v8.1.2

cjpais/Handyv8.1.2May 6, 2026by yoshinorin

AI Summary

A maintenance release focusing on security, performance improvements, and dependency updates. It fixes issues with external link attributes, single-line code block escaping, and adds CI/CD security scanning actions.

Key Highlights

Fixed external link attributes (noopenner -> noopener)
Fixed incorrect handling of single-line code blocks when escaping Swig
Performance improvement for externalLink regular expression
Added dependency-review action for vulnerability scanning
Updated various dependency actions to their latest versions

Full Release Notes

## Fixes

* fix(external_link): noopenner should be noopener by @stevenjoezhang in https://github.com/hexojs/hexo/pull/5729
* fix: Incorrectly ignores single-line code blocks when escaping Swig and HTML comments by @D-Sketon in https://github.com/hexojs/hexo/pull/5722

## Performances

* perf: faster externalLink regexp by @D-Sketon in https://github.com/hexojs/hexo/pull/5706

## Refactor

* refactor: remove node internal api usage in loadPlugin by @renbaoshuo in https://github.com/hexojs/hexo/pull/5769

## CI/CD

* ci: add dependency-review action for vulnerability scanning by @yoshinorin in https://github.com/hexojs/hexo/pull/5734
* ci: enable trusted publishing by @yoshinorin in https://github.com/hexojs/hexo/pull/5735

## Test

* fix(test): add missing await to unlink in save_database test by @KentarouTakeda in https://github.com/hexojs/hexo/pull/5753

## Dependencies

* chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5724
* chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5726
* chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5727
* chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5741
* chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5744
* chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5746
* chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5742
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5743
* chore(deps): add lockfile by @yoshinorin in https://github.com/hexojs/hexo/pull/5739

## Misc

* fix: update ESLint test configuration by @D-Sketon in https://github.com/hexojs/hexo/pull/5725

**Full Changelog**: https://github.com/hexojs/hexo/compare/v8.1.1...v8.1.2