Skip to content

fix: Update markdown-it#83

Closed
smockle wants to merge 1 commit intomainfrom
smockle/update-markdown-it
Closed

fix: Update markdown-it#83
smockle wants to merge 1 commit intomainfrom
smockle/update-markdown-it

Conversation

@smockle
Copy link
Contributor

@smockle smockle commented Feb 20, 2026

Copilot AI review requested due to automatic review settings February 20, 2026 03:21
@smockle smockle requested a review from a team as a code owner February 20, 2026 03:21
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates the markdown-it dependency from version 14.1.0 to 14.1.1 to address a security vulnerability (Dependabot alert #20). The update includes a critical ReDoS (Regular Expression Denial of Service) fix in the linkify rule.

Changes:

  • Updated markdown-it from 14.1.0 to 14.1.1, which includes a performance and security fix
  • Package-lock.json updated with dependency resolution changes (peer flags removed, fsevents added, platform-specific bindings adjusted)

Reviewed changes

Copilot reviewed 1 out of 22 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updated markdown-it version constraint to ^14.1.1
package-lock.json Updated lock file with new markdown-it version and dependency tree changes
node_modules/markdown-it/package.json Version bumped to 14.1.1
node_modules/markdown-it/lib/rules_inline/linkify.mjs ReDoS vulnerability fix - replaced regex with manual loop
node_modules/markdown-it/dist/markdown-it.js Compiled distribution with security fix and minor formatting changes
node_modules/markdown-it/dist/index.cjs.js CommonJS build with security fix
node_modules/fsevents/* Added optional macOS file watcher dependency (2.3.3)
node_modules/@unrs/resolver-binding-* Platform-specific binary package adjustments
node_modules/.package-lock.json Internal npm lock file metadata updates

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@smockle smockle closed this Feb 20, 2026
@github github locked as resolved and limited conversation to collaborators Feb 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants