v8.1.2

amirivojdan/shekarv8.1.2May 6, 2026by yoshinorin

AI Summary

This release focuses on bug fixes, performance enhancements, and dependency updates. It corrects issues with external link attributes and code block escaping while streamlining internal plugin loading and enhancing CI/CD security.

Key Highlights

Fixed typo in external link attributes (noopenner to noopener).
Improved performance of the external link regular expression.
Fixed incorrect handling of single-line code blocks when escaping Swig and HTML comments.
Added dependency review action for vulnerability scanning in CI/CD.
Refactored plugin loading by removing internal Node.js API usage.

Full Release Notes

## Fixes

* fix(external_link): noopenner should be noopener by @stevenjoezhang in https://github.com/hexojs/hexo/pull/5729
* fix: Incorrectly ignores single-line code blocks when escaping Swig and HTML comments by @D-Sketon in https://github.com/hexojs/hexo/pull/5722

## Performances

* perf: faster externalLink regexp by @D-Sketon in https://github.com/hexojs/hexo/pull/5706

## Refactor

* refactor: remove node internal api usage in loadPlugin by @renbaoshuo in https://github.com/hexojs/hexo/pull/5769

## CI/CD

* ci: add dependency-review action for vulnerability scanning by @yoshinorin in https://github.com/hexojs/hexo/pull/5734
* ci: enable trusted publishing by @yoshinorin in https://github.com/hexojs/hexo/pull/5735

## Test

* fix(test): add missing await to unlink in save_database test by @KentarouTakeda in https://github.com/hexojs/hexo/pull/5753

## Dependencies

* chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5724
* chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5726
* chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5727
* chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5741
* chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5744
* chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5746
* chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5742
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5743
* chore(deps): add lockfile by @yoshinorin in https://github.com/hexojs/hexo/pull/5739

## Misc

* fix: update ESLint test configuration by @D-Sketon in https://github.com/hexojs/hexo/pull/5725

**Full Changelog**: https://github.com/hexojs/hexo/compare/v8.1.1...v8.1.2