Skip to content

chore(deps): Bump markdown-it from 14.1.0 to 14.1.1 in .#84

Merged
smockle merged 1 commit intomainfrom
dependencies/markdown-it-14.1.1
Feb 20, 2026
Merged

chore(deps): Bump markdown-it from 14.1.0 to 14.1.1 in .#84
smockle merged 1 commit intomainfrom
dependencies/markdown-it-14.1.1

Conversation

@accessibility-bot
Copy link
Collaborator

No description provided.

Copilot AI review requested due to automatic review settings February 20, 2026 03:41
@accessibility-bot accessibility-bot requested a review from a team as a code owner February 20, 2026 03:41
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request updates the markdown-it package from version 14.1.0 to 14.1.1. This is a patch-level version bump that includes a performance optimization for handling asterisks at the end of auto-detected links.

Changes:

  • Version bump of markdown-it from 14.1.0 to 14.1.1 in package.json and package-lock.json
  • Performance optimization in linkify rule: replaced regex /\*+$/ with manual character-by-character backsearch to avoid ReDoS (Regular Expression Denial of Service) issues
  • Added MIT license field to package-lock.json metadata

Reviewed changes

Copilot reviewed 1 out of 8 changed files in this pull request and generated no comments.

Show a summary per file
File Description
package.json Updated markdown-it dependency version to ^14.1.1 (added caret)
package-lock.json Updated version, resolved URL, and integrity hash; added license field
node_modules/markdown-it/package.json Updated version field to 14.1.1
node_modules/markdown-it/lib/rules_inline/linkify.mjs Replaced regex with manual loop to prevent ReDoS vulnerability
node_modules/markdown-it/dist/markdown-it.js Compiled version of the source changes
node_modules/markdown-it/dist/index.cjs.js CommonJS compiled version of the source changes
node_modules/.package-lock.json Updated metadata to match package-lock.json

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@smockle smockle merged commit 45102d5 into main Feb 20, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants