🤖 Update dependency gh-pages to version 5.x

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
gh-pages	4.0.0 → 5.0.0

---

tschaub gh-pages vulnerable to prototype pollution

CVE-2022-37611 / GHSA-8mmm-9v2q-x3f9

More information

Details

Prototype pollution vulnerability in tschaub gh-pages via the partial variable in util.js.

Severity

• CVSS Score: 9.8 / 10 (Critical)
• Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-37611
• https://github.com/tschaub/gh-pages/issues/446
• https://github.com/tschaub/gh-pages/blob/e363b144defe8e555f5a54251a6f7f1297c0e3f6/lib/util.js#L11
• https://github.com/tschaub/gh-pages/blob/e363b144defe8e555f5a54251a6f7f1297c0e3f6/lib/util.js#L16
• https://github.com/tschaub/gh-pages/pull/452
• https://github.com/advisories/GHSA-8mmm-9v2q-x3f9

This data is provided by the GitHub Advisory Database (CC-BY 4.0).

---

Release Notes

tschaub/gh-pages (gh-pages)

v5.0.0

Compare Source

Potentially breaking change: the publish method now always returns a promise. Previously, it did not return a promise in some error cases. This should not impact most users.

Updates to the development dependencies required a minimum Node version of 14 for the tests. The library should still work on Node 12, but tests are no longer run in CI for version 12. A future major version of the library may drop support for version 12 altogether.

• #​438 - Remove quotation marks (@​Vicropht)
• #​459 - Bump async from 2.6.4 to 3.2.4 (@​tschaub)
• #​454 - Bump email-addresses from 3.0.1 to 5.0.0 (@​tschaub)
• #​455 - Bump actions/setup-node from 1 to 3 (@​tschaub)
• #​453 - Bump actions/checkout from 2 to 3 (@​tschaub)
• #​445 - Update README to clarify project site configuration requirements with tools like CRA, webpack, Vite, etc. (@​Nezteb)
• #​452 - Assorted updates (@​tschaub)

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
growgen-xyz-blog	Ready	Preview	Aug 14, 2026 10:10pm

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock

error SyntaxError: Invalid value type 134:0 in /tmp/renovate/repos/github/gongbaodd/gongbaodd.github.io/yarn.lock
    at Parser.unexpected (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:64026:11)
    at Parser.parse (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:64154:16)
    at Parser.parse (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:64131:26)
    at parse (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:64231:21)
    at module.exports.exports.default (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:63793:96)
    at Function.<anonymous> (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:3068:63)
    at Generator.next (<anonymous>)
    at step (/opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:310:30)
    at /opt/containerbase/tools/yarn-slim/1.22.22/20.6.1/node_modules/yarn/lib/cli.js:321:13