[dependabot]

Bumps markdown-it from 15.0.1 to 15.0.3.

Changelog

Sourced from markdown-it's changelog.

[15.0.3] - 2026-10-16

Changed

• Updated dependencies.

Fixed

• Enforce the 999 Unicode code point limit for reference definition labels, partially addressing #1213.
• Require whitespace before multiline reference titles.

Security

• Fixed quadratic complexity when parsing multiline reference definitions.
• Fixed quadratic complexity when parsing unclosed inline HTML comments, processing instructions, declarations and CDATA sections.

[15.0.2] - 2026-09-11

Security

• Fixed quadratic complexity in smartquotes when quote types don't match, #1209. Also limited the smartquotes stack to 1000 unmatched openers.

Commits

• a8c00d4 15.0.3 released
• e9504a4 Skip pathological speed tests during coverage collection
• 46d8b52 Deps bump
• 928bc8c Fix quadratic inline HTML parsing
• 48fbc46 Fix quadratic reference parsing and partially address #1213
• 3c51991 15.0.2 released
• cf27366 Polish #1209 and limit smartquotes stack to 1000 openers
• 1b379c1 Fix quadratic complexity in smartquotes rule when quote types don't match (#1...
• See full diff in compare view

[rugpanov]

🤖 Integration tests ❌ failed for 1d155c8b.
View run

[rugpanov]

🤖 Integration tests ❌ failed for cdc9274b.
View run

[github-actions]

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/vscode

Inputs:

• PR number: 2268
• Commit SHA: e593c38412669ab9e9c6acaa05812e7cc164b44e

Checks will be approved automatically on success.