Skip to content

build(deps): bump the production group with 7 updates - #30

Merged
PierreRaybaut merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-dbe15e51a0
Oct 8, 2026
Merged

build(deps): bump the production group with 7 updates#30
PierreRaybaut merged 1 commit into
developfrom
dependabot/npm_and_yarn/develop/production-dbe15e51a0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the production group with 7 updates:

Package From To
@codemirror/autocomplete 6.20.1 6.20.3
@codemirror/commands 6.10.3 6.11.1
@codemirror/language 6.12.3 6.12.4
@codemirror/search 6.7.0 6.7.2
@codemirror/state 6.6.0 6.7.6
@codemirror/view 6.41.1 6.43.13
marked 18.0.3 18.1.0

Updates @codemirror/autocomplete from 6.20.1 to 6.20.3

Commits

Updates @codemirror/commands from 6.10.3 to 6.11.1

Commits

Updates @codemirror/language from 6.12.3 to 6.12.4

Commits

Updates @codemirror/search from 6.7.0 to 6.7.2

Commits

Updates @codemirror/state from 6.6.0 to 6.7.6

Commits

Updates @codemirror/view from 6.41.1 to 6.43.13

Commits

Updates marked from 18.0.3 to 18.1.0

Release notes

Sourced from marked's releases.

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

  • avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
  • load CLI configs with top-level await (#4100) (c61543e)
  • reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

  • add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

  • allow tabs in the thematic break that ends a list item (#4087) (afbb27c)
  • avoid O(n^2) scanning in reflinkSearch (#4090) (c6a25bb)
  • case fold reference link labels (#4077) (aed9336)
  • drop the leading whitespace after a hard line break (#4075) (123ce04)
  • match html block start conditions when ending a list item (#4072) (c2facac)
  • respect raw tokens when closing link labels (#4066) (ef394f7)
  • strip a tab that follows spaces in an indented code block (#4080) (dbb393d)

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

  • allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
  • allow one more level of nested brackets in a link label (#4064) (37b28d8)

... (truncated)

Commits
  • e809386 chore(release): 18.1.0 [skip ci]
  • 3363c99 fix: reject unbalanced parentheses in link destinations (#4107)
  • 0d20220 fix: avoid cubic backtracking on unicode whitespace in a link destination (#4...
  • c18a64f chore(deps): bump undici (#4122)
  • 4ee44f7 feat: add linkParenPossible to lexer state to fail fast for link token genera...
  • c61543e fix: load CLI configs with top-level await (#4100)
  • ef0704c chore(release): 18.0.14 [skip ci]
  • 23c82ad chore: update deps (#4108)
  • 1b89557 fix: keep text after empty nested blockquote (#4101)
  • 7f7a496 fix: support GFM protocol autolinks (#4067)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production group with 7 updates
2a1b5c6 
Bumps the production group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [@codemirror/autocomplete](https://github.com/codemirror/autocomplete) | `6.20.1` | `6.20.3` |
| [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.3` | `6.11.1` |
| [@codemirror/language](https://github.com/codemirror/language) | `6.12.3` | `6.12.4` |
| [@codemirror/search](https://github.com/codemirror/search) | `6.7.0` | `6.7.2` |
| [@codemirror/state](https://github.com/codemirror/state) | `6.6.0` | `6.7.6` |
| [@codemirror/view](https://github.com/codemirror/view) | `6.41.1` | `6.43.13` |
| [marked](https://github.com/markedjs/marked) | `18.0.3` | `18.1.0` |


Updates `@codemirror/autocomplete` from 6.20.1 to 6.20.3
- [Changelog](https://github.com/codemirror/autocomplete/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/autocomplete/commits)

Updates `@codemirror/commands` from 6.10.3 to 6.11.1
- [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/commands/commits)

Updates `@codemirror/language` from 6.12.3 to 6.12.4
- [Changelog](https://github.com/codemirror/language/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/language/commits)

Updates `@codemirror/search` from 6.7.0 to 6.7.2
- [Changelog](https://github.com/codemirror/search/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/search/commits)

Updates `@codemirror/state` from 6.6.0 to 6.7.6
- [Changelog](https://github.com/codemirror/state/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/state/commits)

Updates `@codemirror/view` from 6.41.1 to 6.43.13
- [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codemirror/view/commits)

Updates `marked` from 18.0.3 to 18.1.0
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.3...v18.1.0)

---
updated-dependencies:
- dependency-name: "@codemirror/autocomplete"
  dependency-version: 6.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@codemirror/commands"
  dependency-version: 6.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@codemirror/language"
  dependency-version: 6.12.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@codemirror/search"
  dependency-version: 6.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production
- dependency-name: "@codemirror/state"
  dependency-version: 6.7.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: "@codemirror/view"
  dependency-version: 6.43.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
- dependency-name: marked
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 8, 2026
@PierreRaybaut
PierreRaybaut merged commit 3c5400e into develop Oct 8, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/develop/production-dbe15e51a0 branch October 8, 2026 17:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@PierreRaybaut