Skip to content

chore(deps): bump the js-deps group across 1 directory with 3 updates - #1326

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/docs/js-deps-1013dd42cf
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/docs/js-deps-1013dd42cf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the js-deps group with 3 updates in the /docs directory: markdown-it, markdown-it-mathjax3 and vitepress-plugin-tabs.

Updates markdown-it from 14.3.0 to 15.0.2

Changelog

Sourced from markdown-it's changelog.

[15.0.2] - 2026-09-11

Security

  • Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

[15.0.1] - 2026-08-27

Changed

  • doc: replace oxide theme with custom one.

Fixed

  • Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
  • Preserve spaces in code spans whose content consists only of spaces, #1180.
  • Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

  • Fixed quadratic complexity when replacing fuzzy links.
  • Fixed quadratic complexity in scheme backscan (inline linkify rule).

[15.0.0] - 2026-07-30

Added

  • Exposed parser internals classes as static properties on markdownit.
  • Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
  • Added the markdown-it/browser export with bundled ESM and UMD builds.
  • Added colored CLI help on supported terminals via argparse 3.
  • Added reference labels to link/image tokens, #938.
  • Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

Changed

  • [breaking] linkify-it => v6
    • No fuzzy links by default.
    • No auth part check by default.
    • Unicode punctuation terminates the link by default (should help with CJK).
    • See linkify-it changelog for other changes.
  • Package root now resolves to prebuilt ESM and CJS files instead of raw sources. Distribution files were reorganized under dist/ and dist/browser/.
  • Migrated to Typescript.
  • entities => v8. Can be rolled back to v7 if compatibility issues happen.
  • Moved validateLink, normalizeLink and normalizeLinkText from properties to prototype methods.
  • Reworked issue templates and contribution guidelines.

... (truncated)

Commits
  • 3c51991 15.0.2 released
  • cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
  • 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
  • 924b203 15.0.1 released
  • 25c3895 Changelog update
  • aaadcfa Fix quadratic complexity in scheme backscan (inline linkify rule)
  • 09fa071 Fix quadratic complexity when replacing fuzzy links
  • 988c82b fix: don't strip spaces from all-space code spans
  • 26b9a7b Polish previous commit
  • e8c6688 fix: preserve IPv6 brackets in normalizeLink (#1204)
  • Additional commits viewable in compare view

Updates markdown-it-mathjax3 from 4.3.2 to 5.2.0

Commits

Updates vitepress-plugin-tabs from 0.9.0 to 0.9.1

Release notes

Sourced from vitepress-plugin-tabs's releases.

vitepress-plugin-tabs@0.9.1

Patch Changes

Commits
  • 11245cc chore: update versions (#126)
  • 6cce7b2 fix(tabs): restore code block background for variant:code (#125)
  • 1754c70 chore(deps): update cloudflare/wrangler-action action to v4 (#123)
  • bd6c764 chore(deps): update actions/github-script action to v9 (#122)
  • da958fa fix(deps): update all non-major dependencies (#120)
  • 494e0fd chore(deps): update actions/checkout action to v7 (#121)
  • e779242 fix(deps): update all non-major dependencies (#119)
  • 14c2cac chore(deps): update cloudflare/wrangler-action digest to 9acf94a (#118)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: d1e4c00235

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread docs/package.json
"markdown-it": "^15.0.0",
"markdown-it-footnote": "^4.0.0",
"markdown-it-mathjax3": "^4.3.2",
"markdown-it-mathjax3": "^5.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Keep MathJax within VitePress's supported range

When dependencies are installed with strict peer checking, this version cannot satisfy the existing VitePress 1.6.4 peer contract: the updated lockfile still declares markdown-it-mathjax3: "^4" for VitePress at docs/package-lock.json:2621-2623, while the root now requires v5. This makes strict-peer installations fail and leaves the documentation build using a major version VitePress does not support; retain v4 or upgrade VitePress to a release that explicitly supports v5.

Useful? React with 👍 / 👎.

@dependabot dependabot Bot changed the title chore(deps): bump the js-deps group in /docs with 3 updates chore(deps): bump the js-deps group across 1 directory with 3 updates Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/js-deps-1013dd42cf branch 6 times, most recently from c27137d to 27d4763 Compare September 8, 2026 19:26
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/js-deps-1013dd42cf branch 3 times, most recently from f679e4e to a945788 Compare September 16, 2026 19:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/js-deps-1013dd42cf branch 3 times, most recently from 27bcf7a to 250022f Compare September 24, 2026 19:25
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/js-deps-1013dd42cf branch 2 times, most recently from 0b4f49b to 86f2e62 Compare September 29, 2026 19:25
Bumps the js-deps group with 3 updates in the /docs directory: [markdown-it](https://github.com/markdown-it/markdown-it), [markdown-it-mathjax3](https://github.com/nzt/markdown-it-mathjax3) and [vitepress-plugin-tabs](https://github.com/sapphi-red/vitepress-plugins).


Updates `markdown-it` from 14.3.0 to 15.0.2
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.3.0...15.0.2)

Updates `markdown-it-mathjax3` from 4.3.2 to 5.2.0
- [Commits](https://github.com/nzt/markdown-it-mathjax3/commits/v5.2.0)

Updates `vitepress-plugin-tabs` from 0.9.0 to 0.9.1
- [Release notes](https://github.com/sapphi-red/vitepress-plugins/releases)
- [Commits](https://github.com/sapphi-red/vitepress-plugins/compare/vitepress-plugin-tabs@0.9.0...vitepress-plugin-tabs@0.9.1)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: js-deps
- dependency-name: markdown-it-mathjax3
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: js-deps
- dependency-name: vitepress-plugin-tabs
  dependency-version: 0.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: js-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/docs/js-deps-1013dd42cf branch from 86f2e62 to 0108e17 Compare September 30, 2026 19:24

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants