Update dependency autolinker to v4 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
autolinker	^3.16.0 -> ^4.0.0

---

Release Notes

gregjacobs/Autolinker.js

v4.0.0

Compare Source

• URL parser rewritten from using regular expressions to be a finite state machine. Greatly improves performance by guaranteeing linear time parsing and fixes long parse times in Safari in particular (which seems to have a slow regex backtracking implementation).
• IP addresses are now linked without a scheme like 'http://' prefixed to it. urls.ipV4Matches option controls this behavior.

Breaking Changes:

See https://github.com/gregjacobs/Autolinker.js#upgrading-from-v3x---v4x-breaking-changes

v3.16.2

Compare Source

• Reverted attempted fix for RTLO characters splitting links into two (from Autolinker vulnerable to RTLO URL spoofing attacks gregjacobs/Autolinker.js#377 / fix: strip direction override characters gregjacobs/Autolinker.js#386) because it prevents use of any RTLO characters with Autolinker. Will have to come up with a new way of fixing this issue.

v3.16.1

Compare Source

Do not use this version

• Attempted fix for RTLO characters breaking links into two (Autolinker vulnerable to RTLO URL spoofing attacks gregjacobs/Autolinker.js#377). However, this strips all RTLO characters from the input string which makes it impossible to use RTLO characters at all with Autolinker. Reverted in 3.16.2. Do not use this version.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.