[Snyk] Upgrade markdown-it-image-figures from 2.0.0 to 2.1.1

[snyk-bot]

Snyk has created this PR to upgrade markdown-it-image-figures from 2.0.0 to 2.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2023-01-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-FASTXMLPARSER-3325616	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: markdown-it-image-figures

• 2.1.1 - 2023-01-07
  
  • Update eslint to 8.31.0 (minor)
  • Update eslint-plugin-import to 2.26.0 (minor)
  • Update eslint-plugin-mocha to 10.1.0 (minor)
  • Update microbundle to 0.15.1 (major)
  • Update mocha to 10.2.0 (major)
  • Ensure vulnerabilities are fixed by updating package-lock.json
• 2.1.0 - 2022-04-05
  
  • Add figcaption:alt and figcaption:title options by @ nzakas in #12

  New Contributors

  • @ nzakas made their first contribution in #12
• 2.0.2 - 2022-04-04
  
  • Fixes issues with importing in ESM. #10
• 2.0.1 - 2022-03-28
  

  What's Changed

  • Bump minimist from 1.2.5 to 1.2.6 by @ dependabot in #9
  • Cleaning package.json and ensuring the latest practices are used.
• 2.0.0 - 2021-09-17
  

  Changes

  • Updated dependencies to avoid Moderate security issue: https://npmjs.com/advisories/1773
  • Changed the behaviour of lazy which, if truthy, it will only add loading="lazy" to the image (see below on breaking).
  • Added support for async decoding. Using async: true as an option, will add decoding="async" to all images by default.
  • Added removeSrc option which, if truthy, will allow you to remove the attribute src and store it as data-src.
  • Added classes option which will be appended / added as classes to the images.
  • Ensuring now that both async and lazy can be overridden per image base.
  • Enhanced the README to be more Web Performance aligned by default.

  Breaking

  • lazy now acts as a toggle to align with evergreen browsers which will only enable loading="lazy" on an image. If you want to replicate the same behaviour you got with lazy: true you need to use the following options: { lazy: true, removeSrc: true, classes: 'lazy' }

  Thanks to @ paulrobertlloyd for the suggestion on #7 !

from markdown-it-image-figures GitHub release notes

Commit messages

Package name: markdown-it-image-figures

• a39b9a7 2.1.1
• 6509624 Updating dependencies
• af1a9b4 2.1.0
• 5de5c82 Adding CI Badge
• 516a9eb No longer need to build
• ffd3a56 Merge pull request Bump liquidjs and @11ty/eleventy #12 from nzakas/figcaption-alt
• c0cd162 Add figcaption:alt and figcaption:title options
• 1a34597 clean only on prepublish
• 1b2583d Ensuring project is build on CI too
• 26279c9 Being more explicit
• 4af1d00 Updating CI
• 50bc599 2.0.2
• 0b1ea98 Moving files
• e82e3c6 Adding require and import tests
• 9c62ec0 Ensuring export is correct
• e2ea3c3 2.0.1
• e012d77 Merge pull request Update templated files #9 from Antonio-Laguna/dependabot/npm_and_yarn/minimist-1.2.6
• b6a35c3 Cleaning up package.json
• 6614069 Updating ignore
• 1a9b123 Bump minimist from 1.2.5 to 1.2.6

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs