Merge pull request #372 from quarto-dev/snyk-upgrade-145b733a975d295d58c852dd038219d0

[Snyk] Upgrade katex from 0.16.28 to 0.17.0

Author: cscheid

crates/quarto-core/src/stage/stages/math_js.rs

@@ -80,7 +80,7 @@ pub const DEFAULT_MATHJAX_URL: &str =
 /// `katex_cdn_version_matches_npm_pin` test enforces the pairing —
 /// bump this together with the `katex` pins in the root and
 /// `hub-client/quarto-hub-sandboxed-preview` package.json.
-pub const DEFAULT_KATEX_URL_BASE: &str = "https://cdn.jsdelivr.net/npm/katex@0.16.28/dist/";
+pub const DEFAULT_KATEX_URL_BASE: &str = "https://cdn.jsdelivr.net/npm/katex@0.17.0/dist/";
 
 /// Math-rendering engine selected by `html-math-method:`.
 #[derive(Debug, Clone, PartialEq, Eq)]

hub-client/quarto-hub-sandboxed-preview/package-lock.json

@@ -11,7 +11,7 @@
   "dependencies": {
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "katex": "0.16.28"
+    "katex": "0.17.0"
   },
   "devDependencies": {
     "@types/katex": "^0.16.7",

hub-client/quarto-hub-sandboxed-preview/package.json

@@ -23,7 +23,7 @@
     "@types/katex": "^0.16.8",
     "@types/morphdom": "^2.3.0",
     "html2canvas": "^1.4.1",
-    "katex": "0.16.28",
+    "katex": "0.17.0",
     "morphdom": "^2.7.8",
     "reveal.js": "6.0.0",
     "reveal.js-menu": "^2.1.0"