dependabot[bot] opened a new pull request, #41191: URL: https://github.com/apache/superset/pull/41191
Bumps [markdown-to-jsx](https://github.com/quantizor/markdown-to-jsx/tree/HEAD/lib) from 9.8.1 to 9.8.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/quantizor/markdown-to-jsx/releases">markdown-to-jsx's releases</a>.</em></p> <blockquote> <h2>[email protected]</h2> <h3>Patch Changes</h3> <ul> <li>47408cd: Parsing is significantly faster, around 40% on large documents, with the biggest gains on link-heavy and code-heavy content. Also fixed an edge case where a reference definition split across blockquote lines could be matched by a link using the raw, unnormalized label.</li> <li>47408cd: Documents with many bold or italic spans now parse in a fraction of the time. Previously, parsing slowed down sharply as the number of emphasized spans grew, which could make very large or adversarial inputs hang.</li> <li>47408cd: The <code><Markdown></code> component no longer re-parses its content when a parent re-renders with unchanged props. Previously the rest-props object was reallocated on every render, which invalidated the internal compile cache and forced a full re-parse each time.</li> <li>47408cd: Text on its own line after a nested HTML element (such as content following <code></summary></code> inside <code><details></code>) now renders instead of being dropped or misplaced when no blank line separates them. This now behaves consistently across the React, React Native, Solid, and Vue outputs.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/quantizor/markdown-to-jsx/blob/main/lib/CHANGELOG.md">markdown-to-jsx's changelog</a>.</em></p> <blockquote> <h2>9.8.2</h2> <h3>Patch Changes</h3> <ul> <li>47408cd: Parsing is significantly faster, around 40% on large documents, with the biggest gains on link-heavy and code-heavy content. Also fixed an edge case where a reference definition split across blockquote lines could be matched by a link using the raw, unnormalized label.</li> <li>47408cd: Documents with many bold or italic spans now parse in a fraction of the time. Previously, parsing slowed down sharply as the number of emphasized spans grew, which could make very large or adversarial inputs hang.</li> <li>47408cd: The <code><Markdown></code> component no longer re-parses its content when a parent re-renders with unchanged props. Previously the rest-props object was reallocated on every render, which invalidated the internal compile cache and forced a full re-parse each time.</li> <li>47408cd: Text on its own line after a nested HTML element (such as content following <code></summary></code> inside <code><details></code>) now renders instead of being dropped or misplaced when no blank line separates them. This now behaves consistently across the React, React Native, Solid, and Vue outputs.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/quantizor/markdown-to-jsx/commit/7925098b22d790fbe99df809fd78a03e34e24804"><code>7925098</code></a> Version Packages (<a href="https://github.com/quantizor/markdown-to-jsx/tree/HEAD/lib/issues/883">#883</a>)</li> <li><a href="https://github.com/quantizor/markdown-to-jsx/commit/47408cdc2e5e3cd91fbce56e001b33ac5fdb99d2"><code>47408cd</code></a> perf: ~40% faster parsing, nested HTML trailing-content fix, dev dep security...</li> <li>See full diff in <a href="https://github.com/quantizor/markdown-to-jsx/commits/[email protected]/lib">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
