chore(deps): update pnpm.catalog.default markdown-it to v15

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
markdown-it	^14.3.2 → ^15.0.3

---

Release Notes

markdown-it/markdown-it (markdown-it)

v15.0.3

Compare Source

Changed

• Updated dependencies.

Fixed

• Enforce the 999 Unicode code point limit for reference definition labels,
  partially addressing #​1213.
• Require whitespace before multiline reference titles.

Security

• Fixed quadratic complexity when parsing multiline reference definitions.
• Fixed quadratic complexity when parsing unclosed inline HTML comments,
  processing instructions, declarations and CDATA sections.

v15.0.2

Compare Source

Security

• Fixed quadratic complexity in smartquotes when quote types don't match, #​1209.
  Also limited the smartquotes stack to 1000 unmatched openers.

v15.0.1

Compare Source

Changed

• doc: replace oxide theme with custom one.

Fixed

• Fixed code span parsing after lookaheads for unclosed link and image labels, #​1201.
• Preserve spaces in code spans whose content consists only of spaces, #​1180.
• Preserve brackets around IPv6 address literals when normalizing links, #​1204.

Security

• Fixed quadratic complexity when replacing fuzzy links.
• Fixed quadratic complexity in scheme backscan (inline linkify rule).

v15.0.0

Compare Source

Added

• Exposed parser internals classes as static properties on markdownit.
• Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
• Added the markdown-it/browser export with bundled ESM and UMD builds.
• Added colored CLI help on supported terminals via argparse 3.
• Added reference labels to link/image tokens, #​938.
• Added reference_definition tokens. They remain stripped by default
  for backwards compatibility, #​1055. Also adjusted the line-break heuristic
  to keep output exactly the same.

Changed

• [breaking] linkify-it => v6
  • No fuzzy links by default.
  • No auth part check by default.
  • Unicode punctuation terminates the link by default (should help with CJK).
  • See linkify-it changelog
    for other changes.
• Package root now resolves to prebuilt ESM and CJS files instead of raw
  sources. Distribution files were reorganized under dist/ and
  dist/browser/.
• Migrated to Typescript.
• entities => v8. Can be rolled back to v7 if compatibility issues happen.
• Moved validateLink, normalizeLink and normalizeLinkText from properties
  to prototype methods.
• Reworked issue templates and contribution guidelines.

Removed

• [breaking] Removed package-internal subpath exports (markdown-it/lib/* and similar).
  Use the static classes exposed on markdownit instead.
• [breaking] Removed obsolete StateBlock#ddIndent, #​1139. Update
  markdown-it-deflist to keep it working.

Fixed

• Preserve a literal backslash before a terminating space in link destinations,
  matching CommonMark 6.3, #​1188.
• Recognize lowercase declarations as HTML blocks, matching CommonMark 4.6,
  #​1189.
• Require semicolons for named entities in all decoding paths, completing the
  fix for #​1096.
• Enhanced the text_join rule to process image alt text.
• Include inline code content in image alt text, #​1142.

v14.3.3

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coldtea-pr-lens]

Note

renovate[bot] opened this pull request, so PR Lens left it undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
comark	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-binding	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-json-render	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-nextjs	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-nuxt	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-svelte	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-sveltekit	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-twoslash	Ready	Preview	Oct 19, 2026 12:53am UTC
comark-vue	Ready	Preview	Oct 19, 2026 12:53am UTC

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2e0fdba0-c2f3-4080-8941-02fab2c43e8f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[pkg-pr-new]

Open in StackBlitz

comark

npm i https://pkg.pr.new/comark@495

@comark/angular

npm i https://pkg.pr.new/@comark/angular@495

@comark/ansi

npm i https://pkg.pr.new/@comark/ansi@495

@comark/html

npm i https://pkg.pr.new/@comark/html@495

@comark/nuxt

npm i https://pkg.pr.new/@comark/nuxt@495

@comark/react

npm i https://pkg.pr.new/@comark/react@495

@comark/svelte

npm i https://pkg.pr.new/@comark/svelte@495

@comark/vue

npm i https://pkg.pr.new/@comark/vue@495

commit: 0f056e1

[codspeed]

Merging this PR will not alter performance

✅ 41 untouched benchmarks

---

_{Comparing renovate/markdown-it-15.x (0f056e1) with main (51180d6)}