Update dependency markdown-it to v12.3.2 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
markdown-it	12.0.6 -> 12.3.2

GitHub Vulnerability Alerts

CVE-2022-21670

Impact

Special patterns with length > 50K chars can slow down parser significantly.

const md = require('markdown-it')();

md.render(`x ${' '.repeat(150000)} x  \nx`);

Patches

Upgrade to v12.3.2+

Workarounds

No.

References

Fix + test sample: markdown-it/markdown-it@ffc49ab

---

Release Notes

markdown-it/markdown-it

v12.3.2

Compare Source

Security

• Fix possible ReDOS in newline rule. Thanks to @​MakeNowJust.

v12.3.1

Compare Source

Fixed

• Fix corner case when tab prevents paragraph continuation in lists, #​830.

v12.3.0

Compare Source

Changed

• StateInline.delimiters[].jump is removed.

Fixed

• Fixed quadratic complexity in pathological ***<10k stars>***a***<10k stars>*** case.

v12.2.0

Compare Source

Added

• Ordered lists: add order value to token info.

Fixed

• Always suffix indented code block with a newline, #​799.

v12.1.0

Compare Source

Changed

• Updated CM spec compatibility to 0.30.

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by Mend Renovate. View repository job log here.