Skip to content

Bump linkify-it and jsdoc - #22

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-c893513b36
Closed

Bump linkify-it and jsdoc#22
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-c893513b36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps linkify-it to 5.0.2 and updates ancestor dependency jsdoc. These dependencies need to be updated together.

Updates linkify-it from 2.2.0 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

  • Fixed DoS in mailto: links (restrict user name to 64 chars).
  • Restricted user/pass part length in links.

5.0.1 / 2026-05-23

  • Fixed DoS in fuzzy links/emails search.
  • Reworked search logic - check each pattern separate, use g regexes instead of slice.
  • Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

  • Rewrite to ESM.

4.0.1 / 2022-05-02

  • Fix http:// incorrectly returned as a link by matchStart.

4.0.0 / 2022-04-22

  • Add matchAtStart method to match full URLs at the start of the string.
  • Fixed paired symbols ((), {}, "", etc.) after punctuation.
  • --- option now affects parsing of emails (e.g. user@example.com---)

3.0.3 / 2021-10-01

  • Fixed #98. Don't count ; at the end of link (when followed with space).

3.0.2 / 2020-05-20

  • Proper fix for #54. Allow multiple ! in links (but not at the end).

3.0.1 / 2020-05-19

... (truncated)

Commits

Updates jsdoc from 3.6.6 to 4.0.5

Release notes

Sourced from jsdoc's releases.

JSDoc 4.0.4

Fixes a compatibility issue with Node.js 23.

Changelog

Sourced from jsdoc's changelog.

4.0.5 (October 2025)

Fixes a performance issue when generating documentation for medium-to-large APIs.

4.0.4 (October 2024)

Fixes a compatibility issue with Node.js 23.

4.0.3 (May 2024)

Updates dependencies.

4.0.2 (February 2023)

Updates the Babel parser, and enables additional Babel plugins for ECMAScript proposals.

4.0.1 (February 2023)

If an inline link tag uses a pipe delimiter, and there are spaces around the pipe delimiter, then the HTML link no longer contains %20 at the end; also, the link text no longer contains extra spaces. For example, {@link https://example.com | link text} is now rendered as <a href="https://example.com/">link text</a> rather than <a href="https://example.com/%20"> link text</a>.

4.0.0 (November 2022)

3.6.11 (July 2022)

Updates dependency versions to make JSDoc compatible with Node.js 12.0.0 and later.

3.6.10 (January 2022)

Fixes an issue in JSDoc 3.6.9 that prevented JSDoc from being installed in some continuous integration (CI) environments.

... (truncated)

Commits
  • 61b2235 4.0.5
  • cbea149 fix: speed up templateHelper's getAncestor() by 500x
  • 11a99cf chore: 4.0.4
  • 59a5658 fix: don't use built-in util module for type-checking
  • a5232aa chore(deps): update lockfile
  • 49b6fc2 4.0.3
  • 39061bb fix(deps): update @types/markdown-it and related packages
  • 1a31e64 chore(deps): update deps
  • 0b6193f 4.0.2
  • 9d88548 deps: update Babel; enable current Babel plugins in parser
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 26, 2026
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) to 5.0.2 and updates ancestor dependency [jsdoc](https://github.com/jsdoc/jsdoc). These dependencies need to be updated together.


Updates `linkify-it` from 2.2.0 to 5.0.2
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@2.2.0...5.0.2)

Updates `jsdoc` from 3.6.6 to 4.0.5
- [Release notes](https://github.com/jsdoc/jsdoc/releases)
- [Changelog](https://github.com/jsdoc/jsdoc/blob/4.0.5/CHANGES.md)
- [Commits](jsdoc/jsdoc@3.6.6...4.0.5)

---
updated-dependencies:
- dependency-name: jsdoc
  dependency-version: 4.0.5
  dependency-type: direct:development
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-c893513b36 branch from 7ab0b0e to 037722d Compare August 26, 2026 10:24
@dependabot @github

dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 26, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-c893513b36 branch August 26, 2026 19:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants