Skip to content

Bump linkify-it and @ronradtke/react-native-markdown-display - #859

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-77631ae795
Closed

Bump linkify-it and @ronradtke/react-native-markdown-display#859
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-77631ae795

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps linkify-it to 5.0.2 and updates ancestor dependency @ronradtke/react-native-markdown-display. These dependencies need to be updated together.

Updates linkify-it from 5.0.1 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

  • Fixed DoS in mailto: links (restrict user name to 64 chars).
  • Restricted user/pass part length in links.
Commits

Updates @ronradtke/react-native-markdown-display from 8.1.0 to 9.0.3

Release notes

Sourced from @​ronradtke/react-native-markdown-display's releases.

9.0.3

Everything included in https://github.com/RonRadtke/react-native-markdown-display/releases/tag/9.0.0

  • some fixes for listing / prettier
  • improved readme

8.1.1

No release notes provided.

Commits
  • 0d74bde who doesn't like fancy icons in th ereadme
  • 78f2534 enhance readme a bit
  • da55017 fix/run prettier
  • 9b24d3c small cleanup
  • 8f89203 version
  • 3705763 - Add streaming support
  • 6afa433 rework styling a bit
  • 0b6156a update docu
  • d26a403 add darkmode to the example app and fix some accessibility
  • 8cce659 adds syntax highlighting in a code fragment and possibility to copy code
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [linkify-it](https://github.com/markdown-it/linkify-it) to 5.0.2 and updates ancestor dependency [@ronradtke/react-native-markdown-display](https://github.com/RonRadtke/react-native-markdown-display). These dependencies need to be updated together.


Updates `linkify-it` from 5.0.1 to 5.0.2
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@5.0.1...5.0.2)

Updates `@ronradtke/react-native-markdown-display` from 8.1.0 to 9.0.3
- [Release notes](https://github.com/RonRadtke/react-native-markdown-display/releases)
- [Commits](RonRadtke/react-native-markdown-display@8.1.0...9.0.3)

---
updated-dependencies:
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
- dependency-name: "@ronradtke/react-native-markdown-display"
  dependency-version: 9.0.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 24, 2026
@coryzoon

Copy link
Copy Markdown
Contributor

Handled in #858

@coryzoon coryzoon closed this Jul 25, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-77631ae795 branch July 25, 2026 12:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant