Skip to content

chore(deps): Bump markdown-to-jsx from 9.10.1 to 9.10.2 - #149

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/markdown-to-jsx-9.10.2
Aug 13, 2026
Merged

chore(deps): Bump markdown-to-jsx from 9.10.1 to 9.10.2#149
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/markdown-to-jsx-9.10.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 12, 2026

Copy link
Copy Markdown
Contributor

Bumps markdown-to-jsx from 9.10.1 to 9.10.2.

Release notes

Sourced from markdown-to-jsx's releases.

markdown-to-jsx@9.10.2

Patch Changes

  • 2401d28, b8ef1d5: Markdown with long runs of brackets or footnote markers now parses in linear time instead of slowing to a crawl. Inputs such as thousands of repeated [ or [^ could previously take seconds to minutes, which mattered most when rendering untrusted input on a server.

    Found by Team Atlanta, collected and verified by OSTIF, reported with a fix by smaury of Shielder.

Changelog

Sourced from markdown-to-jsx's changelog.

9.10.2

Patch Changes

  • 2401d28, b8ef1d5: Markdown with long runs of brackets or footnote markers now parses in linear time instead of slowing to a crawl. Inputs such as thousands of repeated [ or [^ could previously take seconds to minutes, which mattered most when rendering untrusted input on a server.

    Found by Team Atlanta, collected and verified by OSTIF, reported with a fix by smaury of Shielder.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 12, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: version-update:semver-patch

@github-actions
github-actions Bot enabled auto-merge (squash) August 12, 2026 14:06
@indigo423

Copy link
Copy Markdown
Collaborator

@dependabot rebase

Bumps [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx/tree/HEAD/lib) from 9.10.1 to 9.10.2.
- [Release notes](https://github.com/quantizor/markdown-to-jsx/releases)
- [Changelog](https://github.com/quantizor/markdown-to-jsx/blob/main/lib/CHANGELOG.md)
- [Commits](https://github.com/quantizor/markdown-to-jsx/commits/markdown-to-jsx@9.10.2/lib)

---
updated-dependencies:
- dependency-name: markdown-to-jsx
  dependency-version: 9.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/markdown-to-jsx-9.10.2 branch from 617e92a to e934990 Compare August 13, 2026 05:07

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved: version-update:semver-patch

@github-actions
github-actions Bot merged commit 1cb4806 into main Aug 13, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/markdown-to-jsx-9.10.2 branch August 13, 2026 05:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant