Starstruk Logo MarkStarstruk

v8.1.2

CapSoftware/Capv8.1.2May 6, 2026by yoshinorin

AI Summary

A maintenance release focusing on dependency updates, CI/CD improvements, and performance optimizations for external link handling. Includes security updates for GitHub Actions.

Key Highlights

  • Added dependency-review action for vulnerability scanning.
  • Improved performance of external link regex.
  • Fixed `noopenner` typo in external link handling.
  • Added lockfile generation for dependency management.

New Features

  • Dependency review action for vulnerability scanning.
  • Lockfile generation.

Full Release Notes

## Fixes

* fix(external_link): noopenner should be noopener by @stevenjoezhang in https://github.com/hexojs/hexo/pull/5729
* fix: Incorrectly ignores single-line code blocks when escaping Swig and HTML comments by @D-Sketon in https://github.com/hexojs/hexo/pull/5722

## Performances

* perf: faster externalLink regexp by @D-Sketon in https://github.com/hexojs/hexo/pull/5706

## Refactor

* refactor: remove node internal api usage in loadPlugin by @renbaoshuo in https://github.com/hexojs/hexo/pull/5769

## CI/CD

* ci: add dependency-review action for vulnerability scanning by @yoshinorin in https://github.com/hexojs/hexo/pull/5734
* ci: enable trusted publishing by @yoshinorin in https://github.com/hexojs/hexo/pull/5735

## Test

* fix(test): add missing await to unlink in save_database test by @KentarouTakeda in https://github.com/hexojs/hexo/pull/5753

## Dependencies

* chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5724
* chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5726
* chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5727
* chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5741
* chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5744
* chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5746
* chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5742
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5743
* chore(deps): add lockfile by @yoshinorin in https://github.com/hexojs/hexo/pull/5739

## Misc

* fix: update ESLint test configuration by @D-Sketon in https://github.com/hexojs/hexo/pull/5725

**Full Changelog**: https://github.com/hexojs/hexo/compare/v8.1.1...v8.1.2