Bump linkify-it and jsdoc

[dependabot]

Bumps linkify-it to 5.0.2 and updates ancestor dependency jsdoc. These dependencies need to be updated together.

Updates linkify-it from 2.2.0 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

• Fixed DoS in mailto: links (restrict user name to 64 chars).
• Restricted user/pass part length in links.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

• Rewrite to ESM.

4.0.1 / 2022-05-02

• Fix http:// incorrectly returned as a link by matchStart.

4.0.0 / 2022-04-22

• Add matchAtStart method to match full URLs at the start of the string.
• Fixed paired symbols ((), {}, "", etc.) after punctuation.
• --- option now affects parsing of emails (e.g. user@example.com---)

3.0.3 / 2021-10-01

• Fixed #98. Don't count ; at the end of link (when followed with space).

3.0.2 / 2020-05-20

• Proper fix for #54. Allow multiple ! in links (but not at the end).

3.0.1 / 2020-05-19

... (truncated)

Commits

• 50a0c91 5.0.2 released
• de3b885 Update package hooks
• 13effaa Add package lock
• 39d748d Bump c8
• 00ce877 Drop tlds deps
• ecde823 Update benchmark to mitata
• 23c62cd Refactor demo / doc build and publish
• fd63f3b CI config update
• f4ea5af demo: update bootstrap & layout
• 1454fb6 lint: dim warnings
• Additional commits viewable in compare view

Updates jsdoc from 3.6.4 to 4.0.5

Release notes

Sourced from jsdoc's releases.

JSDoc 4.0.4

Fixes a compatibility issue with Node.js 23.

Changelog

Sourced from jsdoc's changelog.

4.0.5 (October 2025)

Fixes a performance issue when generating documentation for medium-to-large APIs.

4.0.4 (October 2024)

Fixes a compatibility issue with Node.js 23.

4.0.3 (May 2024)

Updates dependencies.

4.0.2 (February 2023)

Updates the Babel parser, and enables additional Babel plugins for ECMAScript proposals.

4.0.1 (February 2023)

If an inline link tag uses a pipe delimiter, and there are spaces around the pipe delimiter, then the HTML link no longer contains %20 at the end; also, the link text no longer contains extra spaces. For example, {@link https://example.com | link text} is now rendered as <a href="https://example.com/">link text</a> rather than <a href="https://example.com/%20"> link text</a>.

4.0.0 (November 2022)

• JSDoc releases now use semantic versioning. If JSDoc makes backwards-incompatible changes in the future, the major version will be incremented.
• JSDoc no longer uses the taffydb package. If your JSDoc template or plugin uses the taffydb package, see the instructions for replacing taffydb with @jsdoc/salty.
• JSDoc now supports Node.js 12.0.0 and later.

3.6.11 (July 2022)

Updates dependency versions to make JSDoc compatible with Node.js 12.0.0 and later.

3.6.10 (January 2022)

Fixes an issue in JSDoc 3.6.9 that prevented JSDoc from being installed in some continuous integration (CI) environments.

... (truncated)

Commits

• 61b2235 4.0.5
• cbea149 fix: speed up templateHelper's getAncestor() by 500x
• 11a99cf chore: 4.0.4
• 59a5658 fix: don't use built-in util module for type-checking
• a5232aa chore(deps): update lockfile
• 49b6fc2 4.0.3
• 39061bb fix(deps): update @types/markdown-it and related packages
• 1a31e64 chore(deps): update deps
• 0b6193f 4.0.2
• 9d88548 deps: update Babel; enable current Babel plugins in parser
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.