From b01f8f834579b2c124bcf4d055e6f3aabfe9a5f9 Mon Sep 17 00:00:00 2001
From: John Osumi <931193+sumitake@users.noreply.github.com>
Date: Wed, 21 Oct 2026 13:16:36 -0700
Subject: [PATCH] build(deps-dev): override markdown-it to 15.0.3 for alerts
 #9-#11

markdown-it is a dev-only transitive dependency:
remote-ssh-tunnel -> markdownlint-cli2@0.23.3 -> markdown-it@15.0.1.
markdownlint-cli2 0.23.3 pins markdown-it exactly to 15.0.1, so a
lockfile-only bump cannot reach 15.0.3; an npm override (patch, same
major) does. Also refresh follow-redirects 1.16.0 -> 1.16.1 in the
lockfile (within axios's ^1.16.0) so CI's npm audit --omit=dev gate
passes.
---
 package-lock.json | 24 ++++++++++++------------
 package.json      |  3 ++-
 2 files changed, 14 insertions(+), 13 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 2868642..6508694 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -695,9 +695,9 @@
       }
     },
     "node_modules/follow-redirects": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.0.tgz",
-      "integrity": "sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==",
+      "version": "1.16.1",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.16.1.tgz",
+      "integrity": "sha512-FNvFGzoMLWmE6Yj9spb/zjd7yiNCHiAW9/Tg9CXrQ8wuu32HtlJOwWO11OJafl5FfY3DxTdQ0vj42zU1kvv5jg==",
       "funding": [
         {
           "type": "individual",
@@ -1096,9 +1096,9 @@
       }
     },
     "node_modules/markdown-it": {
-      "version": "15.0.1",
-      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-15.0.1.tgz",
-      "integrity": "sha512-9/7gE95FNPkfUWrjJIoHZza2iLmuJlPD0UNMxPi7bxUrbCR525YZY0r+zyfes0dZI5ZZ/uNIXUJca0pJvtw41g==",
+      "version": "15.0.3",
+      "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-15.0.3.tgz",
+      "integrity": "sha512-+Az7Ojz3iRGu8KYMvJ6xVhvrxP3eE+vEtJX75Ow88XBpcQNV/0lGX5ZynIIBftREo4DC2jsveAMDaeltmm8QvQ==",
       "dev": true,
       "funding": [
         {
@@ -1112,9 +1112,9 @@
       ],
       "license": "MIT",
       "dependencies": {
-        "argparse": "^3.0.0",
-        "entities": "^8.0.0",
-        "linkify-it": "^6.0.0",
+        "argparse": "^3.0.3",
+        "entities": "^8.1.0",
+        "linkify-it": "^6.1.0",
         "mdurl": "^2.1.0",
         "punycode.js": "^2.3.1",
         "uc.micro": "^3.0.0"
@@ -1124,9 +1124,9 @@
       }
     },
     "node_modules/markdown-it/node_modules/argparse": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/argparse/-/argparse-3.0.2.tgz",
-      "integrity": "sha512-mFdDM6WqWKraGLsVb+C9CahPnzTXOefAOLq3jYcca2YZ8bEWpr++Tzj+zSaKW9+X9L5uSxcm1AZ3Y6aZJ09OhQ==",
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-3.0.3.tgz",
+      "integrity": "sha512-Sn98ftV3KfsO8xfLPHG6oT8y+b0yvbrLgZjgPDXsharNY15tTAjqIsIju4S32nl6/iEUNNE4v+yL2Zhm8ooP3w==",
       "dev": true,
       "funding": [
         {
diff --git a/package.json b/package.json
index 0605980..3f17236 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,8 @@
   "overrides": {
     "uuid": "11.1.1",
     "katex": "0.18.2",
-    "smol-toml": "1.9.0"
+    "smol-toml": "1.9.0",
+    "markdown-it": "15.0.3"
   },
   "devDependencies": {
     "markdownlint-cli2": "0.23.3"