Bump commonmarker from 0.17.13 to 0.23.6

[dependabot[bot]]

Bumps commonmarker from 0.17.13 to 0.23.6.

Release notes

Sourced from commonmarker's releases.

v0.23.6

What's Changed

This release includes two updates from the upstream cmark-gfm library, namely:

• DoS vulnerability in autolink extension per GHSA-cgh3-p57x-9q7q
• Added xmpp: and mailto: support to the autolink extension

v0.23.4

No release notes provided.

v0.22.0

• Drop ruby-enum (gjtorikian/commonmarker#140)

v0.21.0

• Add support for tasklist_item_checked=: gjtorikian/commonmarker#116

v0.20.2

• Add command line input for parse and render options: gjtorikian/commonmarker#108

v0.20.1

• Fix erroneous inverted tasklist state: gjtorikian/commonmarker#100

v0.20.0

• Update cmark-gfm 0.29.0.gfm.0: gjtorikian/commonmarker#98

v0.19.0

• Support tasklists: gjtorikian/commonmarker#94
• Indicate the context of a parse/render option error: gjtorikian/commonmarker#97

v0.18.0

• Default to being safe: gjtorikian/commonmarker#81

Changelog

Sourced from commonmarker's changelog.

Changelog

v0.23.4 (2022-03-03)

Full Changelog

Fixed bugs:

• #render_html way slower than #render_doc.to_html #141

Closed issues:

• allow keeping text content of unknown tags #169
• STRIKETHROUGH_DOUBLE_TILDE not working #168
• Allow disabling 4-space code blocks #167
• tables with escaped pipes are not recognized #166

Merged pull requests:

• CI: Drop a duplicate 'bundle install' #173 (olleolleolle)
• CI: Drop duplicate bundle install #172 (olleolleolle)
• Fixup benchmark and speedup a little, fixes #141 #171 (ojab)

v0.23.2 (2021-09-17)

Full Changelog

Merged pull requests:

• Update GFM release to 0.29.0.gfm.2 #148 (phillmv)

v0.23.1 (2021-09-03)

Full Changelog

Closed issues:

• Incorrect processing of list and next block of code #146

Merged pull requests:

• Normalize parse and render options #145 (phillmv)

v0.23.0 (2021-08-30)

Full Changelog

Closed issues:

• Latest version of commonmarker breaks with jekyll build #142

... (truncated)

Commits

• a8f8d76 Merge pull request #190 from anticomputer/main
• ac91634 :gem: release 0.23.6
• 777fd30 Update cmark-upstream to https://github.com/github/cmark-gfm/commit/9d57d8a23...
• 7aaeb37 Merge pull request #188 from stevenlaidlaw/update-to-0290gfm5
• 795e628 Update cmark-upstream to https://github.com/github/cmark-gfm/commit/0578e1e4f...
• 39d19d6 Update cmark-upstream to https://github.com/github/cmark-gfm/commit/766f161ef...
• 63b7bf8 Update FUNDING.yml
• 558c727 Bump to 0.23.5
• 41eee72 lint
• 897e8ed Merge pull request #180 from lumaxis/main
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/KittyGiraudel/SJSJ/network/alerts).