Skip to content

build(deps): bump markdown-it from 14.3.3 to 15.0.3 - #33

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/markdown-it-15.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/markdown-it-15.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026 •

Copy link
Copy Markdown

Bumps markdown-it from 14.3.3 to 15.0.3.

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

  • Updated dependencies.

Fixed

  • Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
  • Require whitespace before multiline reference titles.

Security

  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.

[15.0.2] - 2026-09-11

Security

  • Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

[15.0.1] - 2026-08-27

Changed

  • doc: replace oxide theme with custom one.

Fixed

  • Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
  • Preserve spaces in code spans whose content consists only of spaces, #1180.
  • Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

  • Fixed quadratic complexity when replacing fuzzy links.
  • Fixed quadratic complexity in scheme backscan (inline linkify rule).

[15.0.0] - 2026-07-30

Added

  • Exposed parser internals classes as static properties on markdownit.
  • Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
  • Added the markdown-it/browser export with bundled ESM and UMD builds.
  • Added colored CLI help on supported terminals via argparse 3.
  • Added reference labels to link/image tokens, #938.
  • Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

... (truncated)

Commits
  • a8c00d4 15.0.3 released
  • e9504a4 Skip pathological speed tests during coverage collection
  • 46d8b52 Deps bump
  • 928bc8c Fix quadratic inline HTML parsing
  • 48fbc46 Fix quadratic reference parsing and partially address #1213
  • 3c51991 15.0.2 released
  • cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
  • 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
  • 924b203 15.0.1 released
  • 25c3895 Changelog update
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 30, 2026
@dependabot dependabot Bot changed the title build(deps): bump markdown-it from 14.3.2 to 15.0.2 build(deps): bump markdown-it from 14.3.3 to 15.0.3 Oct 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/markdown-it-15.0.2 branch from 2948113 to 14ad856 Compare October 22, 2026 11:07
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.3.3 to 15.0.3.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.3.3...15.0.3)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 15.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/markdown-it-15.0.2 branch from 14ad856 to 56b73f7 Compare October 22, 2026 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants