang) OTP 27 Sigil type [nixxquality][]
  • enh(erlang) OTP25/27 maybe statement [nixxquality][]
  • enh(dart) Support digit-separators in number literals [Sam Rawlins][]
  • enh(csharp) add Contextual keywords file, args, dynamic, record, required and scoped [Alvin Joy][]
  • enh(lua) add 'pluto' as an alias [Sainan]
  • enh(bash) add reserved keywords time and coproc [Álvaro Mondéjar][]
  • enh(nix) update keywords [h7x4][]
  • enh(nix) support paths [h7x4][]
  • enh(nix) support lookup paths [h7x4][]
  • enh(nix) support operators [h7x4][]
  • enh(nix) support REPL keywords [h7x4][]
  • enh(nix) support markdown comments [h7x4][]
  • enh(nix) support basic function params [h7x4][]
  • enh(nix) better parsing of attrsets [h7x4][]
  • fix(c) - Fixed hex numbers with decimals [Dxuian]
  • fix(typescript) - Fixedoptional property not highlighted correctly [Dxuian]
  • fix(ruby) - fix |= operator false positives (as block arguments) [Aboobacker MK]
  • enh(gcode) rewrote language for modern gcode support [Barthélémy Bonhomme][]
  • fix(sql) - Fixed sql primary key and foreign key spacing issue [Dxuian]
  • fix(cpp) added flat_set and flat_map as a part of cpp 23 version [Lavan]
  • fix(yaml) - Fixed special chars in yaml [Dxuian]
  • fix(basic) - Fixed closing quotation marks not required for a PRINT statement [Somya]
  • fix(nix) remove add builtin [h7x4][]
  • fix(nix) mark or as builtin instead of literal [h7x4][]
  • fix(nix) handle ''' string escapes [h7x4][]
  • fix(nix) handle backslash string escapes [h7x4][]
  • fix(nix) don't mix escapes for " and '' strings [h7x4][]

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Version 11.11.1

  • Fixes regression with Rust grammar.

Version 11.11.0

CAVEATS / POTENTIALLY BREAKING CHANGES

  • Nothing yet.

Core Grammars:

  • fix(rust) - adds emoji support in single quote strings [joshgoebel][]
  • fix(apache) - support line continuation via \ [Josh Goebel][]
  • fix(makefile) - allow strings inside $() expressions [aneesh98][]
  • enh(arcade) updated to ArcGIS Arcade version 1.29 [Kristian Ekenes][]
  • enh(css) add all properties listed on MDN (96 additions including anchor-name, aspect-ratio, backdrop-filter, container, margin-trim, place-content, scroll-timeline, ...) [BaliBalo][]
  • enh(excel) add built-in functions for Excel 365 release to 2024 [Danny Winrow][]
  • enh(erlang) OTP 27 triple-quoted strings [nixxquality][]
  • enh(erlang) OTP 27 doc attribute [nixxquality][]
  • enh(erlang) OTP 27 Sigil type [nixxquality][]
  • enh(erlang) OTP25/27 maybe statement [nixxquality][]
  • enh(dart) Support digit-separators in number literals [Sam Rawlins][]
  • enh(csharp) add Contextual keywords file, args, dynamic, record, required and scoped [Alvin Joy][]
  • enh(lua) add 'pluto' as an alias [Sainan]
  • enh(bash) add reserved keywords time and coproc [Álvaro Mondéjar][]
  • enh(nix) update keywords [h7x4][]
  • enh(nix) support paths [h7x4][]
  • enh(nix) support lookup paths [h7x4][]
  • enh(nix) support operators [h7x4][]
  • enh(nix) support REPL keywords [h7x4][]
  • enh(nix) support markdown comments [h7x4][]
  • enh(nix) support basic function params [h7x4][]
  • enh(nix) better parsing of attrsets [h7x4][]
  • fix(c) - Fixed hex numbers with decimals [Dxuian]
  • fix(typescript) - Fixedoptional property not highlighted correctly [Dxuian]
  • fix(ruby) - fix |= operator false positives (as block arguments) [Aboobacker MK]
  • enh(gcode) rewrote language for modern gcode support [Barthélémy Bonhomme][]
  • fix(sql) - Fixed sql primary key and foreign key spacing issue [Dxuian]
  • fix(cpp) added flat_set and flat_map as a part of cpp 23 version [Lavan]
  • fix(yaml) - Fixed special chars in yaml [Dxuian]
  • fix(basic) - Fixed closing quotation marks not required for a PRINT statement [Somya]
  • fix(nix) remove add builtin [h7x4][]
  • fix(nix) mark or as builtin instead of literal [h7x4][]
  • fix(nix) handle ''' string escapes [h7x4][]
  • fix(nix) handle backslash string escapes [h7x4][]
  • fix(nix) don't mix escapes for " and '' strings [h7x4][]
  • fix(swift) - Fixed syntax highlighting for class func/var declarations [guuido]

... (truncated)

Commits
  • 08cb242 (release) 11.1.1
  • 048ba65 bump versions to 11.11.1
  • c5b6ad5 fix - ignored .DS_Store files
  • d020e48 enh(rust) can also escape a singe quote
  • 2db4c16 fix(rust) prevent symbol from gobbling strings
  • 93e6358 fix(rust) fix regression with string matching
  • 40883e1 (release) version 11.11.0 with npm bumps (#4185)
  • a667cde fix(rust) emoji supported in single quote strings (#4156)
  • 55b0deb enh(apache) support line continuation with \ (#4158)
  • 3e06867 fix(parser) prevent gobbling of illegal newlines (#4142)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by highlightjs_bot, a new releaser for highlight.js since your current version.


Updates koa from 2.16.1 to 3.0.1

Release notes

Sourced from koa's releases.

v3.0.1

What's Changed

Full Changelog: koajs/koa@v3.0.0...v3.0.1

v3.0.0

This is a major release.

Breaking

  • Minimum node v18
  • Removes .redirect('back'), adds .back(fallback_url) @​fl0w koajs/koa#1115
  • For .redirect(), don't render redirect values in anchor ref koajs/koa@ff25eb4
  • req.origin should display the origin header if it exists, not the current hostname koajs/koa#1008. origin now aligns with the Origin header as used in CORS.
  • .body=<json> should not overwrite type if type already json koajs/koa#1120
  • Remove special ENOENT support koajs/koa#1861 - this is a big change and will require any file servers to adapt to this change for handling 404s / files not found
  • Removes generator deprecation messages. Generators are no longer supported. Koa no longer asserts if generators are used. Set content-length: 0 if body is explicitly set to null @​ognjenjevremovic #1528 Remove obsolete createAsyncCtxStorageMiddleware koajs/koa#1817
  • ctx.throw now requires a format of ctx.throw(status, error, properties). See: https://www.npmjs.com/package/http-errors

New

Fixes

... (truncated)

Changelog

Sourced from koa's changelog.

[!IMPORTANT] Moving forwards we are using the GitHub releases page at https://github.com/koajs/koa/releases in combination with np for publishing releases and their changelogs.


3.0.0-alpha.3 / 2025-02-11

fixes

  • Avoid redos on host and protocol getter

3.0.0-alpha.2 / 2024-11-04

breaking changes

  • Update http-errors to v2.0.0 #1486
  • Remove res.redirect('back'), add back() method to ctx #1115
  • Replace node querystring with URLSearchParams #1828
  • Remove obsolete createAsyncCtxStorageMiddleware #1817

features

  • Add support for web WHATWG #1830

updates

  • Update cookies to ~0.9.1 #1846
  • Update statuses to ^2.0.1
  • Update supertest to ^7.0.0 #1841

fixes

  • Fix exports.defaults in package.json #1630
  • Fix leaky handles in tests #1838
  • Fix body null checks #1814
  • Fix reformatting redirect URLs #1805 #1804
  • Fix passing ctx in error handler #1758

migrations

  • Migrate from jest to the native node test runner #1845

3.0.0-alpha.1 / 2023-04-12

fixes

3.0.0-alpha.0 / 2023-01-02

Breaking Changes

... (truncated)

Commits
  • 1ddb048 3.0.1
  • 422c551 Merge commit from fork
  • 6e51eb1 build(deps-dev): bump form-data from 4.0.3 to 4.0.4 (#1894)
  • d378e5c build(deps-dev): bump supertest from 7.1.1 to 7.1.4 (#1895)
  • cb22d8d build(deps): bump statuses from 2.0.1 to 2.0.2 (#1888)
  • 0acad8f feat: replace cache-content-type with mime-types directly (#1886)
  • 2f6e814 feat: replace debug module with pure node:util::debuglog (#1885)
  • 8620ced build(deps): bump debug from 4.4.0 to 4.4.1 (#1880)
  • dec1ffc build(deps-dev): bump supertest from 7.1.0 to 7.1.1 (#1879)
  • 9057541 chore: removes done callbacks in tests [CHORE-1870] (#1875)
  • Additional commits viewable in compare view

Updates marked from 0.7.0 to 16.1.1

Release notes

Sourced from marked's releases.

v16.1.1

16.1.1 (2025-07-18)

Bug Fixes

  • fix stong and em tokens in angle brackets (#3731) (ad8535c)

v16.1.0

16.1.0 (2025-07-17)

Features

  • add generic types for parser and renderer output (#3722) (39a0ee3)

v16.0.0

16.0.0 (2025-06-27)

Bug Fixes

  • remove cjs build & update min node to 20 (#3687) (0a35d8f)

BREAKING CHANGES

v15.0.12

15.0.12 (2025-05-20)

Bug Fixes

v15.0.11

15.0.11 (2025-04-25)

Bug Fixes

  • fix image alt text rendered to match common mark (#3668) (2c0e47a)

... (truncated)

Commits
  • 9ba9c02 chore(release): 16.1.1 [skip ci]
  • ad8535c fix: fix stong and em tokens in angle brackets (#3731)
  • eb3ad1a chore(release): 16.1.0 [skip ci]
  • 39a0ee3 feat: add generic types for parser and renderer output (#3722)
  • 1d687e0 docs: add marked-html-renderer to known extensions (#3724)
  • d816635 chore(deps-dev): Bump semantic-release from 24.2.6 to 24.2.7 (#3725)
  • 052f9ed chore(deps-dev): Bump esbuild from 0.25.5 to 0.25.6 (#3726)
  • 7fc8692 chore(deps-dev): Bump eslint from 9.30.1 to 9.31.0 (#3727)
  • 56642d9 chore(deps-dev): Bump eslint from 9.30.0 to 9.30.1 (#3723)
  • dbf29d9 chore(deps-dev): Bump semantic-release from 24.2.5 to 24.2.6 (#3721)
  • Additional commits viewable in compare view

Updates next from 7.0.3 to 15.4.4

Release notes

Sourced from next's releases.

v15.4.4

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Fix dynamicParams false layout case in dev (#82026)
  • Turbopack: fix scope hoisting variable renaming bug (#81640)
  • Upgrade to swc v33 (#81750)
  • Revert "[metadata] use https protocol for schema urls" (#81934)

Credits

Huge thanks to @​bgw @​mischnic @​huozhi @​lukesandberg and @​ijjk for helping!

v15.4.3

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • Turbopack: fix dist dir on Windows (#81758)

Credits

Huge thanks to @​mischnic for helping!

v15.4.2

[!NOTE]
This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • pages router metadata bugs with React 19 (#81733)
  • [metadata] replace for initial body icon case (#81688)
  • Ensure custom NextServer config is honored (#81681)

Credits

Huge thanks to @​huozhi, @​ijjk, and @​ztanner for helping!

v15.4.2-canary.19

Core Changes

  • Turbopack: write tasks doesn't need to be session dependent, as effects will restore: #78727

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by vercel-release-bot, a new releaser for next since your current version.


Updates node-sass from 4.14.1 to 9.0.0

Release notes

Sourced from node-sass's releases.

v9.0.0

What's Changed

Breaking changes

Supported Environments

OS Architecture Node
Windows x86 & x64 16, 18, 19, 20
OSX x64 16, 18, 19, 20
Linux* x64 16, 18, 19, 20
Alpine Linux x64 16, 18, 19, 20

*Linux support refers to major distributions like Ubuntu, and Debian

v8.0.0

What's Changed

Breaking changes

Features

Dependencies

  • Bump true-case-path@2.2.1
  • Bump node-gyp @​9.0.0
  • Bump nan@^2.17.0
  • Bump sass-graph@^4.0.1

Misc

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the npm_and_yarn group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [highlight.js](https://github.com/highlightjs/highlight.js) | `9.18.5` | `11.11.1` |
| [koa](https://github.com/koajs/koa) | `2.16.1` | `3.0.1` |
| [marked](https://github.com/markedjs/marked) | `0.7.0` | `16.1.1` |
| [next](https://github.com/vercel/next.js) | `7.0.3` | `15.4.4` |
| [node-sass](https://github.com/sass/node-sass) | `4.14.1` | `9.0.0` |



Updates `highlight.js` from 9.18.5 to 11.11.1
- [Release notes](https://github.com/highlightjs/highlight.js/releases)
- [Changelog](https://github.com/highlightjs/highlight.js/blob/main/CHANGES.md)
- [Commits](highlightjs/highlight.js@9.18.5...11.11.1)

Updates `koa` from 2.16.1 to 3.0.1
- [Release notes](https://github.com/koajs/koa/releases)
- [Changelog](https://github.com/koajs/koa/blob/master/History.md)
- [Commits](koajs/koa@v2.16.1...v3.0.1)

Updates `marked` from 0.7.0 to 16.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Changelog](https://github.com/markedjs/marked/blob/master/.releaserc.json)
- [Commits](markedjs/marked@v0.7.0...v16.1.1)

Updates `next` from 7.0.3 to 15.4.4
- [Release notes](https://github.com/vercel/next.js/releases)
- [Changelog](https://github.com/vercel/next.js/blob/canary/release.js)
- [Commits](vercel/next.js@7.0.3...v15.4.4)

Updates `node-sass` from 4.14.1 to 9.0.0
- [Release notes](https://github.com/sass/node-sass/releases)
- [Changelog](https://github.com/sass/node-sass/blob/master/CHANGELOG.md)
- [Commits](sass/node-sass@v4.14.1...v9.0.0)

---
updated-dependencies:
- dependency-name: highlight.js
  dependency-version: 11.11.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: koa
  dependency-version: 3.0.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: marked
  dependency-version: 16.1.1
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: next
  dependency-version: 15.4.4
  dependency-type: direct:production
  dependency-group: npm_and_yarn
- dependency-name: node-sass
  dependency-version: 9.0.0
  dependency-type: direct:production
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 29, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant