Skip to content

build(deps): bump marked from 7.0.5 to 17.0.4#3255

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/marked-17.0.4
Open

build(deps): bump marked from 7.0.5 to 17.0.4#3255
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/marked-17.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 20, 2026

Copy link
Copy Markdown
Contributor

Bumps marked from 7.0.5 to 17.0.4.

Release notes

Sourced from marked's releases.

v17.0.4

17.0.4 (2026-03-04)

Bug Fixes

  • prevent ReDoS in inline link regex title group (#3902) (46fb9b8)

v17.0.3

17.0.3 (2026-02-17)

Bug Fixes

v17.0.2

17.0.2 (2026-02-11)

Bug Fixes

v17.0.1

17.0.1 (2025-11-20)

Bug Fixes

v17.0.0

17.0.0 (2025-11-07)

Bug Fixes

BREAKING CHANGES

  • Change how consecutive text tokens work in lists
  • Simplify listItem renderer
  • Checkbox token is added in list tokenizer

... (truncated)

Commits
  • 22f0c55 chore(release): 17.0.4 [skip ci]
  • 46fb9b8 fix: prevent ReDoS in inline link regex title group (#3902)
  • 5b6faee chore(deps-dev): Bump eslint from 10.0.1 to 10.0.2 (#3904)
  • bcdaf6a chore(deps-dev): Bump @​semantic-release/npm from 13.1.4 to 13.1.5 (#3905)
  • baa78a5 docs: Add marked-abc to known extensions list (#3903)
  • 1aed9ac chore(deps-dev): Bump eslint from 10.0.0 to 10.0.1 (#3901)
  • 8045055 chore: rename escape helper function (#3900)
  • bced615 chore(release): 17.0.3 [skip ci]
  • 909fe44 fix: escape image alt text (#3896)
  • eb8ba2b chore(deps-dev): Bump @​semantic-release/github from 12.0.5 to 12.0.6 (#3897)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for marked since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 20, 2026
@github-actions github-actions Bot enabled auto-merge (squash) March 20, 2026 00:05
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-17.0.4 branch 3 times, most recently from 79ee8f8 to 94c1303 Compare March 26, 2026 23:16
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-17.0.4 branch 4 times, most recently from b842fbc to 99354e9 Compare April 2, 2026 12:25
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-17.0.4 branch from 99354e9 to b233b09 Compare April 12, 2026 11:20
Bumps [marked](https://github.com/markedjs/marked) from 7.0.5 to 17.0.4.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v7.0.5...v17.0.4)

---
updated-dependencies:
- dependency-name: marked
  dependency-version: 17.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-17.0.4 branch from b233b09 to b0f42e6 Compare April 13, 2026 09:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants