[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
mkdocs-material (changelog)	==9.7.7 → ==9.8.0				minor
nolte/gh-plumbing	v2.0.0 → v2.2.0				minor
nolte/gh-plumbing	v2.0.0 → v2.2.0			workflow	minor
pymdown-extensions	==11.0.1 → ==12.3				major

---

Release Notes

squidfunk/mkdocs-material (mkdocs-material)

v9.8.0: mkdocs-material-9.8.0

Compare Source

[!WARNING]

Material for MkDocs reaches end of life on May 5, 2027. Critical fixes and security updates continue until that date.

We're continuing our work with Zensical, a maintained successor built by the team behind Material for MkDocs. It carries forward what we've learned from building documentation tools with this community, with Markdown authoring, a familiar design, and full control over your content. Zensical is Open Source and MIT-licensed.

You can evaluate Zensical alongside MkDocs using your existing mkdocs.yml. Check plugin compatibility and compare your pages, navigation, search, and customizations before switching. The classic theme variant preserves the appearance of Material for MkDocs. See the migration guide for the steps and current compatibility details.

Upcoming changes on November 5

This is primarily a security release. It raises dependency minimums to address known vulnerabilities. We recommend upgrading to this release and updating your dependency lockfiles.

Python 3.11 or newer is now required. Python 3.8–3.10 are no longer supported.

• Updated Node build-time dependencies to fix vulnerabilities
• Updated Python dependency minimums and required Python 3.11
• Removed RSS from recommended dependencies
• Updated project status and maintenance links
• Updated CLI notice with end-of-life and migration guidance
• Removed redirects from recommended dependencies

Previous dependency ranges allowed versions with known vulnerabilities. The new minimums cover core Python dependencies and the optional git and imaging extras, including GitPython 3.2.1 or newer for the git extra.

Recent releases of mkdocs-rss-plugin and mkdocs-redirects depend on ProperDocs, a separate static site generator that Material for MkDocs does not require. Removing these plugins from the recommended extra keeps its dependency footprint smaller and leaves the choice of additional tools to each project. If your project uses RSS feeds or redirects, declare the relevant plugin explicitly in your own dependencies.

The CLI notice now gives the May 5, 2027 end-of-life date and links to the Zensical migration guide. It also clarifies that third-party ProperDocs migration notices do not represent a recommendation from the Material for MkDocs team. Package metadata now marks the project as inactive and includes maintenance and migration links.

Selected Python security advisories addressed by the new minimums:

Dependency	Affected versions	New minimum	Advisory
Jinja2	<=3.1.5	3.1.6	CVE-2025-27516
Markdown	<3.8.1	3.8.1	CVE-2025-69534
Pygments	<2.20.0	2.20.0	CVE-2026-4539
PyMdown Extensions	<=11.0.0	11.0.1	CVE-2026-67422
Requests	<2.33.0	2.33.0	CVE-2026-25645
Pillow	<13.0.0	13.0.0	CVE-2026-96636
CairoSVG	<=2.9.0	2.9.1	CVE-2026-107378
GitPython	<=3.2.0	3.2.1	CVE-2026-114145

Pillow and CairoSVG apply to the imaging extra; GitPython applies to the git extra.

nolte/gh-plumbing

v2.2.0

Compare Source

Changes

🚀 Features

• feat(renovate): bound open PRs and group digest bumps in the shared preset (#​440) @​nolte

🧰 Maintenance

• feat(renovate): bound open PRs and group digest bumps in the shared preset (#​440) @​nolte

v2.1.0

Compare Source

Changes

🚀 Features

• feat(docs): audit the documentation tree for freshness (#​436) @​nolte
• feat(release): check the release notes with Vale before publishing (#​430) @​nolte
• feat(workflows): run the pull-request linter this repository ships (#​427) @​nolte

🐛 Bug Fixes

• fix(ci): pin the Vale version the spelling check installs (#​434) @​nolte
• fix(release): choose the presentation-branch write strategy from the target (#​432) @​nolte
• fix(release): resolve the tag, disclose the title, guard the cascade (#​428) @​nolte
• fix(release-drafter): give every pull request exactly one changelog category (#​425) @​nolte
• fix(audit): keep the ruleset contexts when classic protection is unreadable (#​424) @​nolte

🧰 Maintenance

• feat(docs): audit the documentation tree for freshness (#​436) @​nolte
• fix(release): choose the presentation-branch write strategy from the target (#​432) @​nolte
• chore(gitignore): ignore the Python artefacts the test suites produce (#​431) @​nolte
• docs(probot): warn that topics takes a string, not a YAML list (#​426) @​nolte

v2.0.1

Compare Source

Changes

🐛 Bug Fixes

• fix(workflows): pin the two toolchain references #​400 missed (#​415) @​nolte

🧰 Maintenance

• chore(settings): declare the on-hold label the stale exemption already names (#​423) @​nolte
• fix(workflows): grant contents: read so the stale caller can start (#​422) @​nolte
• fix(audit): hash-pin PyYAML so --require-hashes can succeed (#​420) @​nolte
• fix(settings): override the commons push restriction that GitHub rejects on this repository (#​419) @​nolte
• ci(pre-commit): let consumers authenticate Docker Hub pulls, optionally (#​417) @​nolte
• feat(workflows): add reusable-pr-lint.yaml with the pull-request body checker (#​418) @​nolte
• fix(workflows): pin the two toolchain references #​400 missed (#​415) @​nolte

facelessuser/pymdown-extensions (pymdown-extensions)

v12.3

Compare Source

12.3

• NEW: BetterEm: Expose a way to disable CommonMark punctuation rules in BetterEm if desired via a new
  punctuation option.

v12.2

Compare Source

12.2

• NEW: Add official support for Python 3.15.
• NEW: Tilde, Caret: For backwards compatibility, disable CommonMark punctuation rules by default. If subscript or
  superscript is disabled in the respective extension, CommonMark rules will be honored again. A new punctuation
  rule has been added to force CommonMark rules. When done, people will need to be aware of punctuation when subscript
  or superscript is enabled and escape any that violates CommonMark rules.
• NEW: Highlight: Highlight now allows in the auto_title_map specifying the title as a simple string or a
  dictionary containing the title and the title mode: either text or html, with text being the default. This
  allows a title to be specified and treated as HTML when the mode is html.
• NEW: SuperFences: Add new title_mode option for Pygments fenced blocks that allows a user to specify a title
  to be treated as HTML via title_mode="html".

v12.1

Compare Source

12.1

• NEW: SuperFences: Add optional reset function that can be specified for custom fences.
• FIX: Tilde, Caret: Fix performance for long invalid delimiters.

v12.0.1

Compare Source

12.0.1

• FIX: BetterEm: fix a case with new logic.

v12.0

Compare Source

12.0

• BREAK: BetterEm: Complete rewrite. There may be some subtle differences between legacy behavior and new
  CommonMark behavior.

  • * and _ emphasis are handled at the same time to provide more natural nesting.
  • More performant.
  • CommonMark compliant.

• BREAK: Tilde, Caret, Mark: Rewritten and now built upon the latest BetterEm logic.

  • When used with BetterEm, Tilde, Caret, and Mark will be added to the same delimiter processor under the hood and
    will be parsed at the same time as emphasis, allowing for better nesting logic.
  • More performant. Performance issues reported by (@​lexdotdev).
  • Tilde, Caret, Mark: Allow deletion, insertions, and marking mid-word by default. Set smart_delete,
    smart_insert, or smart_mark, respectively, to enable previous behavior, which prevented mid-word deletion.
  • Tilde, Caret: Add new option no_space to control whether the Pandoc style requirement of "no unescaped
    spaces" is enabled for subscript and superscript, respectively. no_space is enabled by default.

• NEW: Details, Blocks.Details, Blocks.Admonitions: Allow and handle headers specially in titles.

• NEW: Quotes: Allow and handle headers specially in callout titles.

• NEW: BracketSpan: New extension that allows for the creation of spans using a Pandoc style bracket notation.

• NEW: Arithmatex: Remove deprecated inline_mathjax_preview_format, inline_mathjax_format, and
  inline_generic_format. Use arithmatex_inline_format instead.

• NEW: Arithmatex: Remove deprecated fence_mathjax_preview_format, fence_mathjax_format, and
  fence_generic_format. Use arithmatex_fenced_format instead.

• NEW: Emoji: Remove undocumented and deprecated "old style" custom emoji index logic.

• NEW: Slugs: Remove deprecated uslugify, uslugify_encoded, uslugify_cased, uslugify_cased_encoded, gfm,
  and gfm_encoded. Use the documented slugify method with appropriate arguments instead.

v11.0.2

Compare Source

11.0.2

• FIX: InlineHilite: Improve performance of inline code matching.
• FIX: Keys: Fix regex pattern inefficiencies.
• FIX: Blocks.HTML: Fix backtracking in HTML extension.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.