[Snyk] Security upgrade hexo from 3.2.2 to 3.7.0

[one3chens]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hexo

The new version differs by 210 commits.

• c192429 3.7.0
• eff233c Add after_clean filter (#3091)
• 3e61346 upgrade lint-staged to version 7.0.0 (#3083)
• 3a68eeb Merge branch 'master' into update-lint-staged
• 8585080 Add after_clean filter
• 498dc10 chore(package): update mocha to version 5.0.5
• f7366c4 docs(readme): add david badge
• fd6b427 chore(package): update cheerio to version 0.22.0
• 75674c6 upgrade cheerio
• 305076c fix badge format
• 435271f Add David badge from readme
• d585b2c upgrade lint-staged
• b0633d5 upgrade mocha v5
• f9230cc fix(i18n): use default language when no language set (#3069)
• 3672fff chore(package): update hexo-util to version 0.6.3
• 65301af Remove array check on variable that is always array
• 057229c Use default language when no language set
• 1e84b96 Fixes: hljs option still doesn't work.
• 940495c 3.6.0
• 194bcc5 chore(package): update deps
• 37c31b0 Add support for yarn workspaces (#3045)
• f5d2985 patched loader with fallback
• 93a9b86 replaced require.resolve with resolve as per https://github.com/JLHwung
• ad2e7d2 fixes yarn workspace bugs

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution