rosa/cosmicrose.dev
Watch
0
0
Fork
You've already forked cosmicrose.dev
 0
Code Issues 1 Pull requests 4 Projects Releases Packages Wiki Activity Actions

fix(deps): update dependency markdown-it to v15 #13

Open
rosa wants to merge 1 commit from renovate/markdown-it-15.x into main
pull from: renovate/markdown-it-15.x
merge into: rosa:main
Conversation 0 Commits 1 Files changed 2 +48 -20
rosa commented 2026-07-30 20:03:15 +00:00
Owner
Copy link

This PR contains the following updates:

Package Change Age Confidence
markdown-it ^14.1.0 → ^15.0.0 age confidence

Release Notes

markdown-it/markdown-it (markdown-it)

v15.0.3

Compare Source

Changed
  • Updated dependencies.
Fixed
  • Enforce the 999 Unicode code point limit for reference definition labels,
    partially addressing #​1213.
  • Require whitespace before multiline reference titles.
Security
  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments,
    processing instructions, declarations and CDATA sections.

v15.0.2

Compare Source

Security
  • Fixed quadratic complexity in smartquotes when quote types don't match, #​1209.
    Also limited the smartquotes stack to 1000 unmatched openers.

v15.0.1

Compare Source

Changed
  • doc: replace oxide theme with custom one.
Fixed
  • Fixed code span parsing after lookaheads for unclosed link and image labels, #​1201.
  • Preserve spaces in code spans whose content consists only of spaces, #​1180.
  • Preserve brackets around IPv6 address literals when normalizing links, #​1204.
Security
  • Fixed quadratic complexity when replacing fuzzy links.
  • Fixed quadratic complexity in scheme backscan (inline linkify rule).

v15.0.0

Compare Source

Added
  • Exposed parser internals classes as static properties on markdownit.
  • Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
  • Added the markdown-it/browser export with bundled ESM and UMD builds.
  • Added colored CLI help on supported terminals via argparse 3.
  • Added reference labels to link/image tokens, #​938.
  • Added reference_definition tokens. They remain stripped by default
    for backwards compatibility, #​1055. Also adjusted the line-break heuristic
    to keep output exactly the same.
Changed
  • [breaking] linkify-it => v6
    • No fuzzy links by default.
    • No auth part check by default.
    • Unicode punctuation terminates the link by default (should help with CJK).
    • See linkify-it changelog
      for other changes.
  • Package root now resolves to prebuilt ESM and CJS files instead of raw
    sources. Distribution files were reorganized under dist/ and
    dist/browser/.
  • Migrated to Typescript.
  • entities => v8. Can be rolled back to v7 if compatibility issues happen.
  • Moved validateLink, normalizeLink and normalizeLinkText from properties
    to prototype methods.
  • Reworked issue templates and contribution guidelines.
Removed
  • [breaking] Removed package-internal subpath exports (markdown-it/lib/* and similar).
    Use the static classes exposed on markdownit instead.
  • [breaking] Removed obsolete StateBlock#ddIndent, #​1139. Update
    markdown-it-deflist to keep it working.
Fixed
  • Preserve a literal backslash before a terminating space in link destinations,
    matching CommonMark 6.3, #​1188.
  • Recognize lowercase declarations as HTML blocks, matching CommonMark 4.6,
    #​1189.
  • Require semicolons for named entities in all decoding paths, completing the
    fix for #​1096.
  • Enhanced the text_join rule to process image alt text.
  • Include inline code content in image alt text, #​1142.

v14.3.3

Compare Source

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [markdown-it](https://github.com/markdown-it/markdown-it) | [`^14.1.0` → `^15.0.0`](https://renovatebot.com/diffs/npm/markdown-it/14.3.2/15.0.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/markdown-it/15.0.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/markdown-it/14.3.2/15.0.3?slim=true) | --- ### Release Notes <details> <summary>markdown-it/markdown-it (markdown-it)</summary> ### [`v15.0.3`](https://github.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1503---2026-10-16) [Compare Source](https://github.com/markdown-it/markdown-it/compare/15.0.2...15.0.3) ##### Changed - Updated dependencies. ##### Fixed - Enforce the 999 Unicode code point limit for reference definition labels, partially addressing [#&#8203;1213](https://github.com/markdown-it/markdown-it/issues/1213). - Require whitespace before multiline reference titles. ##### Security - Fixed quadratic complexity when parsing multiline reference definitions. - Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections. ### [`v15.0.2`](https://github.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1502---2026-09-11) [Compare Source](https://github.com/markdown-it/markdown-it/compare/15.0.1...15.0.2) ##### Security - Fixed quadratic complexity in smartquotes when quote types don't match, [#&#8203;1209](https://github.com/markdown-it/markdown-it/issues/1209). Also limited the smartquotes stack to 1000 unmatched openers. ### [`v15.0.1`](https://github.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1501---2026-08-27) [Compare Source](https://github.com/markdown-it/markdown-it/compare/15.0.0...15.0.1) ##### Changed - doc: replace oxide theme with custom one. ##### Fixed - Fixed code span parsing after lookaheads for unclosed link and image labels, [#&#8203;1201](https://github.com/markdown-it/markdown-it/issues/1201). - Preserve spaces in code spans whose content consists only of spaces, [#&#8203;1180](https://github.com/markdown-it/markdown-it/issues/1180). - Preserve brackets around IPv6 address literals when normalizing links, [#&#8203;1204](https://github.com/markdown-it/markdown-it/issues/1204). ##### Security - Fixed quadratic complexity when replacing fuzzy links. - Fixed quadratic complexity in scheme backscan (inline linkify rule). ### [`v15.0.0`](https://github.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1500---2026-07-30) [Compare Source](https://github.com/markdown-it/markdown-it/compare/14.3.3...15.0.0) ##### Added - Exposed parser internals classes as static properties on `markdownit`. - Bundled TypeScript declarations. Remove `@types/markdown-it` if you used it. - Added the `markdown-it/browser` export with bundled ESM and UMD builds. - Added colored CLI help on supported terminals via `argparse` 3. - Added reference labels to link/image tokens, [#&#8203;938](https://github.com/markdown-it/markdown-it/issues/938). - Added `reference_definition` tokens. They remain stripped by default for backwards compatibility, [#&#8203;1055](https://github.com/markdown-it/markdown-it/issues/1055). Also adjusted the line-break heuristic to keep output exactly the same. ##### Changed - \[breaking] `linkify-it` => v6 - No fuzzy links by default. - No auth part check by default. - Unicode punctuation terminates the link by default (should help with CJK). - See [linkify-it changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md) for other changes. - Package root now resolves to prebuilt ESM and CJS files instead of raw sources. Distribution files were reorganized under `dist/` and `dist/browser/`. - Migrated to Typescript. - `entities` => v8. Can be rolled back to v7 if compatibility issues happen. - Moved `validateLink`, `normalizeLink` and `normalizeLinkText` from properties to prototype methods. - Reworked issue templates and contribution guidelines. ##### Removed - \[breaking] Removed package-internal subpath exports (`markdown-it/lib/*` and similar). Use the static classes exposed on `markdownit` instead. - \[breaking] Removed obsolete `StateBlock#ddIndent`, [#&#8203;1139](https://github.com/markdown-it/markdown-it/issues/1139). Update `markdown-it-deflist` to keep it working. ##### Fixed - Preserve a literal backslash before a terminating space in link destinations, matching CommonMark 6.3, [#&#8203;1188](https://github.com/markdown-it/markdown-it/issues/1188). - Recognize lowercase declarations as HTML blocks, matching CommonMark 4.6, [#&#8203;1189](https://github.com/markdown-it/markdown-it/issues/1189). - Require semicolons for named entities in all decoding paths, completing the fix for [#&#8203;1096](https://github.com/markdown-it/markdown-it/issues/1096). - Enhanced the `text_join` rule to process image alt text. - Include inline code content in image alt text, [#&#8203;1142](https://github.com/markdown-it/markdown-it/issues/1142). ### [`v14.3.3`](https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3) [Compare Source](https://github.com/markdown-it/markdown-it/compare/14.3.2...14.3.3) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yODguMCIsInVwZGF0ZWRJblZlciI6IjQzLjI4OC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
fix(deps): update dependency markdown-it to v15
All checks were successful
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
417b8f0aa3
rosa force-pushed renovate/markdown-it-15.x from 417b8f0aa3
All checks were successful
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
to b4165daa06
All checks were successful
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
2026-09-04 04:03:27 +00:00 Compare
rosa force-pushed renovate/markdown-it-15.x from b4165daa06
All checks were successful
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
to 0eeb1d2e51
All checks were successful
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
2026-09-19 12:03:37 +00:00 Compare
All checks were successful
ci/woodpecker/push/build Pipeline was successful
Details
ci/woodpecker/push/lint Pipeline was successful
Details
ci/woodpecker/pr/build Pipeline was successful
Details
ci/woodpecker/pr/lint Pipeline was successful
Details
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/markdown-it-15.x:renovate/markdown-it-15.x
git switch renovate/markdown-it-15.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/markdown-it-15.x
git switch renovate/markdown-it-15.x
git rebase main
git switch main
git merge --ff-only renovate/markdown-it-15.x
git switch renovate/markdown-it-15.x
git rebase main
git switch main
git merge --no-ff renovate/markdown-it-15.x
git switch main
git merge --squash renovate/markdown-it-15.x
git switch main
git merge --ff-only renovate/markdown-it-15.x
git switch main
git merge renovate/markdown-it-15.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rosa/cosmicrose.dev!13
No description provided.