Skip to content

build(deps): bump linkify-it and @quasar/quasar-app-extension-qmarkdown in /opal-ui - #4172

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/opal-ui/multi-7edb180bea
Open

build(deps): bump linkify-it and @quasar/quasar-app-extension-qmarkdown in /opal-ui#4172
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/opal-ui/multi-7edb180bea

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps linkify-it to 5.0.2 and updates ancestor dependency @quasar/quasar-app-extension-qmarkdown. These dependencies need to be updated together.

Updates linkify-it from 3.0.3 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

  • Fixed DoS in mailto: links (restrict user name to 64 chars).
  • Restricted user/pass part length in links.

5.0.1 / 2026-05-23

  • Fixed DoS in fuzzy links/emails search.
  • Reworked search logic - check each pattern separate, use g regexes instead of slice.
  • Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

  • Rewrite to ESM.

4.0.1 / 2022-05-02

  • Fix http:// incorrectly returned as a link by matchStart.

4.0.0 / 2022-04-22

  • Add matchAtStart method to match full URLs at the start of the string.
  • Fixed paired symbols ((), {}, "", etc.) after punctuation.
  • --- option now affects parsing of emails (e.g. user@example.com---)
Commits

Updates @quasar/quasar-app-extension-qmarkdown from 2.0.5 to 3.0.1

Release notes

Sourced from @​quasar/quasar-app-extension-qmarkdown's releases.

QMarkdown v3.0.1

Release date: 2026-07-14

Summary

This point release fixes QMarkdown App Extension startup under strict pnpm dependency isolation, including Quasar SSR projects, and refreshes the documentation toolchain.

What’s Changed

Fixes:

  • ffe610a5 Fix #412 by loading QMarkdown styles from the App Extension boot module. The import now resolves from the App Extension dependency context instead of the generated application client entry, where strict pnpm installations cannot see transitive packages.
  • Remove the host-level quasar.config CSS injection that caused @quasar/quasar-ui-qmarkdown/src/index.scss resolution failures in newly generated SSR applications.

Maintenance:

  • Update the documentation stack to MD-Plugins and Q-Press 1.1.0.
  • 15760e01 Refresh Quasar and repository tooling dependencies.

Breaking Changes

  • None.

Compatibility

  • Node.js: >=22.13
  • pnpm: >=11.5.0
  • Quasar: ^2.21.3
  • Quasar App Vite: >=3.0.0
  • Vue: ^3.5.39
  • npm dist-tag: latest

Installation

Install the UI package directly:

pnpm add @quasar/quasar-ui-qmarkdown

Or install the Quasar App Extension:

quasar ext add @quasar/qmarkdown

Documentation

... (truncated)

Commits
  • ffe610a fix(app-extension): resolve UI styles with strict pnpm
  • 15760e0 chore(deps): update Quasar tooling
  • 58d9478 merge: fold qmarkdown v3 beta into dev
  • fe43da7 docs: finalize qmarkdown v3 stable guidance
  • 648744c chore(release): prepare qmarkdown v3.0.0 packages
  • 7a877af fix(build): generate valid version module
  • 4f5e2fe chore: align qmarkdown app-vite metadata
  • a3d0f72 chore: refresh qpress generated shell
  • 5d4c380 chore(deps): update md-plugins to 1.0.0
  • f662d9f chore: update READMEs for sponsorship and clarity
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/opal-ui/multi-7edb180bea branch 3 times, most recently from a9d2086 to 4219c2e Compare July 25, 2026 14:25
Bumps [linkify-it](https://github.com/markdown-it/linkify-it) to 5.0.2 and updates ancestor dependency [@quasar/quasar-app-extension-qmarkdown](https://github.com/quasarframework/quasar-ui-qmarkdown). These dependencies need to be updated together.


Updates `linkify-it` from 3.0.3 to 5.0.2
- [Changelog](https://github.com/markdown-it/linkify-it/blob/master/CHANGELOG.md)
- [Commits](markdown-it/linkify-it@3.0.3...5.0.2)

Updates `@quasar/quasar-app-extension-qmarkdown` from 2.0.5 to 3.0.1
- [Release notes](https://github.com/quasarframework/quasar-ui-qmarkdown/releases)
- [Commits](quasarframework/quasar-ui-qmarkdown@v2.0.5...v3.0.1)

---
updated-dependencies:
- dependency-name: "@quasar/quasar-app-extension-qmarkdown"
  dependency-version: 3.0.1
  dependency-type: direct:development
- dependency-name: linkify-it
  dependency-version: 5.0.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/opal-ui/multi-7edb180bea branch from 4219c2e to 1ad9a2e Compare July 26, 2026 08:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants