[Snyk] Security upgrade hexo from 3.2.2 to 3.4.2

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Directory Traversal SNYK-JS-MOMENT-2440688	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hexo

The new version differs by 125 commits.

• 50b5eb9 3.4.2
• 123817b Fix wrong pagination when end_size = 0 (#2858)
• 1aa55df fix: Add defaults to console command generate (#2862)
• 7589ac7 Fix 2845 (#2865)
• 41c517d WIP: Update test dev dependencies (#2848)
• b4dcdc8 Mocha version upgrade 2.5.3 to 4.0.1 (#2849)
• 5aa8b51 Merge pull request #2837 from hexojs/use-eslint-ci
• b4068c5 3.4.1
• 21bed8a remove nodejs_version: 9 until npm supports (#2838)
• 73461a9 Merge pull request #2810 from RandallKent/limit-meta-description-length
• 24282e1 remove unused module
• 54f0503 chore(eslint): use eslint-ci to speed up build times
• 86003f5 chore(package): add eslint-ci
• e53236b Add comment on why we're truncating & update test to use should
• e8f70cb Update appveyor.yml (#2826)
• 7f5f5b5 Update .travis.yml (#2822)
• 2721fb3 Merge pull request #2824 from darkrasid/fix_img_tag_bug
• c14aba3 fix bug: remove dupliated root path when using asset_img tag
• d40879b Rel external switched to noopener (#2820)
• 078dd71 3.4.0
• 8c36305 Merge pull request #2815 from hexojs/fix-file-stat-test
• 63c3dce chore(eslint): make eslint happy
• 9c58052 chore(package): style
• a218422 hotfix(file): cast dev to uint32

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal