[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKDOWNIT-2331914	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: markdown-it

The new version differs by 37 commits.

• d72c68b 12.3.2 released
• aca3396 dist rebuild
• ffc49ab Fix possible ReDOS in newline rule.
• 76469e8 12.3.1 released
• ae5a243 dist rebuild
• 1cd8a51 Fix tab preventing paragraph continuation in lists
• 830757c Fix spelling error in question Github Template (#835)
• 2e31d34 12.3.0 released
• 393354c Dist rebuild
• 8564eed Dev deps bump
• 24abaa5 Improve emphasis algorithm
• e07a9dd typo fix
• 6e2de08 12.2.0 released
• 08827d6 dist rebuild
• 8bcc82a Parser: Set ordered list_item_open token info to input marker.
• 77fb937 Add pathological test from cmark
• e5986bb Always suffix indented code block with a newline
• 13cdeb9 12.1.0 released
• 13d8335 Dist rebuild
• eed156e Fix emphasis algorithm as per 0.30 spec
• 0b14fa0 Update CommonMark spec to 0.30
• 064d602 Updated highlight.js usage info
• df4607f 12.0.6 released
• e5b0eb3 dist rebuild

See the full diff

Package name: prosemirror-markdown

The new version differs by 19 commits.

• 1a37da8 Mark version 1.7.0
• 24b0814 Upgrade markdown-it to version 12
• 81d1029 Mark version 1.6.2
• 8e456de Don't escape link URL text
• a57cb7a Mark version 1.6.1
• 9915597 Escape underscores when converting to Markdown
• 249861c Upgrade Mocha
• f0c2e68 Add an .npmrc that turns off lock files
• 79a530f Fix a bug where parse could return null
• aac8df6 Mark version 1.6.0
• 43a2955 Export MarkdownParser.tokenizer
• 2fb44d2 Mark version 1.5.2
• f44936d Escape '>' at the start of line
• 1f415d5 Mark version 1.5.1
• 64f7027 Read list tight attribute when parsing Markdown
• b226afe Make rollup.config.js more Windows-compatible
• 65caf3c Allow leading space when escaping line numbers
• f368f8f Upgrade rollup
• 2cac682 Add renderering error if renderer is not defined

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[eloquence]

(Fixed separately.)