[NEUTRAL] Update dependency erusev/parsedown to ^1.7.2

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
erusev/parsedown (source)	^1.6.0 -> ^1.7.2

By merging this PR, the issue #1130 will be automatically resolved and closed:

Severity	CVSS Score	CVE	Reachability
High	8.1	CVE-2019-10905
Low	3.7	CVE-2018-1000162

---

Release Notes

erusev/parsedown (erusev/parsedown)

v1.7.2

Compare Source

This is a security release and resolves an issue which would allow a user to add arbitrary classes to fenced code blocks. This might have security consequences, see #​699 for more detail.

v1.7.1

Compare Source

This is a bugfix release. The following have been resolved:

#​475: "Loose" lists will now contain paragraphs in all items, not just some.
#​433: Links will no longer be double nested
#​525: The info-string when beginning a code block may now contain non-word characters (e.g. c++)
#​561: The mbstring extension (which we already depend on) has been added explicitly to composer.json
#​563: The Parsedown::version constant now matches the release version
#​560: Builds will now fail if we forget to update the version constant again 😉

Thanks to @​PhrozenByte, @​harikt, @​erusev, @​luizbills, and @​aidantwoods for their contributions to this release.

v1.7.0: Safe Mode

Compare Source

v1.6.4

Compare Source

v1.6.3

Compare Source

v1.6.2

Compare Source

v1.6.1

Compare Source

---

• If you want to rebase/retry this PR, check this box