v8.1.2

hexojs/hexov8.1.2May 6, 2026by yoshinorin

AI Summary

This release focuses on bug fixes, performance optimizations, and dependency updates. It addresses issues with external link attributes and code block escaping while improving the build pipeline with new security scanning actions.

Key Highlights

Fixed external link `noopenner` typo to ensure `noopener` is used correctly.
Fixed incorrect handling of single-line code blocks when escaping Swig and HTML comments.
Optimized external link regular expression for better performance.
Added dependency review action for vulnerability scanning in CI/CD.

Full Release Notes

## Fixes

* fix(external_link): noopenner should be noopener by @stevenjoezhang in https://github.com/hexojs/hexo/pull/5729
* fix: Incorrectly ignores single-line code blocks when escaping Swig and HTML comments by @D-Sketon in https://github.com/hexojs/hexo/pull/5722

## Performances

* perf: faster externalLink regexp by @D-Sketon in https://github.com/hexojs/hexo/pull/5706

## Refactor

* refactor: remove node internal api usage in loadPlugin by @renbaoshuo in https://github.com/hexojs/hexo/pull/5769

## CI/CD

* ci: add dependency-review action for vulnerability scanning by @yoshinorin in https://github.com/hexojs/hexo/pull/5734
* ci: enable trusted publishing by @yoshinorin in https://github.com/hexojs/hexo/pull/5735

## Test

* fix(test): add missing await to unlink in save_database test by @KentarouTakeda in https://github.com/hexojs/hexo/pull/5753

## Dependencies

* chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5724
* chore(deps): bump actions/download-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5726
* chore(deps): bump actions/upload-artifact from 5 to 6 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5727
* chore(deps): bump actions/dependency-review-action from 4.8.2 to 4.8.3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5741
* chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5744
* chore(deps): bump marocchino/sticky-pull-request-comment from 2 to 3 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5746
* chore(deps): bump actions/download-artifact from 7 to 8 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5742
* chore(deps): bump actions/upload-artifact from 6 to 7 by @dependabot[bot] in https://github.com/hexojs/hexo/pull/5743
* chore(deps): add lockfile by @yoshinorin in https://github.com/hexojs/hexo/pull/5739

## Misc

* fix: update ESLint test configuration by @D-Sketon in https://github.com/hexojs/hexo/pull/5725

**Full Changelog**: https://github.com/hexojs/hexo/compare/v8.1.1...v8.1.2