Bump ejs from 2.5.8 to 2.5.9

Created by: dependabot-preview[bot]

Bumps ejs from 2.5.8 to 2.5.9.

Changelog

Sourced from ejs's changelog.

v2.5.8: 2018-03-25

• Add filename to error when include file cannot be found (Leon)
• Node v9 in CI (Thomas)

• Fixed special case for Express caching (mde)

• Added Promise/async-await support to renderFile (mde)
• Added notes on IDE support to README (Betanu701)

v2.5.7: 2017-07-29

• Pass configured escape function to rethrow (straker)

• Added vulnerabilities info into README (mde)

• Avoid creating function object in hot execution path (User4martin)

• Added benchmark (User4martin)
• Tests for looped includes (User4martin)

v2.5.6: 2017-02-16

• Use configured escape function for filenames in errors (mde)

• Make file-loader configurable to allow template pre-processing (hacke2)

• Improved renderFile performance (nwoltman)

v2.5.5: 2016-12-06

• Allow 'filename' for opts-in-data, but sanitize when rendered (mde)

v2.5.4: 2016-12-05

• Blackist more options from opts-in-data (mde)
• Allow trailing comments in output modes (mde)

• Added 'name' attribute for easy identification (designfrontier)

v2.5.3: 2016-11-28

• Blackist 'root' option from opts-in-data (mde)

v2.5.2: 2016-07-25

• Added link to EJS Playground (RyanZim)

• Revert express auto 'root' option (RyanZim)

v2.5.1: 2016-07-25

• Output literal %> with %%> (Roy Miloh)
• Allow setting project root for includes (cnwhy)
• UMD support for the browser (RyanZim)
• Exported escapeXML method to allow manual escaping of output (mde)
• Tests for strict mode (RyanZim, mde)
• Added ESLint for project source code (mde)

• Whitespace slurp in preprocessor include (mmis1000)

... (truncated)

Commits

• a7a0d42 Version 2.5.9
• aaa00de Fixes #358 and others -- fixes options-passing for Express
• ca2c30f Updated benchmarking tests for linting
• aaad805 Removed superfluous whitespace
• a611ecf Allow ES6 syntax
• 789b57e Removed old JSHint files
• 8dc994e Re-enable perf tests
• 5b60df3 Updated dev deps
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.