chore(deps): update dependency marked to v18

v18.1.3

Compare Source

Bug Fixes

• allow trailing tabs after a setext heading underline (#​4152) (1f1b480)
• avoid quadratic scan for unmatched emphasis delimiters (#​4103) (eab1e48), closes #​4099
• await promise arrays from walkTokens extensions (#​4153) (c38704c)
• cli: honor defaults and config when outputting tokens (#​4146) (9470e8f)
• collapse internal whitespace when normalizing link labels (#​4157) (02c73e8)
• do not allow a blank line inside a link reference definition label (#​4165) (f3d21af)
• don't treat an escaped ) or quote as an inline link or title closer (#​4151) (9cb84e0)
• end a list item before a lazy line after an html block (#​4159) (7ba42f4)
• end blockquote before a lazy line after a table (#​4161) (e7dcf52)
• isolate extension names from Object.prototype (#​4177) (5cb03bd)
• keep a block quote open after a lazy line in a nested block quote (#​4175) (1d7272f)
• only close a code fence with the opening fence character (#​4164) (1d4d8fe)
• preserve zero-valued custom renderer results (#​4162) (e43ceef)
• recognize task list items when a tab follows the checkbox (#​4163) (64a299d)
• start a GFM www autolink only at a word boundary (#​4166) (84beefb)

Performance Improvements

• fix backtracking in padantic html (#​4173) (2d4a23c)

v18.1.2

Compare Source

Bug Fixes

• allow a tab or end of input after a type 6 html block tag name (#​4128) (e09c40d)
• apply emphasis flanking and rules 9-10 to the whole delimiter run (#​4145) (5d8e234)
• cli: await config functions before parsing (#​4138) (3a11ad1)
• cli: create no-clobber output files atomically (#​4135) (e7c4f64)
• do not continue a block quote paragraph from a whitespace-only line (#​4134) (42f34a8)
• expand a tab after the block quote marker to the next tab stop (#​4110) (2d3899b)
• honor per-call async options when composing hooks (#​4139) (379be9d)
• keep a line starting with # but no space in the list item (#​4127) (6b63189)
• keep duplicate link definitions in the tokens (#​4132) (2784acc)
• keep lazy lines after a list in a nested blockquote (#​4137) (38c7e55)
• keep lazy setext underlines in list items as text (#​4126) (398234c)
• render nested image alt formatting as plain text (#​4131) (15f59bb)
• stop an unclosed inline raw tag from unescaping later blocks (#​4130) (4562b6f)

Performance Improvements

• ~16% faster parsing by skipping em/strong masking for runs without *, _ or ~ (#​4142) (f0fd3e0)

v18.1.1

Compare Source

Bug Fixes

• cli: honor an explicitly empty string input (#​4113) (ec3a4e5)
• end blockquote before a lazy line after a heading, hr or html block (#​4115) (9e64a6a)
• keep a backslash in a code span from hiding emphasis (#​4117) (6a57018)
• keep a decoded character reference from forming a new one (#​4111) (6bbac0c), closes #​38 #​112
• let indented and type 3-5 html blocks interrupt a paragraph (#​4124) (eaa1fff)
• make walkTokens linear by appending values in place (#​4121) (627d9ae), closes #​4120
• match pre, script, style and textarea as whole tag names (#​4114) (0db74cb)
• preserve enclosing link state after parsing images (#​4123) (cc07bb9)
• respect tab stops in list continuation indentation (#​4119) (4bd2528)

Performance Improvements

• avoid repeated raw string copies in nested lists (#​4082) (7e8754d)

v18.1.0

Compare Source

Bug Fixes

• avoid cubic backtracking on unicode whitespace in a link destination (#​4106) (0d20220)
• load CLI configs with top-level await (#​4100) (c61543e)
• reject unbalanced parentheses in link destinations (#​4107) (3363c99)

Features

• add linkParenPossible to lexer state to fail fast for link token generation (#​4070) (4ee44f7)

v18.0.14

Compare Source

Bug Fixes

• allow indented lines in setext heading text (#​4095) (7d05530)
• decode numeric character references in text (#​4076) (cead8de)
• keep text after empty nested blockquote (#​4101) (1b89557), closes #​4098
• preserve internal tabs in list item content (#​4086) (e136da7)
• strip whitespace when normalizing link reference labels (#​4091) (c7ee43a)
• support GFM protocol autolinks (#​4067) (7f7a496)

v18.0.13

Compare Source

Bug Fixes

• allow tabs in the thematic break that ends a list item (#​4087) (afbb27c)
• avoid O(n^2) scanning in reflinkSearch (#​4090) (c6a25bb)
• case fold reference link labels (#​4077) (aed9336)
• drop the leading whitespace after a hard line break (#​4075) (123ce04)
• match html block start conditions when ending a list item (#​4072) (c2facac)
• respect raw tokens when closing link labels (#​4066) (ef394f7)
• strip a tab that follows spaces in an indented code block (#​4080) (dbb393d)

v18.0.12

Compare Source

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#​4084) (4417582)
• allow one more level of nested brackets in a link label (#​4064) (37b28d8)
• do not add a newline to an empty code block (#​4073) (23b1706)
• escape character references in autolink destinations (#​4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#​4063) (df57534)
• reject invalid characters in HTML tag names (#​4083) (300bb1d)
• remove up to the fence indentation from each content line (#​4074) (0244f08)

v18.0.11

Compare Source

Bug Fixes

• do not nest a link inside a link (#​4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#​4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#​4059) (b699db3)

v18.0.10

Compare Source

Bug Fixes

• keep the em/strong mask the same length as the source (#​4044) (681373c)
• parse EOF backtick fences after paragraphs (#​4039) (81bd750)
• place task checkboxes after list loose is finalized (#​4046) (b8cf7dc), closes #​4045

v18.0.9

Compare Source

Bug Fixes

• an unmatched strong run before emphasis stays literal (#​4008) (e8544e6)
• Fix spurious deeper nesting in a blockquote continuation (#​4030) (452f1ed)
• pedantic foo: and "word" emphasis parsing (#​3999) (823093f)

v18.0.8

Compare Source

Bug Fixes

• fall back to default checkbox renderer when extension returns false (#​4023) (e1b6139)

v18.0.7

Compare Source

Bug Fixes

• Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#​4014) (f945fc5), closes #​3991
• Avoid O(n^2) masked source rebuild in inline tokenizer (#​4017) (9154f8f)
• keep empty list after blockquote as a sibling block (#​4004) (3f144a0)
• preserve code spans adjacent to tildes (#​4012) (0de7188)
• Recognize setext headings whose first line starts with # (#​4015) (f056437), closes #​1
• treat a line of only tabs as a blank line between paragraphs (#​4007) (bc2f121)

v18.0.6

Compare Source

Bug Fixes

• Avoid O(n^2) backtracking in inline link href regex (#​4013) (a009808)
• Fix ordered lists after blockquotes (#​4003) (33928d0)
• keep trailing text on HTML block close line for PI, declarations, and CDATA (#​3991) (bbb84c8)

v18.0.5

Compare Source

Bug Fixes

• parse empty list item with trailing space (#​3984) (b55410f)

v18.0.4

Compare Source

Bug Fixes

• cache list indentation regexes (#​3969) (a37983f)
• fix cli not reading stdin (#​3967) (11adb69)

v18.0.3

Compare Source

Bug Fixes

• avoid task checkbox for setext heading text (#​3960) (2608e81)

v18.0.2

Compare Source

Bug Fixes

• fix infinite loop for indented code blank line (#​3947) (58a52e8)

v18.0.1

Compare Source

Bug Fixes

• rules: ensure lookbehind regex is evaluated correctly by minifiers (#​3945) (abd907a)

v18.0.0

Compare Source

Bug Fixes

• Bump typescript from 5.9.3 to 6.0.2 (#​3934) (e8efc51)
• prevent GFM table tokens from greedily capturing trailing newlines (#​3926) (40f2665)
• prevent heading and def tokens from greedily capturing multiple newlines (#​3925) (b379e3e)
• trim blank lines from block tokens (#​3939) (b70895f)

BREAKING CHANGES

• trim trailing blank lines from block tokens
• update Typescript to v6

v17.0.6

Compare Source

Bug Fixes

• avoid race condition in async parallel parse/parseInline with hooks (#​3924) (6e96fa7)
• cli: honor positional input file (#​3922) (a1c2617)
• cli: use file URL for config import (#​3923) (73e1f3f)

v17.0.5

Compare Source

Bug Fixes

• Fix catastrophic backtracking (ReDoS) in link/reflink label regex (#​3918) (4625980)
• prevent quadratic complexity in emStrongLDelim regex (#​3906) (c732dd2)
• prevent single-tilde strikethrough false positives (#​3910) (5e03369)
• re-assign tokenizer.lexer and renderer.parser at start of each parse call (#​3907) (f3a3ec0)
• trim trailing whitespace from lheading text (#​3920) (3ea7e88)