Update dependency marked to v18.0.13 #377

Closed

robbertbos wants to merge 1 commit from renovate/marked into main

pull from: renovate/marked

merge into: robbertbos:main

robbertbos:main

robbertbos:renovate/ci

robbertbos:renovate/python

robbertbos:renovate/containers

robbertbos:renovate/npm-dompurify-vulnerability

robbertbos:renovate/nldd

robbertbos:renovate/postgres-17

robbertbos:renovate/npm-vitest-ui-vulnerability

robbertbos:renovate/npm-vite-vulnerability

robbertbos:renovate/npm-markdown-it-vulnerability

robbertbos:renovate/npm-dev

robbertbos:renovate/npm

robbertbos:renovate/python-3.x

robbertbos:renovate/quay.io-keycloak-keycloak-26.7

robbertbos:postvak-reply-drafts

robbertbos:office-document-preview

robbertbos:import-nldd-file-field

Conversation 2 Commits 1 Files changed 2 +5 -5

robbertbos commented 2026-09-20 02:02:41 +00:00

Owner

Copy link

This PR contains the following updates:

Package	Change	Age	Confidence
marked (source)	18.0.8 → 18.0.13

---

Release Notes

markedjs/marked (marked)

v18.0.13

Compare Source

Bug Fixes

• allow tabs in the thematic break that ends a list item (#​4087) (afbb27c)
• avoid O(n^2) scanning in reflinkSearch (#​4090) (c6a25bb)
• case fold reference link labels (#​4077) (aed9336)
• drop the leading whitespace after a hard line break (#​4075) (123ce04)
• match html block start conditions when ending a list item (#​4072) (c2facac)
• respect raw tokens when closing link labels (#​4066) (ef394f7)
• strip a tab that follows spaces in an indented code block (#​4080) (dbb393d)

v18.0.12

Compare Source

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#​4084) (4417582)
• allow one more level of nested brackets in a link label (#​4064) (37b28d8)
• do not add a newline to an empty code block (#​4073) (23b1706)
• escape character references in autolink destinations (#​4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#​4063) (df57534)
• reject invalid characters in HTML tag names (#​4083) (300bb1d)
• remove up to the fence indentation from each content line (#​4074) (0244f08)

v18.0.11

Compare Source

Bug Fixes

• do not nest a link inside a link (#​4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#​4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#​4059) (b699db3)

v18.0.10

Compare Source

Bug Fixes

• keep the em/strong mask the same length as the source (#​4044) (681373c)
• parse EOF backtick fences after paragraphs (#​4039) (81bd750)
• place task checkboxes after list loose is finalized (#​4046) (b8cf7dc), closes #​4045

v18.0.9

Compare Source

Bug Fixes

• an unmatched strong run before emphasis stays literal (#​4008) (e8544e6)
• Fix spurious deeper nesting in a blockquote continuation (#​4030) (452f1ed)
• pedantic foo: and "word" emphasis parsing (#​3999) (823093f)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • "before 6am on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [marked](https://marked.js.org) ([source](https://github.com/markedjs/marked)) | [`18.0.8` → `18.0.13`](https://renovatebot.com/diffs/npm/marked/18.0.8/18.0.13) |  |  | --- ### Release Notes <details> <summary>markedjs/marked (marked)</summary> ### [`v18.0.13`](https://github.com/markedjs/marked/releases/tag/v18.0.13) [Compare Source](https://github.com/markedjs/marked/compare/v18.0.12...v18.0.13) ##### Bug Fixes - allow tabs in the thematic break that ends a list item ([#&#8203;4087](https://github.com/markedjs/marked/issues/4087)) ([afbb27c](https://github.com/markedjs/marked/commit/afbb27c7ee753af07fb1a5c18031fc3068261b31)) - avoid O(n^2) scanning in reflinkSearch ([#&#8203;4090](https://github.com/markedjs/marked/issues/4090)) ([c6a25bb](https://github.com/markedjs/marked/commit/c6a25bb2a9d14f839cf2fd9abe4e4c7c3eece25b)) - case fold reference link labels ([#&#8203;4077](https://github.com/markedjs/marked/issues/4077)) ([aed9336](https://github.com/markedjs/marked/commit/aed933680dc146d868cb4573f393367abde04aae)) - drop the leading whitespace after a hard line break ([#&#8203;4075](https://github.com/markedjs/marked/issues/4075)) ([123ce04](https://github.com/markedjs/marked/commit/123ce04b813e0cd87a6dcb2326112ffb54022069)) - match html block start conditions when ending a list item ([#&#8203;4072](https://github.com/markedjs/marked/issues/4072)) ([c2facac](https://github.com/markedjs/marked/commit/c2facac8d455c87034f82639c900242de288aca0)) - respect raw tokens when closing link labels ([#&#8203;4066](https://github.com/markedjs/marked/issues/4066)) ([ef394f7](https://github.com/markedjs/marked/commit/ef394f71df54ab9d4057821881e866366eaacf11)) - strip a tab that follows spaces in an indented code block ([#&#8203;4080](https://github.com/markedjs/marked/issues/4080)) ([dbb393d](https://github.com/markedjs/marked/commit/dbb393deebc5b6982cb29d7415e8a8ba5555b83a)) ### [`v18.0.12`](https://github.com/markedjs/marked/releases/tag/v18.0.12) [Compare Source](https://github.com/markedjs/marked/compare/v18.0.11...v18.0.12) ##### Bug Fixes - allow a tab before the closing sequence of an ATX heading ([#&#8203;4084](https://github.com/markedjs/marked/issues/4084)) ([4417582](https://github.com/markedjs/marked/commit/4417582f35d69926f0778ee133c3af75b7f3f966)) - allow one more level of nested brackets in a link label ([#&#8203;4064](https://github.com/markedjs/marked/issues/4064)) ([37b28d8](https://github.com/markedjs/marked/commit/37b28d8f640e39c9680e24b83fe7828dd111073d)) - do not add a newline to an empty code block ([#&#8203;4073](https://github.com/markedjs/marked/issues/4073)) ([23b1706](https://github.com/markedjs/marked/commit/23b1706a0e19e354d0dd0e82ba93fb73e11c6f5c)) - escape character references in autolink destinations ([#&#8203;4053](https://github.com/markedjs/marked/issues/4053)) ([8f432f0](https://github.com/markedjs/marked/commit/8f432f0ef219439cb1b5efdb86018aee0e44a141)) - reject GFM email autolink when the domain ends in \_ or - ([#&#8203;4063](https://github.com/markedjs/marked/issues/4063)) ([df57534](https://github.com/markedjs/marked/commit/df575341940389880afde6372ae5aa19bd9eb205)) - reject invalid characters in HTML tag names ([#&#8203;4083](https://github.com/markedjs/marked/issues/4083)) ([300bb1d](https://github.com/markedjs/marked/commit/300bb1dce07bc262d74778b28bd6644770269be0)) - remove up to the fence indentation from each content line ([#&#8203;4074](https://github.com/markedjs/marked/issues/4074)) ([0244f08](https://github.com/markedjs/marked/commit/0244f08d6253993fff0755c3edece62002692b31)) ### [`v18.0.11`](https://github.com/markedjs/marked/releases/tag/v18.0.11) [Compare Source](https://github.com/markedjs/marked/compare/v18.0.10...v18.0.11) ##### Bug Fixes - do not nest a link inside a link ([#&#8203;4051](https://github.com/markedjs/marked/issues/4051)) ([e250e31](https://github.com/markedjs/marked/commit/e250e31f3e1de80e41baf6f83ac8d3123d1e114f)) - inlineTokens rebuilds the reflink-mask preamble per call ([#&#8203;4040](https://github.com/markedjs/marked/issues/4040)) ([0653c24](https://github.com/markedjs/marked/commit/0653c24b59edfe03e327cbb68ea8318cd0b93641)) - keep emphasis in the text of a rejected reference link ([#&#8203;4059](https://github.com/markedjs/marked/issues/4059)) ([b699db3](https://github.com/markedjs/marked/commit/b699db3c6de018ccdbf93ac28b0f0677c627c576)) ### [`v18.0.10`](https://github.com/markedjs/marked/releases/tag/v18.0.10) [Compare Source](https://github.com/markedjs/marked/compare/v18.0.9...v18.0.10) ##### Bug Fixes - keep the em/strong mask the same length as the source ([#&#8203;4044](https://github.com/markedjs/marked/issues/4044)) ([681373c](https://github.com/markedjs/marked/commit/681373ccc058b5dc93c1f63291d755d7d714c2fa)) - parse EOF backtick fences after paragraphs ([#&#8203;4039](https://github.com/markedjs/marked/issues/4039)) ([81bd750](https://github.com/markedjs/marked/commit/81bd7505338f83ad118401f53ab6b0e86b8d895f)) - place task checkboxes after list loose is finalized ([#&#8203;4046](https://github.com/markedjs/marked/issues/4046)) ([b8cf7dc](https://github.com/markedjs/marked/commit/b8cf7dc5929331d3014555babc33bcda0dae4999)), closes [#&#8203;4045](https://github.com/markedjs/marked/issues/4045) ### [`v18.0.9`](https://github.com/markedjs/marked/releases/tag/v18.0.9) [Compare Source](https://github.com/markedjs/marked/compare/v18.0.8...v18.0.9) ##### Bug Fixes - an unmatched strong run before emphasis stays literal ([#&#8203;4008](https://github.com/markedjs/marked/issues/4008)) ([e8544e6](https://github.com/markedjs/marked/commit/e8544e6a6702125f4ea3f74eb81c90a2f8203c38)) - Fix spurious deeper nesting in a blockquote continuation ([#&#8203;4030](https://github.com/markedjs/marked/issues/4030)) ([452f1ed](https://github.com/markedjs/marked/commit/452f1ed6a7429e05f00d788bcd9867440d7dc750)) - pedantic **foo:** and **"word"** emphasis parsing ([#&#8203;3999](https://github.com/markedjs/marked/issues/3999)) ([823093f](https://github.com/markedjs/marked/commit/823093f3d4a70be748eed48d0d0475836cebdedb)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "before 6am on sunday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMDMuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEwMy4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

robbertbos added 1 commit 2026-09-20 02:02:41 +00:00

Update dependency marked to v18.0.13 5124a335f9

robbertbos closed this pull request 2026-09-20 06:01:38 +00:00

robbertbos commented 2026-09-20 06:01:51 +00:00

Author

Owner

Copy link

Not merging: 18.0.13 still drops the paragraph after an empty nested quote. Measured on this branch - src/lib/markdown.test.ts fails 3 of 30; > citaat / >> / tekst renders as two empty blockquotes with tekst gone.

Upstream markedjs/marked#4098 is still open and neither fix PR (4101, 4102) is merged, so every release from 18.0.9 onwards carries the bug. We stay on the 18.0.8 pin until one lands.

Not merging: 18.0.13 still drops the paragraph after an empty nested quote. Measured on this branch - `src/lib/markdown.test.ts` fails 3 of 30; `> citaat` / `>>` / `tekst` renders as two empty blockquotes with `tekst` gone. Upstream [markedjs/marked#4098](https://github.com/markedjs/marked/issues/4098) is still open and neither fix PR (4101, 4102) is merged, so every release from 18.0.9 onwards carries the bug. We stay on the 18.0.8 pin until one lands.

robbertbos referenced this pull request 2026-09-20 06:09:52 +00:00

Put marked behind Dependency Dashboard approval #381

robbertbos commented 2026-09-21 02:05:27 +00:00

Author

Owner

Copy link

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (18.0.13). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

### Renovate Ignore Notification Because you closed this PR without merging, Renovate will ignore this update (`18.0.13`). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the `ignoreDeps` array of your Renovate config. If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

Some checks failed

Hide all checks

CI / release-scripts (pull_request) Successful in 6s

Required

Details

security-scan / SBOM (trivy) (pull_request) Successful in 10s

Required

Details

security-scan / Filesystem scan (trivy fs) (pull_request) Successful in 13s

Required

Details

security-scan / JS SCA (npm audit) (pull_request) Successful in 13s

Required

Details

security-scan / Python SAST (bandit) (pull_request) Successful in 17s

Required

Details

security-scan / Python SCA (pip-audit) (pull_request) Successful in 36s

Required

Details

test-build / build (frontend) (pull_request) Successful in 56s

Required

Details

test-build / build (backend) (pull_request) Successful in 1m6s

Required

Details

test-build / build (pull_request) Successful in 0s

Required

Details

CI / pre-commit (pull_request) Successful in 1m37s

Required

Details

CI / frontend-test (pull_request) Failing after 2m24s

Required

Details

CI / e2e (pull_request) Successful in 4m44s

Required

Details

CI / backend-test (pull_request) Successful in 9m38s

Required

Details

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something is not working

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

help wanted

Need some help

  

invalid

Something is wrong

  

nldd ds

  

question

More information is needed

  

wontfix

This won't be fixed

No labels

bug

duplicate

enhancement

help wanted

invalid

nldd ds

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

robbertbos/waggle!377

No description provided.