Skip to content

Update dependency Markdown to v3.11.3 - #370

Open
renovate[bot] wants to merge 1 commit into
developfrom
renovate/markdown-3.x-lockfile
Open

renovate[bot] wants to merge 1 commit into
developfrom
renovate/markdown-3.x-lockfile

Conversation

@renovate

@renovate renovate Bot commented Nov 5, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
Markdown (changelog) 3.10 → 3.11.3 age confidence

Release Notes

Python-Markdown/markdown (Markdown)

v3.11.3

Compare Source

Fixed
  • Fix cases in new emphasis handling that did not handle long chains of tokens
    like they should (#​1690).
  • Fix quadratic-time parsing of many consecutive reference definitions, and of
    many consecutive footnote definitions in the footnotes extension.
  • Support automatic links with URL schemes other than HTTP and FTP, such as
    <ssh://example.org> (#​1244).
  • Fix quadratic-time id generation in the toc extension when many headers
    share the same text.
  • Ignore glossary abbreviations with empty definitions after inline elements,
    consistently with abbreviations before inline elements.
  • Strip complete HTML tags with quoted > characters from toc labels and
    generated heading IDs.
  • Fix quadratic-time regex backtracking in attr_list when a block ends with an
    unclosed attribute list followed by a long run of spaces, e.g. a line
    consisting only of { and some text with many trailing spaces (#​1656).
  • Fix quadratic-time regex backtracking in hash headers when a long run of #
    characters is followed by more text on the same line.
  • Fix quadratic time when a document contains many unclosed HTML comments (<!--
    with no matching -->).
  • Fix regression in BacktickInlineProcessor where text could be lost when opening
    and closing backticks did not match (#​1668).
  • Escape the language name in the codehilite extension's non-Pygments output to
    maintain consistency with Pygments output.
  • Preserve attributes without a value in the attr_list extension exactly as
    provided, rather than rendering them as key="key", so the same source
    renders consistently under both the html and xhtml output formats
    (#​1501).

v3.11.2

Compare Source

Fixed
  • Sanitize attribute names in the fenced_code and legacy_attrs extensions so an
    attribute name cannot break out of its tag and inject markup (#​1663).
  • For backwards compatibility, revert the enforcement of CommonMark style
    punctuation rules (#​1657).

v3.11.1

Compare Source

Fixed
  • Update serializer to be non-recursive (#​1644).
  • Improve ancestor handling in the inline Treeprocessor (#​1646).
  • Keep a raw HTML comment inside an inline HTML element that closes in the
    same paragraph, instead of splitting the paragraph around it (#​1643).
  • Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#​1647).
  • Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#​1651).
  • Complete rework of emphasis handling to improve nested emphasis handling better (#​1632).

v3.11

Compare Source

v3.10.3

Compare Source

Fixed
  • Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#​1606).
  • Add AI Policy to Contributing Guide.
  • Officially document all included extensions as being in maintenance mode.
  • Link the Extension API documentation to the API Reference (#​1612).

v3.10.2

Compare Source

Fixed
  • Fix a regression related to comment handling (#​1590).
  • More reliable fix for </ (#​1593).

v3.10.1

Compare Source

Fixed
  • Ensure nested elements inside inline comments are properly unescaped (#​1571).
  • Make the docs build successfully with mkdocstrings-python 2.0 (#​1575).
  • Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#​1578).
  • Fix another infinite loop when handling bad comments (#​1586).

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 5, 2026
@renovate
renovate Bot requested a review from jdrew82 as a code owner November 5, 2026 23:36

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants