[Snyk] Upgrade hugo-bin from 0.70.2 to 0.73.0

[snyk-bot]

Snyk has created this PR to upgrade hugo-bin from 0.70.2 to 0.73.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released a month ago, on 2021-07-06.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-1298035	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: hugo-bin

• 0.73.0 - 2021-07-06
  

  0.73.0

• 0.72.5 - 2021-07-01
  

  0.72.5

• 0.72.4 - 2021-06-29
  

  0.72.4

• 0.72.3 - 2021-06-28
  

  0.72.3

• 0.72.2 - 2021-06-24
  

  0.72.2

• 0.72.1 - 2021-06-22
  

  0.72.1

• 0.71.1 - 2021-05-02
  

  0.71.1

• 0.71.0 - 2021-05-01
  

  0.71.0

• 0.70.2 - 2021-04-22
  

  0.70.2

from hugo-bin GitHub release notes

Commit messages

Package name: hugo-bin

• e20c7a6 0.73.0
• 6bcda33 Update Hugo to v0.85.0.
• 0442061 Update devDependencies and regenerate package-lock.json
• 7af506a 0.72.5
• da77cd2 Update Hugo to v0.84.4.
• 377bd6c 0.72.4
• 27664f6 Update Hugo to v0.84.3.
• a6e88a5 0.72.3
• cc1acdf Update Hugo to v0.84.2.
• 45359a5 0.72.2
• 9c88564 Update Hugo to v0.84.1.
• 5524db2 0.72.1
• f6fc5be Update eslint to v7.29.0
• f154c8f Switch to GitHub Actions CI. (Bump actions/cache from 2 to 3.0.11 #103)
• 8f5ed85 0.72.0
• 1fd32fa Update Hugo to v0.84.0.
• 37ed401 Update devDependencies
• e3e3030 0.71.1
• b7316c6 Update Hugo to v0.83.1.
• 0be8f9c 0.71.0
• 2e94185 Update Hugo to v0.83.0.
• 1f6208a Update eslint to v7.25.0
• 1f18621 README.md: remove broken links
• b6fb1b4 Travis CI: Add Node.js 16

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs