[Snyk] Security upgrade ecmarkup from 3.16.0 to 10.0.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ecmarkup

The new version differs by 250 commits.

• 016c0bb Version 10.0.1
• 5ce4e28 Version 10.0.0 (#411)
• a7ebc3c fix build-spec (#412)
• 92a4e60 drop changelog (#404)
• e919955 completion-record local typechecking (#408)
• b0cc87e rename some cli flags (#406)
• 5b19588 various tweaks to the biblio (#405)
• 33de657 Bump various dependencies (#378)
• a5f95e9 remove runtime dependency on eslint by depending on the codeframe formatter directly (#377)
• 8471723 switch from nomnom to command-line-args (#376)
• 8e577d8 ecmascript spelling (#407)
• 6b5838b Version 9.8.1
• ce4a276 Fix header parser (#403)
• 74db0e9 Version 9.8.0
• b971460 Add shortcuts help dialog (#400)
• f34a045 Version 9.7.1
• da3f316 Ensure emu-meta tags are fenced by the same mechanisms that xrefs are (#395)
• 7f9c84c fix test broken in last commit, oops
• 2e7e5f2 stop trying to use the ecmarkdown parse tree from the linting phase (#393)
• 57cf9cb Version 9.7.0
• ff18989 Add [fence-effects=""] to stop effect propagation (#388)
• 67b40a0 bump ecmarkdown and support arbitrary attributes for steps (#392)
• da9b7e9 Rename Xref#canHaveEffect to Xref#shouldPropagateEffect (#389)
• d457b66 Version 9.6.5

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.