Skip to content

chore: bump marked from 15.0.12 to 17.0.6 in the marked group across 1 directory - #1770

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/marked-b39174fb80
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/marked-b39174fb80

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 14, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the marked group with 1 update in the / directory: marked.

Updates marked from 15.0.12 to 17.0.6

Release notes

Sourced from marked's releases.

v17.0.6

17.0.6 (2026-04-05)

Bug Fixes

  • avoid race condition in async parallel parse/parseInline with hooks (#3924) (6e96fa7)
  • cli: honor positional input file (#3922) (a1c2617)
  • cli: use file URL for config import (#3923) (73e1f3f)

v17.0.5

17.0.5 (2026-03-20)

Bug Fixes

  • Fix catastrophic backtracking (ReDoS) in link/reflink label regex (#3918) (4625980)
  • prevent quadratic complexity in emStrongLDelim regex (#3906) (c732dd2)
  • prevent single-tilde strikethrough false positives (#3910) (5e03369)
  • re-assign tokenizer.lexer and renderer.parser at start of each parse call (#3907) (f3a3ec0)
  • trim trailing whitespace from lheading text (#3920) (3ea7e88)

v17.0.4

17.0.4 (2026-03-04)

Bug Fixes

  • prevent ReDoS in inline link regex title group (#3902) (46fb9b8)

v17.0.3

17.0.3 (2026-02-17)

Bug Fixes

v17.0.2

17.0.2 (2026-02-11)

Bug Fixes

... (truncated)

Commits
  • e07037e chore(release): 17.0.6 [skip ci]
  • 6e96fa7 fix: avoid race condition in async parallel parse/parseInline with hooks (#3924)
  • 73e1f3f fix(cli): use file URL for config import (#3923)
  • a1c2617 fix(cli): honor positional input file (#3922)
  • 3b59e81 refactor: use strict equality in RegExp exec checks (#3935)
  • e6b37f2 chore(deps-dev): Bump lodash from 4.17.23 to 4.18.1 (#3937)
  • abb5667 chore(deps-dev): Bump lodash-es from 4.17.23 to 4.18.1 (#3936)
  • 4969cf2 chore(deps-dev): Bump handlebars from 4.7.8 to 4.7.9 (#3931)
  • d44cafc chore(deps-dev): Bump picomatch from 2.3.1 to 2.3.2 (#3929)
  • 59386ad chore(deps-dev): Bump eslint from 10.0.3 to 10.1.0 (#3928)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for marked since your current version.


Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
marked [>= 18.a, < 19]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 14, 2026
@dependabot dependabot Bot changed the title chore: bump marked from 15.0.12 to 17.0.6 in the marked group chore: bump marked from 15.0.12 to 17.0.6 in the marked group across 1 directory Apr 15, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 32ca77d to 31c62b8 Compare April 15, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 31c62b8 to 64d44e5 Compare April 16, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 64d44e5 to 2262cea Compare April 17, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 2262cea to 8354338 Compare April 20, 2026 22:17
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 8354338 to 746d849 Compare April 21, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 746d849 to a267222 Compare April 22, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from a267222 to 9179863 Compare April 24, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 9179863 to bca16da Compare April 28, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from bca16da to 87e8364 Compare April 29, 2026 20:25
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 87e8364 to 9b8fe55 Compare April 30, 2026 20:24
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from 9b8fe55 to bd9a465 Compare May 1, 2026 23:51
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/marked-b39174fb80 branch from bd9a465 to a459b7e Compare May 5, 2026 00:18
@dependabot @github

dependabot Bot commented on behalf of github Oct 5, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Bumps the marked group with 1 update in the / directory: [marked](https://github.com/markedjs/marked).


Updates `marked` from 15.0.12 to 17.0.6
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v15.0.12...v17.0.6)

---
updated-dependencies:
- dependency-name: marked
  dependency-version: 17.0.6
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: marked
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant