dependabot[bot] opened a new pull request, #41191:
URL: https://github.com/apache/superset/pull/41191

   Bumps 
[markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx/tree/HEAD/lib) 
from 9.8.1 to 9.8.2.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/quantizor/markdown-to-jsx/releases";>markdown-to-jsx's 
releases</a>.</em></p>
   <blockquote>
   <h2>[email protected]</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>47408cd: Parsing is significantly faster, around 40% on large documents, 
with the biggest gains on link-heavy and code-heavy content. Also fixed an edge 
case where a reference definition split across blockquote lines could be 
matched by a link using the raw, unnormalized label.</li>
   <li>47408cd: Documents with many bold or italic spans now parse in a 
fraction of the time. Previously, parsing slowed down sharply as the number of 
emphasized spans grew, which could make very large or adversarial inputs 
hang.</li>
   <li>47408cd: The <code>&lt;Markdown&gt;</code> component no longer re-parses 
its content when a parent re-renders with unchanged props. Previously the 
rest-props object was reallocated on every render, which invalidated the 
internal compile cache and forced a full re-parse each time.</li>
   <li>47408cd: Text on its own line after a nested HTML element (such as 
content following <code>&lt;/summary&gt;</code> inside 
<code>&lt;details&gt;</code>) now renders instead of being dropped or misplaced 
when no blank line separates them. This now behaves consistently across the 
React, React Native, Solid, and Vue outputs.</li>
   </ul>
   </blockquote>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/quantizor/markdown-to-jsx/blob/main/lib/CHANGELOG.md";>markdown-to-jsx's
 changelog</a>.</em></p>
   <blockquote>
   <h2>9.8.2</h2>
   <h3>Patch Changes</h3>
   <ul>
   <li>47408cd: Parsing is significantly faster, around 40% on large documents, 
with the biggest gains on link-heavy and code-heavy content. Also fixed an edge 
case where a reference definition split across blockquote lines could be 
matched by a link using the raw, unnormalized label.</li>
   <li>47408cd: Documents with many bold or italic spans now parse in a 
fraction of the time. Previously, parsing slowed down sharply as the number of 
emphasized spans grew, which could make very large or adversarial inputs 
hang.</li>
   <li>47408cd: The <code>&lt;Markdown&gt;</code> component no longer re-parses 
its content when a parent re-renders with unchanged props. Previously the 
rest-props object was reallocated on every render, which invalidated the 
internal compile cache and forced a full re-parse each time.</li>
   <li>47408cd: Text on its own line after a nested HTML element (such as 
content following <code>&lt;/summary&gt;</code> inside 
<code>&lt;details&gt;</code>) now renders instead of being dropped or misplaced 
when no blank line separates them. This now behaves consistently across the 
React, React Native, Solid, and Vue outputs.</li>
   </ul>
   </blockquote>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/quantizor/markdown-to-jsx/commit/7925098b22d790fbe99df809fd78a03e34e24804";><code>7925098</code></a>
 Version Packages (<a 
href="https://github.com/quantizor/markdown-to-jsx/tree/HEAD/lib/issues/883";>#883</a>)</li>
   <li><a 
href="https://github.com/quantizor/markdown-to-jsx/commit/47408cdc2e5e3cd91fbce56e001b33ac5fdb99d2";><code>47408cd</code></a>
 perf: ~40% faster parsing, nested HTML trailing-content fix, dev dep 
security...</li>
   <li>See full diff in <a 
href="https://github.com/quantizor/markdown-to-jsx/commits/[email protected]/lib";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown-to-jsx&package-manager=npm_and_yarn&previous-version=9.8.1&new-version=9.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to