Skip to content

Bump markdown-it and markdownlint-cli#45

Merged
eqrx merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-367f6da9ab
Jun 18, 2026
Merged

Bump markdown-it and markdownlint-cli#45
eqrx merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-367f6da9ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Bumps markdown-it to 14.2.0 and updates ancestor dependency markdownlint-cli. These dependencies need to be updated together.

Updates markdown-it from 13.0.1 to 14.2.0

Changelog

Sourced from markdown-it's changelog.

[14.2.0] - 2026-05-24

Added

  • isPunctCharCode to utilities.

Fixed

  • Don't end HTML comment blocks on a blank line, #1155.
  • Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
  • Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
  • More strict entities decode to avoid false positives ;, #1096.
  • Restore block parser state on fail in lheading rule, #1131.

Security

  • Fixed poor smartquotes perfomance on > 70k quotes in single block
  • Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

[14.1.1] - 2026-01-11

Security

  • Fixed regression from v13 in linkify inline rule. Specific patterns could cause high CPU use. Thanks to @​ltduc147 for report.

[14.1.0] - 2024-03-19

Changed

  • Updated CM spec compatibility to 0.31.2, #1009.

Fixed

  • Fixed quadratic complexity when parsing references, #996.
  • Fixed quadratic output size with pathological user input in tables, #1000.

[14.0.0] - 2023-12-08

Changed

  • Drop ancient browsers support (use .fromCodePoint and other features).
  • Rewrite to ESM (including all plugins/deps). CJS fallback still available. No signatures changed, except markdown-it-emoji plugin.
  • Dropped dist/ folder from repo, build on package publish.
  • Set punicode.js as external dependency.

Fixed

  • Html tokens inside img alt are now rendered as their original text, #896.
  • Hardbreaks inside img alt are now rendered as newlines.

[13.0.2] - 2023-09-26

Security

  • Fixed crash/infinite loop caused by linkify inline rule, #957.

... (truncated)

Commits

Updates markdownlint-cli from 0.33.0 to 0.49.0

Release notes

Sourced from markdownlint-cli's releases.

v0.49.0

  • Update markdownlint dependency to 0.41.0
    • Improve MD022/MD028/MD035/MD042/MD051/MD060
    • Remove handling of inline directive syntax (frequent false positives)
    • Remove support for end-of-life Node version 20
  • Update all dependencies via Dependabot

v0.48.0

  • Update all dependencies via Dependabot

v0.47.0

  • Add output and exit code support for warnings
  • Update markdownlint dependency to 0.40.0
    • Improve MD011/MD013/MD051/MD060
  • Update all dependencies via Dependabot

v0.46.0

  • Replace glob dependency with tinyglobby (smaller and fewer dependencies)
  • Update markdownlint dependency to 0.39.0
    • Add MD060/table-column-style
    • Improve MD001/MD007/MD009/MD010/MD029/MD033/MD037/MD059
  • Update all dependencies via Dependabot

v0.45.0

  • Update markdownlint dependency to 0.38.0
    • Add MD059/descriptive-link-text
    • Improve MD025/MD027/MD036/MD038/MD041/MD043/MD045/MD051/MD052
    • Remove support for end-of-life Node version 18
  • Update all dependencies via Dependabot

v0.44.0

  • Update markdownlint dependency to 0.37.4
    • Convert module to ECMAScript (breaking change)
    • Stop using require, convert to import
    • Improve MD032
  • Update all dependencies via Dependabot

v0.43.0

  • Update markdownlint dependency to 0.36.1
    • Improve MD051
    • Make micromark parser available to custom rules
    • Improve performance
  • Update all dependencies via Dependabot

v0.42.0

  • Update markdownlint dependency to 0.35.0
    • Add MD058/blanks-around-tables
    • Use micromark in MD001/MD003/MD009/MD010/MD013/MD014/MD019/MD021/MD023/MD024/MD025/MD039/MD042/MD043
    • Improve MD018/MD020/MD031/MD034/MD044
    • markdown-it parser no longer invoked by default

... (truncated)

Commits
  • a4d5d37 Bump version 0.49.0
  • 503f264 Delete and recreate package-lock.json via "npm install".
  • 7a24593 Bump markdownlint from 0.40.0 to 0.41.0
  • c7c1c76 Bump commander from 14.0.3 to 15.0.0
  • 83f5f30 Bump tinyglobby from 0.2.16 to 0.2.17
  • 74b98de Bump js-yaml from 4.1.1 to 4.2.0
  • d368135 Bump markdown-it from 14.1.1 to 14.2.0
  • dd34288 Bump ava from 8.0.0 to 8.0.1
  • 1e363dc Bump brace-expansion from 5.0.5 to 5.0.6
  • 2f092d2 Bump ava from 7.0.0 to 8.0.0
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 14.2.0 and updates ancestor dependency [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli). These dependencies need to be updated together.


Updates `markdown-it` from 13.0.1 to 14.2.0
- [Changelog](https://github.com/markdown-it/markdown-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@13.0.1...14.2.0)

Updates `markdownlint-cli` from 0.33.0 to 0.49.0
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases)
- [Commits](igorshubovych/markdownlint-cli@v0.33.0...v0.49.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.2.0
  dependency-type: indirect
- dependency-name: markdownlint-cli
  dependency-version: 0.49.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 17, 2026
@coderabbitai

coderabbitai Bot commented Jun 17, 2026

Copy link
Copy Markdown

Walkthrough

The markdownlint-cli development dependency in package.json is updated from version ^0.33.0 to ^0.49.0.

Changes

markdownlint-cli Dependency Update

Layer / File(s) Summary
markdownlint-cli version bump
package.json
devDependencies.markdownlint-cli version constraint changed from ^0.33.0 to ^0.49.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main changes: bumping both markdown-it and markdownlint-cli dependencies.
Description check ✅ Passed The description thoroughly explains the dependencies being updated, their versions, and the rationale for coordinated updates.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/npm_and_yarn/multi-367f6da9ab

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 2

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@package.json`:
- Line 55: The markdownlint-cli version in package.json has been updated to
^0.49.0, but the .pre-commit-config.yaml file still references the older v0.33.0
revision, causing inconsistent linting behavior across development, local
pre-commit hooks, and CI/CD pipelines. Update the rev field for the
markdownlint-cli entry in .pre-commit-config.yaml from v0.33.0 to v0.49.0 to
ensure all execution paths use the same version and produce consistent linting
results.
- Line 55: There is a Node.js version compatibility mismatch in package.json.
The project's minimum Node version requirement is set to >=16.16.0 but the
markdownlint-cli devDependency version 0.49.0 requires Node.js >=22. Update the
engines field in package.json (specifically the node property) from >=16.16.0 to
>=22 to align with the markdownlint-cli 0.49.0 requirement and ensure all
devDependencies can run properly.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: ddeae821-d69d-4ab0-92a7-8ef52232d7a5

📥 Commits

Reviewing files that changed from the base of the PR and between c9e8b00 and eca5447.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (1)
  • package.json

Comment thread package.json
@eqrx eqrx merged commit 421575b into main Jun 18, 2026
3 checks passed
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/multi-367f6da9ab branch June 18, 2026 16:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant