chore(deps-dev): Bump highlight.js from 10.3.1 to 10.3.2

.eslintrc.json

@@ -17,6 +17,7 @@
     "one-var": "off",
     "no-control-regex": "off",
     "no-prototype-builtins": "off",
+    "no-extra-semi": "error",
 
     "prefer-const": "error",
     "no-var": "error"

.github/ISSUE_TEMPLATE.md

@@ -2,9 +2,9 @@
 
 **Markdown flavor:** Markdown.pl|CommonMark|GitHub Flavored Markdown|n/a
 
-<!-- The NPM version or commit hash having the issue --> 
+<!-- The NPM version or commit hash having the issue -->
 
-<!-- 
+<!--
 
 	If submitting something other than a defect with Marked itself, please use the following:
 
@@ -34,7 +34,7 @@
 
 <!-- Describe what code combination got you there -->
 
-<!-- 
+<!--
 	If error is thrown add the following:
 
 ## Call stack & console log

.github/ISSUE_TEMPLATE/Bug_report.md

@@ -1,27 +1,28 @@
----
-name: Bug report
-about: Marked says it does this thing but does not
-
----
-
-**Describe the bug**
-A clear and concise description of what the bug is.
-
-**To Reproduce**
-Steps to reproduce the behavior:
-
-<!-- If possible, use the Marked Demo permalink and compare to the CommonMark Dingus permalink to demonstrate the bug -->
-<!--
-1. [Marked Demo](https://marked.js.org/demo/)
-2. [CommonMark Demo](https://spec.commonmark.org/dingus/)
--->
-
-<!-- If you need a specific version and options to reproduce the bug, use the following template -->
-<!--
-1. Install marked `npm install --save [email protected]` with the version you are using
-2. Run marked with input string and options such as `marked('hello *world*', {gfm: true})`
-3. Actual output (or error) is...
--->
-
-**Expected behavior**
-A clear and concise description of what you expected to happen.
+---
+name: Bug report
+about: Marked says it does this thing but does not
+
+---
+**Marked version:**
+
+**Describe the bug**
+A clear and concise description of what the bug is.
+
+**To Reproduce**
+Steps to reproduce the behavior:
+
+<!-- If possible, use the Marked Demo permalink and compare to the CommonMark Dingus permalink to demonstrate the bug -->
+<!--
+1. [Marked Demo](https://marked.js.org/demo/)
+2. [CommonMark Demo](https://spec.commonmark.org/dingus/)
+-->
+
+<!-- If you need a specific version and options to reproduce the bug, use the following template -->
+<!--
+1. Install marked `npm install --save [email protected]` with the version you are using
+2. Run marked with input string and options such as `marked('hello *world*', {gfm: true})`
+3. Actual output (or error) is...
+-->
+
+**Expected behavior**
+A clear and concise description of what you expected to happen.

.github/ISSUE_TEMPLATE/Feature_request.md

@@ -1,14 +1,14 @@
----
-name: Feature request
-about: Marked doesn't do this thing and I think it should
-
----
-
-**Describe the feature**
-A clear and concise description of what you would like.
-
-**Why is this feature necessary?**
-A clear and concise description of why.
-
-**Describe alternatives you've considered**
-A clear and concise description of any alternative solutions or features you've considered.
+---
+name: Feature request
+about: Marked doesn't do this thing and I think it should
+
+---
+
+**Describe the feature**
+A clear and concise description of what you would like.
+
+**Why is this feature necessary?**
+A clear and concise description of why.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.

.github/ISSUE_TEMPLATE/Proposal.md

@@ -1,11 +1,11 @@
 ---
 name: Proposal
 about: Marked doesn't do this thing and I think it should
- 
+
 ---
- 
+
 **What pain point are you perceiving?.**
 A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
- 
+
 **Describe the solution you'd like**
 A clear and concise description of what you want to happen.

.github/PULL_REQUEST_TEMPLATE.md

@@ -1,8 +1,6 @@
 
 <!--
 
-	If release PR, add ?template=release.md to the PR url to use the release PR template.
-
 	If badging PR, add ?template=badges.md to the PR url to use the badges PR template.
 
 	Otherwise, you are stating this PR fixes an issue that has been submitted; or,
@@ -48,6 +46,5 @@ Describe what code combination got you there
 
 In most cases, this should be a different person than the contributor.
 
-- [ ] Draft GitHub release notes have been updated.
 - [ ] CI is green (no forced merge required).
-- [ ] Merge PR
+- [ ] Squash and Merge PR following [conventional commit guidelines](https://www.conventionalcommits.org/).

.github/PULL_REQUEST_TEMPLATE/badges.md

@@ -6,9 +6,9 @@
 - [ ] Add a badge
 - [ ] Remove a badge
 
-<!-- 
+<!--
 
-	Explain your reasoning behind tagging that person. 
+	Explain your reasoning behind tagging that person.
 
 	Preferably by citing objective examples, like PRs, Issues, and so on.
 
@@ -47,4 +47,4 @@ within 30 days, if you have not indicated which option you are taking one of the
 
 -->
 
-Note: All committers must approve via review before merging, the disapproving committer can simply close the PR.
+Note: All committers must approve via review before merging, the disapproving committer can simply close the PR.

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+  - package-ecosystem: "npm"
+    versioning-strategy: "increase"
+    directory: "/"
+    schedule:
+      interval: "weekly"

.github/workflows/codeql-analysis.yml

@@ -0,0 +1,71 @@
+# For most projects, this workflow file will not need changing; you simply need
+# to commit it to your repository.
+#
+# You may wish to alter this file to override the set of languages analyzed,
+# or to provide custom queries or build logic.
+name: "CodeQL"
+
+on:
+  push:
+    branches: [master]
+  pull_request:
+    # The branches below must be a subset of the branches above
+    branches: [master]
+  schedule:
+    - cron: '0 9 * * 3'
+
+jobs:
+  analyze:
+    name: Analyze
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: false
+      matrix:
+        # Override automatic language detection by changing the below list
+        # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
+        language: ['javascript']
+        # Learn more...
+        # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
+
+    steps:
+    - name: Checkout repository
+      uses: actions/checkout@v2
+      with:
+        # We must fetch at least the immediate parents so that if this is
+        # a pull request then we can checkout the head.
+        fetch-depth: 2
+
+    # If this run was triggered by a pull request event, then checkout
+    # the head of the pull request instead of the merge commit.
+    - run: git checkout HEAD^2
+      if: ${{ github.event_name == 'pull_request' }}
+
+    # Initializes the CodeQL tools for scanning.
+    - name: Initialize CodeQL
+      uses: github/codeql-action/init@v1
+      with:
+        languages: ${{ matrix.language }}
+        # If you wish to specify custom queries, you can do so here or in a config file.
+        # By default, queries listed here will override any specified in a config file.
+        # Prefix the list here with "+" to use these queries and those in the config file.
+        # queries: ./path/to/local/query, your-org/your-repo/queries@main
+
+    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+    # If this step fails, then you should remove it and run the build manually (see below)
+    - name: Autobuild
+      uses: github/codeql-action/autobuild@v1
+
+    # ℹ️ Command-line programs to run using the OS shell.
+    # 📚 https://git.io/JvXDl
+
+    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+    #    and modify them (or add more) to build your code if your project
+    #    uses a compiled language
+
+    #- run: |
+    #   make bootstrap
+    #   make release
+
+    - name: Perform CodeQL Analysis
+      uses: github/codeql-action/analyze@v1

.github/workflows/tests.yml

@@ -0,0 +1,70 @@
+name: "Tests"
+on:
+  pull_request:
+  push:
+    branches:
+      - master
+
+jobs:
+  Test:
+    if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    strategy:
+      matrix:
+        node_version: ['lts/*', 'node']
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Install Node
+        uses: dcodeIO/setup-node-nvm@master
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: Install Dependencies
+        run: npm ci
+      - name: Run Unit Tests 👩🏽‍💻
+        run: npm run test:unit
+      - name: Run Spec Tests 👩🏽‍💻
+        run: npm run test:specs
+
+  Lint:
+    if: "!contains(github.event.head_commit.message, '[skip ci]')"
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Install Dependencies
+        run: npm ci
+      - name: Lint ✨
+        run: npm run test:lint
+
+  Release:
+    needs: [Test, Lint]
+    if: |
+      github.ref == 'refs/heads/master' &&
+      github.event.repository.fork == false
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Code
+        uses: actions/checkout@v2
+      - name: Install Dependencies
+        run: npm ci
+      - name: Build 🗜️
+        run: |
+          npm run build
+          if ! git diff --quiet; then
+            git config --global user.email "<>"
+            git config --global user.name "MarkedJS bot"
+            git commit -am "🗜️ build [skip ci]"
+          fi
+      - name: Release 🎉
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+        run: npx semantic-release
+
+  Skip:
+    if: contains(github.event.head_commit.message, '[skip ci]')
+    runs-on: ubuntu-latest
+    steps:
+      - name: Skip CI 🚫
+        run: echo skip ci

.gitignore

@@ -1,3 +1,7 @@
 .DS_Store
+.vercel
 node_modules/
 test/compiled_tests
+public
+docs/LICENSE.md
+