[Snyk] Upgrade ejs from 0.3.1 to 0.8.8

[trabab]

Snyk has created this PR to upgrade ejs from 0.3.1 to 0.8.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 18 versions ahead of your current version.

• The recommended version was released 12 years ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: ejs

• 0.8.8 - 2014-03-24
• 0.8.6 - 2014-03-21
• 0.8.5 - 2013-11-22
• 0.8.4 - 2013-05-08
• 0.8.3 - 2012-09-13
• 0.8.2 - 2012-08-16
• 0.8.1 - 2012-08-11
• 0.8.0 - 2012-07-25
• 0.7.2 - 2012-06-22
• 0.7.1 - 2012-03-26
• 0.7.0 - 2012-03-25
• 0.6.1 - 2011-12-10
• 0.6.0 - 2011-12-09
• 0.5.0 - 2011-11-20
• 0.4.3 - 2011-06-20
• 0.4.2 - 2011-05-11
• 0.4.1 - 2011-04-21
• 0.4.0 - 2011-04-21
• 0.3.1 - 2011-02-24

from ejs GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[trabab]

This upgrade from ejs v0.3.1 to v0.8.8 introduces significant breaking changes that require code modifications.

Key Breaking Changes:

• Data Object Structure: Starting with v0.6.0, the requirement to pass data within a locals object was removed. Code that previously used ejs.render(str, { locals: { user: 'tobi' } }) must be changed to ejs.render(str, { user: 'tobi' }).
• Option Renaming: In v0.8.4, the escape option was renamed, which will break any code that was using it.
• Escaping Behavior: The logic for escaping HTML entities was changed in v0.8.6 to prevent double-escaping, which may alter the rendered output.

Recommendation:
Developers must review all ejs.render() calls and update the data object structure by removing the nested locals object. Additionally, check for usage of the escape option and update to the new name if necessary.

Source: History.md on GitHub

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.