chore(deps): bump marked from 14.1.3 to 18.0.14 in /worker

[dependabot]

Bumps marked from 14.1.3 to 18.0.14.

Release notes

Sourced from marked's releases.

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

• allow indented lines in setext heading text (#4095) (7d05530)
• decode numeric character references in text (#4076) (cead8de)
• keep text after empty nested blockquote (#4101) (1b89557), closes #4098
• preserve internal tabs in list item content (#4086) (e136da7)
• strip whitespace when normalizing link reference labels (#4091) (c7ee43a)
• support GFM protocol autolinks (#4067) (7f7a496)

v18.0.13

18.0.13 (2026-09-12)

Bug Fixes

• allow tabs in the thematic break that ends a list item (#4087) (afbb27c)
• avoid O(n^2) scanning in reflinkSearch (#4090) (c6a25bb)
• case fold reference link labels (#4077) (aed9336)
• drop the leading whitespace after a hard line break (#4075) (123ce04)
• match html block start conditions when ending a list item (#4072) (c2facac)
• respect raw tokens when closing link labels (#4066) (ef394f7)
• strip a tab that follows spaces in an indented code block (#4080) (dbb393d)

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
• allow one more level of nested brackets in a link label (#4064) (37b28d8)
• do not add a newline to an empty code block (#4073) (23b1706)
• escape character references in autolink destinations (#4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
• reject invalid characters in HTML tag names (#4083) (300bb1d)
• remove up to the fence indentation from each content line (#4074) (0244f08)

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

• do not nest a link inside a link (#4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#4059) (b699db3)

... (truncated)

Commits

• ef0704c chore(release): 18.0.14 [skip ci]
• 23c82ad chore: update deps (#4108)
• 1b89557 fix: keep text after empty nested blockquote (#4101)
• 7f7a496 fix: support GFM protocol autolinks (#4067)
• 5196d98 docs: add commonmark and gfm as versions in demo (#4094)
• de2320a docs: add marked-gitlab to known extensions (#4092)
• 7d05530 fix: allow indented lines in setext heading text (#4095)
• c7ee43a fix: strip whitespace when normalizing link reference labels (#4091)
• cead8de fix: decode numeric character references in text (#4076)
• e136da7 fix: preserve internal tabs in list item content (#4086)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for marked since your current version.