[dependabot]

Removes katex. It's no longer used after updating ancestor dependency streamdown. These dependencies need to be updated together.

Removes katex

Updates streamdown from 1.6.11 to 2.7.0

Release notes

Sourced from streamdown's releases.

streamdown@2.7.0

This release is mostly about streaming speed, plus a few new props and a lot of fixes.

⚡ Performance • Code blocks now highlight only the new lines as they stream, instead of the whole block on every update • Blocks that are already parsed get reused while a document streams, and only block tokens are lexed • Code and table auto-scroll runs once per frame instead of on every chunk • Showing and hiding the caret no longer restyles the whole document, which used to cost tens of ms per toggle on long streams • The code highlight cache now has a size limit (LRU), so memory stays bounded in long sessions • Mermaid diagrams render one at a time while their fence streams, so a growing diagram no longer holds up the stream

✨ New • fallbackComponent: a fallback renderer for tags in allowedTags or HTML tags that have no entry in components • disableAutolinkProtocols: turn off GFM autolinking for specific protocols (e.g. ["mailto"]) • portal: set the container used by Mermaid and table fullscreen and the link safety modal • defaultComponents is now exported, so you can build overrides on top of the built-in renderers • onCopy / onError now work on the default code and Mermaid copy buttons • Incomplete images show a loading skeleton while they stream instead of disappearing

🐛 Fixes • Mermaid diagrams auto-fit their container and text is readable again • A < inside math (e.g. $$ \sum_{j<k} $$) no longer cuts off the rest of the message • Code block buttons can be clicked inside nested scroll containers • Tables copied or downloaded as Markdown keep literal HTML tags and entities • Loose list items no longer get extra spacing from a wrapping <p> • CJK: bare URLs after fullwidth punctuation are linkified again

🧩 remend 1.4.0 • New single-pass scanner that follows CommonMark for code fences and spans: handles ~~~, fences in quotes and lists, CRLF, and multi-backtick spans • Fixes slow (quadratic) healing on input full of delimiters • Identifiers like snake__case no longer create false emphasis • Healing is now idempotent

⚠️ Heads up • @streamdown/code@2.0.0 moves to Shiki v4 and now needs Node 20 or newer • marked is now on v18

Below, you can find the detailed changes.

Minor Changes

• 6b14de4: Add a disableAutolinkProtocols prop to <Streamdown> for disabling GFM autolinking of specific URL protocols (e.g. mailto).

  <Streamdown disableAutolinkProtocols={["mailto"]}>
    {"Contact us at hello@example.com"}
  </Streamdown>

... (truncated)

Changelog

Sourced from streamdown's changelog.

2.7.0

Minor Changes

• 6b14de4: Add a disableAutolinkProtocols prop to <Streamdown> for disabling GFM autolinking of specific URL protocols (e.g. mailto).

  <Streamdown disableAutolinkProtocols={["mailto"]}>
    {"Contact us at hello@example.com"}
  </Streamdown>

  Bare emails and bare URLs whose protocol matches the list (case-insensitive, "mailto" and "mailto:" are equivalent) are unwrapped back to plain text. Explicit markdown links ([text](https://github.com/vercel/streamdown/blob/main/packages/streamdown/url)) are left as links, including when the label reconstructs the URL (e.g. [foo@x.com](https://github.com/vercel/streamdown/blob/main/packages/streamdown/mailto:foo@x.com)). When the prop is omitted, autolinking behavior is completely unchanged.

  Closes #607.

• b1965bb: feat: add fallbackComponent prop for missing map entries / allowedTags

  Adds a new fallbackComponent prop to <Streamdown>. When provided, it is used as a fallback renderer for any HTML tag or allowed custom tag that does not have an explicit entry in the components map:

  <Streamdown
    allowedTags={{ mention: ["user_id"] }}
    fallbackComponent={({ node, children, ...props }) =>
      createElement(node!.tagName, props, children)
    }
  >
    {markdown}
  </Streamdown>

  fallbackComponent applies to custom tags declared via allowedTags (with no explicit component entry) and to standard HTML tags absent from the built-in component set (e.g. <span>, <em>, <div>, <br>). Built-in and explicit components entries always win — this is not a full unstyled mode.

  Refs #543

Patch Changes

• b651249: Give animated word spans a style object instead of a CSS string, so rendering skips parsing a style declaration for every word on every update. createAnimatePlugin still writes CSS strings.
• b651249: Check whether a stream only appended text by comparing a slice of the new input with the previous one instead of calling startsWith, which compared the whole document character by character on every update.
• b651249: Hide the caret after a table or an unfinished code fence by marking the last element instead of changing the container's class and style. Each toggle used to restyle the whole document, which cost tens of milliseconds per flip on long streams.
• c971f42: Wire onCopy and onError through default code and Mermaid copy controls via controls.code.copy and controls.mermaid.copy.
• 4ec5639: Bound the code highlight cache. Results of streaming code blocks are no longer cached (each is superseded by the next update), and finished code blocks are kept in a least-recently-used cache bounded by their size (tokens, lines and characters) and by a limit of 5,000 results. Lookups compare the full code, so blocks that differ only in the middle no longer share tokens. A code block also ignores highlight results for code it has already moved past.
• 16e7e65: Export defaultComponents so custom components overrides can compose Streamdown's built-in renderers (styles, data-streamdown, link safety, code/mermaid/table behavior) instead of reimplementing them.
• 163c63b: fix(code-block): use absolute positioning for action buttons to fix click events in nested scroll containers

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for streamdown since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Repository: PyModel/pythinker-cli/.coderabbit.yaml
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: fd7a1e1b-8aad-41da-bc23-eb29a07be209

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}