Skip to content

build(deps): bump markdown-it from 14.1.0 to 15.0.3 - #563

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/markdown-it-15.0.3
Open

build(deps): bump markdown-it from 14.1.0 to 15.0.3#563
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/npm_and_yarn/markdown-it-15.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps markdown-it from 14.1.0 to 15.0.3.

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

  • Updated dependencies.

Fixed

  • Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
  • Require whitespace before multiline reference titles.

Security

  • Fixed quadratic complexity when parsing multiline reference definitions.
  • Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.

[15.0.2] - 2026-09-11

Security

  • Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

[15.0.1] - 2026-08-27

Changed

  • doc: replace oxide theme with custom one.

Fixed

  • Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
  • Preserve spaces in code spans whose content consists only of spaces, #1180.
  • Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

  • Fixed quadratic complexity when replacing fuzzy links.
  • Fixed quadratic complexity in scheme backscan (inline linkify rule).

[15.0.0] - 2026-07-30

Added

  • Exposed parser internals classes as static properties on markdownit.
  • Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
  • Added the markdown-it/browser export with bundled ESM and UMD builds.
  • Added colored CLI help on supported terminals via argparse 3.
  • Added reference labels to link/image tokens, #938.
  • Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

... (truncated)

Commits
  • a8c00d4 15.0.3 released
  • e9504a4 Skip pathological speed tests during coverage collection
  • 46d8b52 Deps bump
  • 928bc8c Fix quadratic inline HTML parsing
  • 48fbc46 Fix quadratic reference parsing and partially address #1213
  • 3c51991 15.0.2 released
  • cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
  • 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
  • 924b203 15.0.1 released
  • 25c3895 Changelog update
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from stacks-tooling as a code owner October 19, 2026 12:36
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 19, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 19, 2026 12:36
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Oct 19, 2026
@changeset-bot

changeset-bot Bot commented Oct 19, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 4659d92

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot dependabot Bot mentioned this pull request Oct 19, 2026
Closed
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/markdown-it-15.0.3 branch from e147840 to c28eafa Compare November 3, 2026 16:44
@netlify

netlify Bot commented Nov 3, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for stacks-editor ready!

Name Link
🔨 Latest commit 4659d92
🔍 Latest deploy log https://app.netlify.com/projects/stacks-editor/deploys/6aeaf03878e9b7b440a38303
😎 Deploy Preview https://deploy-preview-563--stacks-editor.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changes Run an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

dependabot Bot and others added 3 commits November 4, 2026 09:37
@dependabot @asblanco
build(deps): bump markdown-it from 14.1.0 to 15.0.3
973e1f2 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) from 14.1.0 to 15.0.3.
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@14.1.0...15.0.3)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 15.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@asblanco
fix(markdown): migrate editor integration to markdown-it v15
6a9431e
@asblanco
fix(markdown): use native v15 ProseMirror integration
4659d92
@asblanco
asblanco force-pushed the dependabot/npm_and_yarn/markdown-it-15.0.3 branch from acb5e7a to 4659d92 Compare November 4, 2026 08:43

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@stacks-tooling stacks-tooling Awaiting requested review from stacks-tooling stacks-tooling is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@asblanco