[dependabot]

Bumps markdown-it to 14.3.3 and updates ancestor dependencies markdown-it and markdownlint-cli2. These dependencies need to be updated together.

Updates markdown-it from 14.3.0 to 14.3.3

Changelog

Sourced from markdown-it's changelog.

[14.3.3] - 2026-10-16

Security

• Backported 15.0.3 fixes.

[14.3.2] - 2026-09-12

Security

• Backported 15.0.2 fixes.

[14.3.1] - 2026-08-27

Security

• Backported 15.0.1 fixes.

Commits

• d372f0d 14.3.3 released
• d99f488 Backported 15.0.3 fixes
• efb9993 14.3.2 released
• daf5a3c Backported 15.0.2 fixes
• a855f10 14.3.1 released
• ad70f6b Backported 15.0.1 fixes
• b407f3b Ignore generated API docs in lint
• bf025ad Prepare package.json for v14 backports
• 2d9bbea fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (#1189)
• a311cfb fix: keep literal backslash before space in link destination (CommonMark 6.3)...
• See full diff in compare view

Updates markdown-it from 15.0.2 to 15.0.3

Changelog

Sourced from markdown-it's changelog.

[14.3.3] - 2026-10-16

Security

• Backported 15.0.3 fixes.

[14.3.2] - 2026-09-12

Security

• Backported 15.0.2 fixes.

[14.3.1] - 2026-08-27

Security

• Backported 15.0.1 fixes.

Commits

• d372f0d 14.3.3 released
• d99f488 Backported 15.0.3 fixes
• efb9993 14.3.2 released
• daf5a3c Backported 15.0.2 fixes
• a855f10 14.3.1 released
• ad70f6b Backported 15.0.1 fixes
• b407f3b Ignore generated API docs in lint
• bf025ad Prepare package.json for v14 backports
• 2d9bbea fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (#1189)
• a311cfb fix: keep literal backslash before space in link destination (CommonMark 6.3)...
• See full diff in compare view

Updates markdownlint-cli2 from 0.23.3 to 0.24.0

Changelog

Sourced from markdownlint-cli2's changelog.

0.24.0

• Update dependencies (including markdownlint)

Commits

• 341e2a3 Update to version 0.24.0.
• 3e4452b Freshen list of external custom rules included with the markdownlint-cli2-rul...
• e728d6f Update dependency: markdown-it to 15.0.3.
• 0a869ec Bump eslint-plugin-jsdoc from 65.2.2 to 65.2.4
• fec2034 Update indirect playwright dependencies.
• 74ed8f6 Bump @​playwright/test from 1.63.0 to 1.64.0
• 05659c7 Bump smol-toml from 1.9.0 to 1.9.1
• 20a66eb Bump execa from 10.0.1 to 10.1.0
• 692e9cc Bump eslint-plugin-jsdoc from 65.1.0 to 65.2.2
• 4e634a2 Bump concurrently from 10.0.5 to 10.0.6
• Additional commits viewable in compare view

[github-actions]

👋 Friendly nudge — this PR has had no activity for 7 days.

What needs attention:

• 👀 No approving reviews yet. Request a review from a teammate.
• ⬇️ 12 commits behind dev. Rebase to pick up latest changes.

---

If this PR is abandoned, please close it. If it's blocked on something external, leave a comment so the team knows.
This is an automated check that runs on weekdays. It won't nudge the same PR more than once per week.

[Copilot]

🟢 Approval recommended

No active review issues are identified, and the manifest and lockfile updates are aligned.

No open issues 🎉

What changed in this PR

Updates the repository’s Markdown tooling with security fixes and refreshed transitive dependencies while keeping the manifest and lockfile aligned.

Changes:

• Bumps markdown-it to 15.0.3.
• Bumps markdownlint-cli2 to 0.24.0.
• Refreshes related Markdown, linting, parser, YAML, and TOML dependencies.
• Updates the nested Typedoc markdown-it resolution to 14.3.3.

File	Description
package.json	Updates the declared Markdown tooling development dependencies.
package-lock.json	Records resolved versions, integrity hashes, and transitive dependency updates.

_{Review effort: Lite (auto)}

[github-actions]

🟡 Impact Analysis — PR #2272

Risk tier: 🟡 MEDIUM

📊 Summary

Metric	Count
Files changed	2
Files added	0
Files modified	2
Files deleted	0
Modules touched	1
Critical files	1

🎯 Risk Factors

• 2 files changed (≤5 → LOW)
• 1 module(s) touched (≤1 → LOW)
• Critical files touched: package.json

📦 Modules Affected

root (2 files)

• package-lock.json
• package.json

⚠️ Critical Files

• package.json

---

This report is generated automatically for every PR. See #733 for details.

[github-actions]

🔒 Security Review

Authoritative evidence: scanners from the PR base commit, posted by the default-branch workflow_run reporter.
Results for head commit 12713768f3796000047c7687bd69828dfe4a7ca5.

🔒 Security review: 1 info.

Severity	Category	Finding	Location
ℹ️ info	new-dependency	2 new/changed dependency version(s) in package.json. Verify these packages are trusted and necessary.	package.json:59

---

Automated security review — informational only.

[github-actions]

🛫 PR Readiness Check

ℹ️ This comment updates on each push. Last checked: commit 1271376

PR Scope: 🔧 Infrastructure

⚠️ 3 item(s) to address before review

Status	Check	Details
❌	Single commit	4 commits — consider squashing before review
✅	Not in draft	Ready for review
✅	Branch up to date	Up to date with dev
❌	Copilot review	No Copilot review yet — it may still be processing
✅	Changeset present	No source files changed — changeset not required
✅	Scope clean	No .squad/ or docs/proposals/ files
✅	No merge conflicts	No merge conflicts
✅	Copilot threads resolved	No Copilot review threads
❌	CI passing	1 check(s) still running

Files Changed (2 files, +94 −106)

File	+/−
package-lock.json	+92 −104
package.json	+2 −2

Total: +94 −106

---

This check runs automatically on every push. Fix any ❌ items and push again.
See CONTRIBUTING.md and PR Requirements for details.