socket-security[bot]
commented
11 months ago New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
| Package | New capabilities | Transitives | Size | Publisher |
|---|---|---|---|---|
| npm/@types/markdown-it@14.0.0 | None | +2 |
84.2 kB | types |
🚮 Removed packages: npm/@types/markdown-it@13.0.7
This PR contains the following updates:
13.0.2->14.1.0^13.0.7->^14.0.0Release Notes
markdown-it/markdown-it (markdown-it)
### [`v14.1.0`](https://togithub.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1410---2024-03-19) [Compare Source](https://togithub.com/markdown-it/markdown-it/compare/14.0.0...14.1.0) ##### Changed - Updated CM spec compatibility to 0.31.2, [#1009](https://togithub.com/markdown-it/markdown-it/issues/1009). ##### Fixed - Fixed quadratic complexity when parsing references, [#996](https://togithub.com/markdown-it/markdown-it/issues/996). - Fixed quadratic output size with pathological user input in tables, [#1000](https://togithub.com/markdown-it/markdown-it/issues/1000). ### [`v14.0.0`](https://togithub.com/markdown-it/markdown-it/blob/HEAD/CHANGELOG.md#1400---2023-12-08) [Compare Source](https://togithub.com/markdown-it/markdown-it/compare/13.0.2...14.0.0) ##### Changed - Drop ancient browsers support (use `.fromCodePoint` and other features). - Rewrite to ESM (including all plugins/deps). CJS fallback still available. No signatures changed, except `markdown-it-emoji` plugin. - Dropped `dist/` folder from repo, build on package publish. - Set `punicode.js` as external dependency. ##### Fixed - Html tokens inside img alt are now rendered as their original text, [#896](https://togithub.com/markdown-it/markdown-it/issues/896). - Hardbreaks inside img alt are now rendered as newlines.Configuration
📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate using a curated preset maintained by