Skip to content

Bump marko from 2.2.2 to 2.2.3 in /test/repo_hygiene#1478

Merged
BenjaminPelletier merged 1 commit into
mainfrom
dependabot/uv/test/repo_hygiene/marko-2.2.3
Jun 4, 2026
Merged

Bump marko from 2.2.2 to 2.2.3 in /test/repo_hygiene#1478
BenjaminPelletier merged 1 commit into
mainfrom
dependabot/uv/test/repo_hygiene/marko-2.2.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 4, 2026

Bumps marko from 2.2.2 to 2.2.3.

Release notes

Sourced from marko's releases.

v2.2.3

What's Changed

New Contributors

Full Changelog: frostming/marko@v2.2.2...v2.2.3

Changelog

Sourced from marko's changelog.

v2.2.3(2026-05-28)

Changed

  • Allow extension block elements to break a paragraph.

Fixed

  • Fix a potential security issue in the URL escaping logic of the Markdown renderer.
  • Fix GFM table indentation in list.
  • Fix an infinite loop caused by unnormalized line breaks.
  • Replace literal U+0000 (NUL) with U+FFFD on input, per CommonMark §2.3.
Commits
  • 57e042b chore: update version to 2.2.3 in changelog and init.py
  • e5fa135 Make _RendererDispatcher fully generic (#265)
  • a11e0b4 chore: Update pdm.lock (#262)
  • 15b95ab Replace U+0000 with U+FFFD on input per CommonMark §2.3 (#263)
  • 2f892b5 Minor typing fixes (#264)
  • b0f822b fix: prevent infinite loop caused by unnormalized line breaks (#261)
  • 0aaac3f fix: CVE Vulnerability Report: Cross-Site Scripting (XSS) in marko. Fixes #257
  • a30b4c8 Fix GFM table indentation in list (#256)
  • ea5d5fd chore: Update pdm.lock (#258)
  • c0d37df feat: allow extension blocks to break a Paragraph (#260)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [marko](https://github.com/frostming/marko) from 2.2.2 to 2.2.3.
- [Release notes](https://github.com/frostming/marko/releases)
- [Changelog](https://github.com/frostming/marko/blob/master/CHANGELOG.md)
- [Commits](frostming/marko@v2.2.2...v2.2.3)

---
updated-dependencies:
- dependency-name: marko
  dependency-version: 2.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 4, 2026
@BenjaminPelletier BenjaminPelletier merged commit 0e323ad into main Jun 4, 2026
24 checks passed
@dependabot dependabot Bot deleted the dependabot/uv/test/repo_hygiene/marko-2.2.3 branch June 4, 2026 15:58
github-actions Bot added a commit that referenced this pull request Jun 4, 2026
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> 0e323ad
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant