Bump highlight.js from 9.18.1 to 10.0.3

[dependabot-preview]

Bumps highlight.js from 9.18.1 to 10.0.3.

Release notes

Sourced from highlight.js's releases.

10.0.2

Fixes a serious potential freeze/infinite loop issue. Everyone on version 10 should upgrade.

• Remove support for AMD module loading, which never truly worked properly anyways.

10.0.1

Fixes: sublanguage with no rule matches causes text to disappear in final output. (#2506).

10.0.0

Welcome to version 10.0. This a major release and therefore will contain breaking changes.

Breaking Changes

Our normal minor releases try to never break anything, holding all breaking changes for major releases. We tried to squeeze in as many as we could this time so that after 10.0 ships we'll be back to quiet sailing for a while before we need to push version 11. That said, we're very conservative about what we consider a breaking change.

i.e., if there it could possibly break things for anyone, it's typically a breaking change. The fact is a vast majority of users should upgrade and probably not notice any changes at all.

See VERSION_10_BREAKING_CHANGES.md for a comprehensive list of breaking changes, but here is a summary... if you use:

Core highlight.js lib on the client (with no extra CDN languages)

Just keep doing that.

• If you're using darkula.css, you'll need to change that to darcula.css
• The minified distributable has changed from .pack.js to .min.js, update your name when you update your URL.
• If your users have very old browsers, they may no longer be supported (no more IE11, etc.). (We're using ES2015 code now.)
• nohighlight or no-highlight are the only two CSS classes that will SKIP highlighting completely. *text* and *plain* no longer will do this.

Core highlight.js lib on the client (plus additional CDN languages)

Quite a few grammars have been renamed. Ex: nimrod.js is now nim.js.

• Check the renamed grammars to see if you might need to update your links.
• Be aware that you can't use version 9 CDN JS files anymore, they aren't compatible.
• Plus read the above list of items.

highlight.js on the server (via NPM) and only use the public API

If you're just pulling in the FULL library (require('./highlight.js')) just keep doing that. You might not need to change anything.

• If you're manually loading a smaller set of languages and using registerLanguage make sure you check out all the renamed grammars and dependency changes.
• Read the client-side lists above also.

highlight.js on the server (via NPM) with a custom integration

Read the complete breaking changes list carefully.

• Read the client-side lists above also.

... (truncated)

Changelog

Sourced from highlight.js's changelog.

Version 10.0.3

• Issue fix(javascript) Fix get/set incorrect highlighting (#2515) Josh Goebel

Version 10.0.2

Brower build:

• Issue (bug) Fix: Version 10 fails to load as CommonJS module. (#2511) Josh Goebel
• Issue (removal) AMD module loading support has been removed. (#2511) Josh Goebel

Parser Engine Changes:

• Issue fix(parser) Fix freeze issue with illegal 0 width matches (#2524) Josh Goebel

Version 10.0.1

Parser Engine Changes:

• (bug) Fix sublanguage with no relevance score (#2506) Josh Goebel

Version 10.0.0

New languages:

• add(php-template) Explicit language to detect PHP templates (vs xml) Josh Goebel
• enh(python) Added python-repl for Python REPL sessions
• add(never) Added 3rd party Never language support

New themes:

• Srcery by [Chen Bin][]

Parser Engine Changes:

• (bug) Fix beginKeywords to ignore . matches (#2434) Josh Goebel
• (enh) add before:highlight plugin API callback (#2395) Josh Goebel
• (enh) add after:highlight plugin API callback (#2395) Josh Goebel
• (enh) split out parse tree generation and HTML rendering concerns (#2404) Josh Goebel
• (enh) every language can have a name attribute now (#2400) Josh Goebel

... (truncated)

Commits

• a4b1bd2 pull in get/set fix, bump to 10.0.3
• e29f8f7 pin 10.0.2
• 1bc0562 fix(parser) Fix freezing issue with illegal 0 width matches (#2524)
• 82ae7ce (build) browser build is CommonJS and IIFE, no more AMD (#2511)
• 33af2ea version bump to 10.0.1
• 376659a fix(parser) fixes sublanguage with no rule matches (#2506)
• 51906fb (docs) there is a single AUTHORS file now
• 2cb1759 (docs) tiny effort to update Russian docs with new names/urls
• b49986e bump v10.0.0
• e8ca7fb (chore) htmlbars.js now depends on handlebars.js
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #172.