Update dependency markdown-it to v14

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
markdown-it	^12.0.3 → ^14.0.0

---

Release Notes

markdown-it/markdown-it (markdown-it)

v14.1.1

Compare Source

Security

• Fixed regression from v13 in linkify inline rule. Specific patterns could
  cause high CPU use. Thanks to @​ltduc147 for report.

v14.1.0

Compare Source

Changed

• Updated CM spec compatibility to 0.31.2, #​1009.

Fixed

• Fixed quadratic complexity when parsing references, #​996.
• Fixed quadratic output size with pathological user input in tables, #​1000.

v14.0.0

Compare Source

Changed

• Drop ancient browsers support (use .fromCodePoint and other features).
• Rewrite to ESM (including all plugins/deps). CJS fallback still available.
  No signatures changed, except markdown-it-emoji plugin.
• Dropped dist/ folder from repo, build on package publish.
• Set punicode.js as external dependency.

Fixed

• Html tokens inside img alt are now rendered as their original text, #​896.
• Hardbreaks inside img alt are now rendered as newlines.

v13.0.2

Compare Source

Security

• Fixed crash/infinite loop caused by linkify inline rule, #​957.

Fixed

• Throw an error if 3rd party plugin doesn't increment line or pos counters
  (previously, markdown-it would likely go into infinite loop instead), #​847.

v13.0.1

Compare Source

Fixed

• Bumped linkify-it to 4.0.1. That should fix some hangs, caused by wrong
  data, returned from linkify-it.

v13.0.0

Compare Source

Added

• Added a new token type text_special to store escaped characters, same as text but
  unaffected by replacement plugins (smartquotes, typographer, linkifier, etc.).
• Added a new rule text_join in core ruler. Text replacement plugins may choose to
  insert themselves before it.

Changed

• (p) is no longer replaced with § by typographer (conflicts with ℗), #​763.
• text_collapse rule is renamed to fragments_join.

Fixed

• Smartquotes, typographic replacements and plain text links can now be escaped
  with backslash (e.g. \(c) or google\.com are no longer replaced).
• Fixed collision of emphasis and linkifier (so http://example.org/foo._bar_-_baz
  is now a single link, not emphasized). Emails and fuzzy links are not affected by this.

v12.3.2

Compare Source

Security

• Fix possible ReDOS in newline rule. Thanks to @​MakeNowJust.

v12.3.1

Compare Source

Fixed

• Fix corner case when tab prevents paragraph continuation in lists, #​830.

v12.3.0

Compare Source

Changed

• StateInline.delimiters[].jump is removed.

Fixed

• Fixed quadratic complexity in pathological ***<10k stars>***a***<10k stars>*** case.

v12.2.0

Compare Source

Added

• Ordered lists: add order value to token info.

Fixed

• Always suffix indented code block with a newline, #​799.

v12.1.0

Compare Source

Changed

• Updated CM spec compatibility to 0.30.

v12.0.6

Compare Source

Fixed

• Newline in alt should be rendered, #​775.

v12.0.5

Compare Source

Fixed

• HTML block tags with === inside are no longer incorrectly interpreted as headers, #​772.
• Fix table/list parsing ambiguity, #​767.

v12.0.4

Compare Source

Fixed

• Fix crash introduced in 12.0.3 when processing strikethrough (~~) and similar plugins, #​742.
• Avoid fenced token mutation, #​745.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.