Skip to content

Bump marked from 4.0.16 to 18.0.9 - #14436

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/marked-18.0.9
Open

Bump marked from 4.0.16 to 18.0.9#14436
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/marked-18.0.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor

Bumps marked from 4.0.16 to 18.0.9.

Release notes

Sourced from marked's releases.

v18.0.9

18.0.9 (2026-08-04)

Bug Fixes

  • an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
  • Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
  • pedantic foo: and "word" emphasis parsing (#3999) (823093f)

v18.0.8

18.0.8 (2026-08-04)

Bug Fixes

  • fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)

v18.0.7

18.0.7 (2026-07-21)

Bug Fixes

  • Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
  • Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
  • keep empty list after blockquote as a sibling block (#4004) (3f144a0)
  • preserve code spans adjacent to tildes (#4012) (0de7188)
  • Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
  • treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

v18.0.6

18.0.6 (2026-07-09)

Bug Fixes

  • Avoid O(n^2) backtracking in inline link href regex (#4013) (a009808)
  • Fix ordered lists after blockquotes (#4003) (33928d0)
  • keep trailing text on HTML block close line for PI, declarations, and CDATA (#3991) (bbb84c8)

v18.0.5

18.0.5 (2026-06-04)

Bug Fixes

  • parse empty list item with trailing space (#3984) (b55410f)

v18.0.4

... (truncated)

Commits
  • 8e858a4 chore(release): 18.0.9 [skip ci]
  • 641e5df docs: explain partial extensions in use (#4033)
  • 452f1ed fix: Fix spurious deeper nesting in a blockquote continuation (#4030)
  • e8544e6 fix: an unmatched strong run before emphasis stays literal (#4008)
  • 823093f fix: pedantic foo: and "word" emphasis parsing (#3999)
  • 12a84a8 chore(release): 18.0.8 [skip ci]
  • 3a1a706 chore(deps-dev): bump undici from 6.24.0 to 6.27.0 (#4042)
  • 58ed4af chore(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#4032)
  • 01539fb chore(deps-dev): bump @​semantic-release/git from 10.0.1 to 11.0.1 (#4031)
  • e1b6139 fix: fall back to default checkbox renderer when extension returns false (#4023)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for marked since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [marked](https://github.com/markedjs/marked) from 4.0.16 to 18.0.9.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v4.0.16...v18.0.9)

---
updated-dependencies:
- dependency-name: marked
  dependency-version: 18.0.9
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 7, 2026
@shopify-shipitnext

Copy link
Copy Markdown

🔎 View this PR in Shipit Next.

ℹ️ Expand to learn how to deploy and handle emergencies using Shipit Next

Overview

Shipit Next will merge your code on your behalf because this repository uses Shipit Next and its merge queue.

To ship this PR, you can either:

Comment Commands

  • /shipit: Enqueue this PR into the merge queue where it will eventually be merged and deployed.
  • /cancel: Eject this PR from the merge queue and rebuild PRs that were enqueued after this PR.
  • /shipit --jump-queue: Enqueue this PR at the top of the merge queue where it will be included in the next deploy. Use this for non-emergency situations.
    - Emergency handling procedure for this command can be found here.
  • /shipit --emergency: Merge this PR directly into main and deploy to all environments once all require_for_emergency CI checks pass. Please be aware that changes deployed with this command will not be automatically rolled back.

Commands exclusive to Deploy Before Merge

  • /cancel --emergency: Eject this PR from the merge and rollback any deployments containing this PR.

Documentation

Questions or feedback?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants