[dependabot]

Bumps markdown-it to 15.0.3 and updates ancestor dependency markdownlint-cli. These dependencies need to be updated together.

Updates markdown-it from 14.1.0 to 15.0.3

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

• Updated dependencies.

Fixed

• Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
• Require whitespace before multiline reference titles.

Security

• Fixed quadratic complexity when parsing multiline reference definitions.
• Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.

[15.0.2] - 2026-09-11

Security

• Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

[15.0.1] - 2026-08-27

Changed

• doc: replace oxide theme with custom one.

Fixed

• Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
• Preserve spaces in code spans whose content consists only of spaces, #1180.
• Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

• Fixed quadratic complexity when replacing fuzzy links.
• Fixed quadratic complexity in scheme backscan (inline linkify rule).

[15.0.0] - 2026-07-30

Added

• Exposed parser internals classes as static properties on markdownit.
• Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
• Added the markdown-it/browser export with bundled ESM and UMD builds.
• Added colored CLI help on supported terminals via argparse 3.
• Added reference labels to link/image tokens, #938.
• Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

... (truncated)

Commits

• a8c00d4 15.0.3 released
• e9504a4 Skip pathological speed tests during coverage collection
• 46d8b52 Deps bump
• 928bc8c Fix quadratic inline HTML parsing
• 48fbc46 Fix quadratic reference parsing and partially address #1213
• 3c51991 15.0.2 released
• cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
• 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
• 924b203 15.0.1 released
• 25c3895 Changelog update
• Additional commits viewable in compare view

Updates markdownlint-cli from 0.42.0 to 0.50.0

Release notes

Sourced from markdownlint-cli's releases.

v0.50.0

• Update markdownlint dependency to 0.42.0
  • Improve MD011/MD018/MD020/MD043/MD051/MD055/MD060
  • Add regular expression denial of service protection
  • Add support for reporting issues with front matter
  • Update dependencies
• Update all dependencies via Dependabot

v0.49.1

• Update markdownlint dependency to 0.41.1
  • Improve MD029
  • Fix module resolution under webpack
  • Update dependencies
• Update all dependencies via Dependabot

v0.49.0

• Update markdownlint dependency to 0.41.0
  • Improve MD022/MD028/MD035/MD042/MD051/MD060
  • Remove handling of inline directive syntax (frequent false positives)
  • Remove support for end-of-life Node version 20
• Update all dependencies via Dependabot

v0.48.0

• Update all dependencies via Dependabot

v0.47.0

• Add output and exit code support for warnings
• Update markdownlint dependency to 0.40.0
  • Improve MD011/MD013/MD051/MD060
• Update all dependencies via Dependabot

v0.46.0

• Replace glob dependency with tinyglobby (smaller and fewer dependencies)
• Update markdownlint dependency to 0.39.0
  • Add MD060/table-column-style
  • Improve MD001/MD007/MD009/MD010/MD029/MD033/MD037/MD059
• Update all dependencies via Dependabot

v0.45.0

• Update markdownlint dependency to 0.38.0
  • Add MD059/descriptive-link-text
  • Improve MD025/MD027/MD036/MD038/MD041/MD043/MD045/MD051/MD052
  • Remove support for end-of-life Node version 18
• Update all dependencies via Dependabot

v0.44.0

• Update markdownlint dependency to 0.37.4
  • Convert module to ECMAScript (breaking change)
  • Stop using require, convert to import
  • Improve MD032

... (truncated)

Commits

• cbcdc46 Bump version 0.50.0
• ff6af70 Freshen package-lock.json by deleting and recreating via "npm install".
• 0502602 Bump ava from 8.0.2 to 8.1.0
• 43d3ef1 Bump ignore from 7.0.12 to 7.0.13
• c05789e Bump js-yaml from 5.4.3 to 5.5.0
• 92d6e13 Bump markdownlint from 0.41.1 to 0.42.0
• fb4a7ee Bump ava from 8.0.1 to 8.0.2
• 1fc4af4 Bump markdown-it from 15.0.2 to 15.0.3
• 364797e Bump smol-toml from 1.9.0 to 1.9.1
• 24967a4 Bump js-yaml from 5.4.2 to 5.4.3
• Additional commits viewable in compare view

[github-actions]

🔭🐙🐈 Test this branch here: https://db-ui.github.io/elements/review/dependabot-npm_and_yarn-multi-7b498e6ffd