Skip to content

build(deps): bump markdown-it and @11ty/eleventy - #122

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5d5e21275f
Open

build(deps): bump markdown-it and @11ty/eleventy#122
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-5d5e21275f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps markdown-it to 14.3.3 and updates ancestor dependency @11ty/eleventy. These dependencies need to be updated together.

Updates markdown-it from 13.0.1 to 14.3.3

Changelog

Sourced from markdown-it's changelog.

[14.3.3] - 2026-10-16

Security

  • Backported 15.0.3 fixes.

[14.3.2] - 2026-09-12

Security

  • Backported 15.0.2 fixes.

[14.3.1] - 2026-08-27

Security

  • Backported 15.0.1 fixes.

[14.3.0] - 2026-07-02

Changed

  • Reworked build pipeline & tools.
  • Added source maps.
  • Bumped linkify-it to 5.0.2.

Fixed

  • Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.

[14.2.0] - 2026-05-24

Added

  • isPunctCharCode to utilities.

Fixed

  • Don't end HTML comment blocks on a blank line, #1155.
  • Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
  • Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
  • More strict entities decode to avoid false positives ;, #1096.
  • Restore block parser state on fail in lheading rule, #1131.

Security

  • Fixed poor smartquotes perfomance on > 70k quotes in single block
  • Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

[14.1.1] - 2026-01-11

Security

  • Fixed regression from v13 in linkify inline rule. Specific patterns could

... (truncated)

Commits
  • d372f0d 14.3.3 released
  • d99f488 Backported 15.0.3 fixes
  • efb9993 14.3.2 released
  • daf5a3c Backported 15.0.2 fixes
  • a855f10 14.3.1 released
  • ad70f6b Backported 15.0.1 fixes
  • b407f3b Ignore generated API docs in lint
  • bf025ad Prepare package.json for v14 backports
  • 2d9bbea fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (#1189)
  • a311cfb fix: keep literal backslash before space in link destination (CommonMark 6.3)...
  • Additional commits viewable in compare view

Updates @11ty/eleventy from 2.0.0 to 3.1.7

Release notes

Sourced from @​11ty/eleventy's releases.

Eleventy v3.1.7: Maintenance Release

  • Upgrades liquidjs dependency from 10.27 to 10.30.
  • Fixes braces npm audit 11ty/buildawesome#4397 also fixed in Dev Server v2.1.2 11ty/dev-server#160
    • This involves some internal chokidar fixes (used by --serve or --watch). If you see EMFILE errors on very large projects please file issues!
  • Internals: aliases dependencies for nunjucks to @11ty/nunjucks@3.3.0 (see 11ty/nunjucks#27) and gray-matter to @11ty/gray-matter@1.0.0. Application code that uses nunjucks or gray-matter will continue to work as expected.
v3.1.6 v3.1.7 Change % Change
Third-party dependencies 121 100 −21 −17.4%
Total installed dependencies 132 113 −19 −14.4%
Install size on disk 22.3 MB 20.5 MB −1.8 MB −8.1%

Milestone: https://github.com/11ty/buildawesome/milestone/53?closed=1 Full Changelog: 11ty/buildawesome@v3.1.6...v3.1.7

Eleventy v3.1.6: Everybody wants to do Maintenance

  • Fixes Node 26 module.register deprecation warning shown in console #4283 (fixed in v4 alphas in #4271)
  • Minor dependency upgrades for npm audit fixes
    • liquidjs upgrade from 1.25.0 to 1.27.0
    • markdown-it upgrade from 14.1.1 to 14.2.0
  • Adds Node 26 to CI for v3 branch
  • Opt out of package manager cache for GitHub Actions CI release workflow (hardening security)

Milestone: https://github.com/11ty/eleventy/milestone/52?closed=1 Full Changelog: 11ty/buildawesome@v3.1.5...v3.1.6

Eleventy v3.1.5: Dependable Dependencies

  • No Eleventy core code changes, this release is for minor version dependency updates on 3.x only
  • Small improvements to HTML Relative Passthrough Copy tests

Full Changelog: 11ty/buildawesome@v3.1.2...v3.1.5

Eleventy v3.1.4

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Eleventy v3.1.3

⚠️ This immutable release failed to publish. Please use the identical Eleventy v3.1.5 instead!

Eleventy v3.1.2 (we fixed 15 more things)

Try it out in your project

npm install @11ty/eleventy@latest

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​11ty/eleventy since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
build(deps): bump markdown-it and @11ty/eleventy
afe2ba1 
Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 14.3.3 and updates ancestor dependency [@11ty/eleventy](https://github.com/11ty/buildawesome). These dependencies need to be updated together.


Updates `markdown-it` from 13.0.1 to 14.3.3
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@13.0.1...14.3.3)

Updates `@11ty/eleventy` from 2.0.0 to 3.1.7
- [Release notes](https://github.com/11ty/buildawesome/releases)
- [Changelog](https://github.com/11ty/buildawesome/blob/main/docs/release-instructions.md)
- [Commits](11ty/buildawesome@v2.0.0...v3.1.7)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.3.3
  dependency-type: indirect
- dependency-name: "@11ty/eleventy"
  dependency-version: 3.1.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@dependabot dependabot Bot mentioned this pull request Oct 22, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants