dependabot[bot] opened a new pull request, #30: URL: https://github.com/apache/openserverless-admin-api/pull/30
Bumps [mistune](https://github.com/lepture/mistune) from 3.1.4 to 3.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lepture/mistune/releases";>mistune's releases</a>.</em></p> <blockquote> <h2>v3.3.0</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Resolve O(n^2) DoS in parse_link_text (CWE-400) - by <strong>bhanugoudm041</strong> <a href="https://github.com/lepture/mistune/commit/b6b499d";><!-- raw HTML omitted -->(b6b49)<!-- raw HTML omitted --></a></li> <li>Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type handling/testing done - by <strong>bhanugoudm041</strong> <a href="https://github.com/lepture/mistune/commit/b3af85d";><!-- raw HTML omitted -->(b3af8)<!-- raw HTML omitted --></a></li> <li><strong>block</strong>: Avoid quadratic ref link scans - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/2b04d7b";><!-- raw HTML omitted -->(2b04d)<!-- raw HTML omitted --></a></li> <li><strong>cli</strong>: Add entrypoint and utf-8 output - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/2f2449d";><!-- raw HTML omitted -->(2f244)<!-- raw HTML omitted --></a></li> <li><strong>directives</strong>: Constrain include targets - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/1bef343";><!-- raw HTML omitted -->(1bef3)<!-- raw HTML omitted --></a></li> <li><strong>formatting</strong>: Avoid quadratic marker scans - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/96d0f57";><!-- raw HTML omitted -->(96d0f)<!-- raw HTML omitted --></a></li> <li><strong>image</strong>: Validate figure width option - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/e3e51de";><!-- raw HTML omitted -->(e3e51)<!-- raw HTML omitted --></a></li> <li><strong>inline</strong>: Avoid bracket parsing DoS - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/25f2503";><!-- raw HTML omitted -->(25f25)<!-- raw HTML omitted --></a></li> <li><strong>math</strong>: Reject currency patterns and cross-line matches in inline math - by <a href="https://github.com/geopanther";><code>@geopanther</code></a> <a href="https://github.com/lepture/mistune/commit/566e173";><!-- raw HTML omitted -->(566e1)<!-- raw HTML omitted --></a></li> <li><strong>math</strong>: Support display and backtick math - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/1141eec";><!-- raw HTML omitted -->(1141e)<!-- raw HTML omitted --></a></li> <li><strong>renderer</strong>: Render plugin list and table nodes - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/614b019";><!-- raw HTML omitted -->(614b0)<!-- raw HTML omitted --></a></li> <li><strong>renderer</strong>: Block encoded unsafe URL schemes - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/c7101fc";><!-- raw HTML omitted -->(c7101)<!-- raw HTML omitted --></a></li> <li><strong>toc</strong>: Avoid generated id collisions - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/c4093c4";><!-- raw HTML omitted -->(c4093)<!-- raw HTML omitted --></a></li> </ul> <h3> 🏎 Performance</h3> <ul> <li>Improve performance - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/bf95c32";><!-- raw HTML omitted -->(bf95c)<!-- raw HTML omitted --></a></li> </ul> <h5> <a href="https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0";>View changes on GitHub</a></h5> <h2>v3.2.1</h2> <h3> 🐞 Bug Fixes</h3> <ul> <li>Resolve Windows compatibility issues in file inclusion and tests - by <a href="https://github.com/Yuki9814";><code>@Yuki9814</code></a> <a href="https://github.com/lepture/mistune/commit/2547102";><!-- raw HTML omitted -->(25471)<!-- raw HTML omitted --></a></li> <li>Escape html text - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/a3cb6e5";><!-- raw HTML omitted -->(a3cb6)<!-- raw HTML omitted --></a></li> <li>Update link reference - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/85eb54f";><!-- raw HTML omitted -->(85eb5)<!-- raw HTML omitted --></a></li> <li>Handle escaped dollar signs in inline math - by <a href="https://github.com/saschabuehrle";><code>@saschabuehrle</code></a> in <a href="https://redirect.github.com/lepture/mistune/issues/370";>lepture/mistune#370</a> <a href="https://github.com/lepture/mistune/commit/7bd5709";><!-- raw HTML omitted -->(7bd57)<!-- raw HTML omitted --></a></li> <li>Escape id of toc - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/04880a0";><!-- raw HTML omitted -->(04880)<!-- raw HTML omitted --></a></li> <li>Escape id of headings - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/2855622";><!-- raw HTML omitted -->(28556)<!-- raw HTML omitted --></a></li> <li>Remove double-encoding of image alt text - by <a href="https://github.com/lawrence3699";><code>@lawrence3699</code></a> <a href="https://github.com/lepture/mistune/commit/0d6f3d8";><!-- raw HTML omitted -->(0d6f3)<!-- raw HTML omitted --></a></li> <li>Escape xml for math plugin - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/5fa092e";><!-- raw HTML omitted -->(5fa09)<!-- raw HTML omitted --></a></li> <li>Use strict regex for image's height and width - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/8d0cb75";><!-- raw HTML omitted -->(8d0cb)<!-- raw HTML omitted --></a></li> </ul> <h5> <a href="https://github.com/lepture/mistune/compare/v3.2.0...v3.2.1";>View changes on GitHub</a></h5> <h2>v3.2.0</h2> <h3> 🚀 Features</h3> <ul> <li>Support footnotes that start on the next line. - by <a href="https://github.com/kylechui";><code>@kylechui</code></a> <a href="https://github.com/lepture/mistune/commit/2677e2d";><!-- raw HTML omitted -->(2677e)<!-- raw HTML omitted --></a></li> <li>Properly handle code blocks inside footnotes. - by <a href="https://github.com/kylechui";><code>@kylechui</code></a> <a href="https://github.com/lepture/mistune/commit/0516c9e";><!-- raw HTML omitted -->(0516c)<!-- raw HTML omitted --></a></li> <li>Support python 3.14 - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/7e0eb65";><!-- raw HTML omitted -->(7e0eb)<!-- raw HTML omitted --></a></li> </ul> <h3> 🐞 Bug Fixes</h3> <ul> <li>Render ref links and footnotes in footnotes. - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/bd90e44";><!-- raw HTML omitted -->(bd90e)<!-- raw HTML omitted --></a></li> <li>Render ref links in TOC. - by <a href="https://github.com/lemon24";><code>@lemon24</code></a> <a href="https://github.com/lepture/mistune/commit/a0a0148";><!-- raw HTML omitted -->(a0a01)<!-- raw HTML omitted --></a></li> <li>Update typing for mypy upgrades - by <a href="https://github.com/lepture";><code>@lepture</code></a> <a href="https://github.com/lepture/mistune/commit/8d49cba";><!-- raw HTML omitted -->(8d49c)<!-- raw HTML omitted --></a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/lepture/mistune/blob/main/docs/changes.rst";>mistune's changelog</a>.</em></p> <blockquote> <h2>Version 3.3.0</h2> <p><strong>Released on Jun 21, 2026</strong></p> <ul> <li>Improve CommonMark compatibility and parser performance.</li> <li>Add command line entrypoint with UTF-8 output.</li> <li>Support display and backtick math.</li> <li>Render plugin list and table nodes in Markdown renderer.</li> <li>Escape leading block markers in Markdown renderer.</li> <li>Fix RST renderer for block quotes nested in lists.</li> <li>Avoid generated heading ID collisions in TOC.</li> <li>Harden URL, image, figure, and include directive handling.</li> <li>Fix quadratic scans in inline links, reference links, and formatting markers.</li> <li>Fix math escaping, currency pattern matching, and cross-line matching.</li> </ul> <h2>Version 3.2.1</h2> <p><strong>Released on May 3, 2026</strong></p> <ul> <li>Escape link in <code>render_toc_ul</code>.</li> <li>Escape text in math plugin.</li> <li>Fix regex for math plugin.</li> <li>Escape heading's ID attribute.</li> <li>Fix <code>LINK_TITLE_RE</code> to prevent DoS.</li> <li>Escape class attribute for admonition directive.</li> <li>Remove double-encoding of image alt text.</li> <li>Escape class attribute for image directive.</li> <li>Fix width/height attribute for image directive.</li> </ul> <h2>Version 3.2.0</h2> <p><strong>Released on Dec 23, 2025</strong></p> <ul> <li>Announce supports for python 3.14</li> <li>Fix footnotes plugins for code blocks, ref links, blockquote and etc.</li> <li>Fix ref links in TOC.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lepture/mistune/commit/15c3b79325125272263d7d42492ec8f757447191";><code>15c3b79</code></a> chore: release 3.3.0</li> <li><a href="https://github.com/lepture/mistune/commit/bdc01ade171c7c2cd1099e2531ddf8c275a2f64c";><code>bdc01ad</code></a> tests: increase run time on pypy</li> <li><a href="https://github.com/lepture/mistune/commit/7cf181483e6201184bcecdbae13225d45ebab4c4";><code>7cf1814</code></a> tests: increase run time for pypy</li> <li><a href="https://github.com/lepture/mistune/commit/6dfdc3dae490c7a21499ff1063f4dd9b7357d4c5";><code>6dfdc3d</code></a> tests: add more tests</li> <li><a href="https://github.com/lepture/mistune/commit/17c50f6c0572027c1dad2c2501e7c97cea0b0b43";><code>17c50f6</code></a> chore: fix mypy issues</li> <li><a href="https://github.com/lepture/mistune/commit/63abe4b8e9adccc711c953e6727400ee7ba1084c";><code>63abe4b</code></a> chore: use ruff check and format</li> <li><a href="https://github.com/lepture/mistune/commit/e6c1b184461beab8887c7375621c64dffaf652c5";><code>e6c1b18</code></a> chore: resolve mypy issues</li> <li><a href="https://github.com/lepture/mistune/commit/dcf89020c1ee697b2267387064b3e4580e0b83c5";><code>dcf8902</code></a> test(math): cover escaped math output</li> <li><a href="https://github.com/lepture/mistune/commit/c4093c4742ed0d10d9332fb8edb455869b7b581b";><code>c4093c4</code></a> fix(toc): avoid generated id collisions</li> <li><a href="https://github.com/lepture/mistune/commit/e3e51de9cf0a72dc30191248dccf22087c57f046";><code>e3e51de</code></a> fix(image): validate figure width option</li> <li>Additional commits viewable in <a href="https://github.com/lepture/mistune/compare/v3.1.4...v3.3.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/openserverless-admin-api/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
