alex/opengist

Watch

Fork 0

Update all non-major dependencies #52

Open

alex wants to merge 7 commits from renovate/all-non-major-dependencies into devel

alex commented

2026-08-31 02:03:50 +00:00

Owner

This PR contains the following updates:

Package	Change	Type	Update
dompurify	`3.4.12` → `3.4.14`	devDependencies	patch
ghcr.io/thomiceli/opengist	`1.15.0` → `1.15.2`		patch
github.com/blevesearch/bleve/v2	`v2.6.0` → `v2.6.1`	require	patch
github.com/go-webauthn/webauthn	`v0.17.4` → `v0.18.0`	require	minor
github.com/stretchr/testify	`v1.11.1` → `v1.12.1`	require	minor
github.com/yuin/goldmark	`v1.8.4` → `v1.8.5`	require	patch
go	`1.26` → `1.27`	uses-with	minor
golang.org/x/crypto	`v0.54.0` → `v0.55.0`	require	minor
golang.org/x/text	`v0.40.0` → `v0.41.0`	require	minor
golangci/golangci-lint	`v2.12` → `v2.13.2`	uses-with	minor
gorm.io/driver/postgres	`v1.6.0` → `v1.6.2`	require	patch
highlight.js (source)	`11.11.1` → `11.12.0`	devDependencies	minor
katex (source)	`0.18.1` → `0.18.4`	devDependencies	patch
marked (source)	`18.0.6` → `18.0.11`	devDependencies	patch
meilisearch (source)	`0.26.0` → `0.38.0`		minor
vite (source)	`8.1.5` → `8.2.2`	devDependencies	minor
vitepress (source)	`2.0.0-alpha.18` → `2.0.0-alpha.19`	devDependencies	patch

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

cure53/DOMPurify (dompurify)

`v3.4.14`: DOMPurify 3.4.14

Compare Source

Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh
Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1
Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade
Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation
Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes
Updated several development dependencies and CI workflow actions

`v3.4.13`: DOMPurify 3.4.13

Compare Source

Fixed an issue with hook removal during IN_PLACE sanitization, thanks @koyokr
Fixed an issue with hooks potentially bypassing the clone guard, thanks @AkshayjainG
Fixed an issue with DOM clobbering via ownerDocument during IN_PLACE, thanks @AkshayjainG
Bumped several dependencies where possible

thomiceli/opengist (ghcr.io/thomiceli/opengist)

`v1.15.2`

Compare Source

See here how to update Opengist.

Added

Anonymous LDAP user search (#794)

Fixed

Prevent writes through symbolic links in gists (#799)
Prevent server crashes when rendering empty CSV files
Invalid header handling in Git cat-file batch reader (#802)
Overlapping headers in narrow embeds (#803)

`v1.15.1`

Compare Source

See here how to update Opengist.

Fixed

Admin pagination with new URLs (#782)
Stop unbounded diff content growth for large files (#787)

blevesearch/bleve (github.com/blevesearch/bleve/v2)

`v2.6.1`

Compare Source

What's Changed

MB-62182: Disable training once its been marked complete by @Thejas-bhat in #2329
Upgrade faiss in docs/vectors.md by @CascadingRadium in #2330
MB-71397: Upgrade zapx, go-faiss by @CascadingRadium in #2331
MB-71829, MB-71796: Upgrade zapx by @Likith101 in #2333
MB-71936: Upgrading zapx by @Likith101 in #2335
MB-71954: fallback to naive merge when the trainer file isn't available by @Thejas-bhat in #2334
MB-71397: Upgrade zapx/v17, go-faiss by @CascadingRadium in #2339
Regression fix: Cache the vector index size by @CascadingRadium in #2341
Upgrade zapx by @CascadingRadium in #2342
MB-71971: Add explain to custom score queries by @capemox in #2340
MB-71788: pass training params as part of the zap config by @Thejas-bhat in #2336
MB-71969 Propagate custom_filter/custom_score callback errors by @maneuvertomars in #2344
MB-72429: Fixed filtering of updated info for dv visits by @Likith101 in #2347
MB-71381: Fixed issue with resetting numSnapshotsToKeep by @Likith101 in #2343
go mod tidy by @CascadingRadium in #2348
MB-71968: Expand asterisk fields wildcard in script query by @maneuvertomars in #2345
MB-72240: go mod tidy by @Thejas-bhat in #2349
MB-71963: ctl.timeout in context propagation script query by @maneuvertomars in #2350
MB-72548: Cache root document count in segment snapshot by @CascadingRadium in #2351
MB-71967: Fix for SearchRequest.fields override by custom_*.fields by @maneuvertomars in #2352
MB-70770: Upgrade zapx by @CascadingRadium in #2358
MB-70770: Do not exclude segments from persistence by @CascadingRadium in #2363
MB-71114 : Fix for KNN scoring details by @maneuvertomars in #2367
chore: update index API by @CascadingRadium in #2369
Bump golang.org/x/net from 0.51.0 to 0.55.0 by @dependabot[bot] in #2371
MB-72716: Fix miscalculation of rollback points by @CascadingRadium in #2370
MB-72690: Fixed issue where meta file reader was nil by @Likith101 in #2372
MB-72725: Improve efficiency of index compaction by @CascadingRadium in #2373
bug: Close bolt on error when updating index by @CascadingRadium in #2376
chore: upgrade deps by @CascadingRadium in #2377
MB-72725: Unify batch merge logic by @CascadingRadium in #2378
[stats only] Fix broken scorch stats by @CascadingRadium in #2380
MB-71131: Support file writer callbacks for trained index by @Thejas-bhat in #2379
MB-72489: standalone query hot-path optimizations by @capemox in #2381
MB-72489: fuzzy/regexp candidate-collection optimizations by @capemox in #2382
MB-72489: top-N collector optimizations by @maneuvertomars in #2385
MB-72535: Cap leaf term searchers per index per search by @Samsonnyyeet in #2387
MB-72376: Introducing New Geo-Shape Indexes by @Likith101 in #2357
MB-72082: improve stats tracking on zap layer by @Thejas-bhat in #2392

New Contributors

@Samsonnyyeet made their first contribution in #2387

Full Changelog: https://github.com/blevesearch/bleve/compare/v2.6.0...v2.6.1

go-webauthn/webauthn (github.com/go-webauthn/webauthn)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has
added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum
Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int MIGRATION.md as they are substantial between
ths version and prior versions.

Bug Fixes

metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
metadata: consistent revocation policy and client timeouts (#740) (34d324b)
metadata: handle certificate chains of any depth (#737) (309ea69)
metadata: honour status report order and effective dates (#736) (8be5355)
metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
metadata: prevent panic corrupt blob (#698) (c5fd013)
metadata: report malformed status report urls (#738) (ed82f7c)
protocol: allow any attestation eku (#728) (f4e33fc)
protocol: androidkey missing authorization list member (#727) (9b02b19)
protocol: androidkey union generated (#729) (3ed3e75)
protocol: bind credential public key curve to its algorithm (#752) (314c2be)
protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
protocol: compound returns incorrect type (#731) (025d897)
protocol: credential public key match limited to ECDSA (#732) (b4df26e)
protocol: harden credential response and options handling (#763) (de0ae6c)
protocol: missing tpm steps (#725) (f9a63f9)
protocol: opaque origin matching and validation (#758) (37f065a)
protocol: possible panic conditions (#719) (0ea14e7)
protocol: safetynet validation steps (#726) (e12f6e8)
protocol: single signature encoding policy and canonical der (#744) (99bbbdb)
webauthncbor: reject data trailing the first cbor item (#762) (0801b5d)
webauthncose: validate okp key algorithm (#759) (98c528b)
webauthn: deprecations and handle check (#745) (8619bb9)
webauthn: include backup flag check in registration (#748) (26a4868)
webauthn: only update uv flag (#746) (b39c822)
webauthn: use session relying party id (#747) (ebb45e2)

Features

metadata: update to r46 anchor (#780) (20f33e6)
ml-dsa preference list and gated availability (#768) (db1e068)
protocol: client capability enumeration (#765) (62f4489)
protocol: compound sub-statement scope (#742) (34271da)
protocol: current user details signal constructor (#766) (b6db923)
protocol: ecdsa attestation signature encoding policy (#743) (29404e9), closes #710
protocol: related origins well-known document (#753) (05d54dc)
protocol: relying party attestation policy (#741) (3239ed0)
typed extension inputs and outputs (#734) (0661c81)
webauthn: ceremony origin binding (#756) (45aabc3)
webauthncose: ml-dsa (#767) (5fb926e), closes #639
webauthncose: secp256k1 (#755) (d5d3910)

BREAKING CHANGES

protocol: A credential response whose id and rawId disagree, or which omits rawId, is rejected. Registration previously accepted both, since the credential record is built from the attested credential id and nothing read the client's value.
An IP address configured as a relying party id is
rejected, so a Config carrying one now fails validation.
HasherFromCOSEAlg returns (hash.Hash, bool) and no
longer substitutes SHA-256 for an unregistered algorithm. Callers must
handle the second value.
webauthncose: A stored credential whose OKP key names an algorithm
other than -8 or -19 no longer parses, failing the assertion rather than
verifying with Ed25519.
The rpOpaqueOrigins parameter has been added to protocol.CollectedClientData.Verify, protocol.ParsedCredentialCreationData.Verify and protocol.ParsedCredentialAssertionData.Verify, immediately after the existing rpOrigins parameter; callers which accept no opaque origins should pass nil. The webauthn.ConfigProvider interface has also gained a GetOpaqueOrigins method which implementations outside this module must provide.
RegistrationOption and LoginOption now return an error, so any option implemented outside this module must be adjusted, and WithExtensions and WithAssertionExtensions accept extension options in place of a map. protocol.AuthenticationExtensions and protocol.AuthenticationExtensionsClientOutputs are structs rather than map[string]any, protocol.Extensions is removed, and ParsedPublicKeyCredential.GetAppID takes a protocol.SessionExtensions. SessionData.Extensions changes both its type and its encoded representation, so a session persisted by an earlier version cannot be decoded by this one, and a client extension output the Relying Party did not request now fails the ceremony unless Config.ExtensionsUnsolicitedOutputPolicy says otherwise.
protocol: ConfigProvider requires GetSignaturePolicy. AttestationObject.Verify, AttestationObject.VerifyAttestation, ParsedCredentialAssertionData.Verify, ParsedCredentialCreationData.Verify, Credential.Verify, Credential.VerifyAttestationType and the attestation format validation handler registered by RegisterAttestationFormat take a SignaturePolicy. AttestationPolicy no longer carries a Signature member and webauthncose.SetExperimentalInsecureAllowBERIntegers is removed.
protocol: AttestationObject.Verify and AttestationObject.VerifyAttestation take an AttestationPolicy, and ConfigProvider requires GetAttestationPolicy.
metadata: Statement.CredentialExportProtocolConfigURL and its JSON counterpart are now named CredentialExchangeConfigURL, matching the credential exchange terminology the specification uses.
metadata: the desired statuses given to ValidateStatusReports are now a
set of acceptable current statuses rather than a set which must all appear
somewhere in the report history.
metadata: StatusReport.EffectiveDate and BiometricStatusReport.EffectiveDate are now *time.Time so an absent date is distinguishable from a zero value.

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: https://github.com/stretchr/testify/compare/v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: https://github.com/stretchr/testify/compare/v1.11.0...v1.12.0

What's Changed

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
CI: test also with Go 1.23 by @dolmen in #1783
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
assert: truncate very long objects in test failure messages by @brackendawson in #1646
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
assert: make *AssertionFunc types just aliases by @dolmen in #1563
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: https://github.com/stretchr/testify/compare/v1.11.0...v1.12.0

yuin/goldmark (github.com/yuin/goldmark)

`v1.8.5`

Compare Source

fix: #568

actions/go-versions (go)

`v1.27.0`: 1.27.0

Compare Source

Go 1.27.0

golangci/golangci-lint (golangci/golangci-lint)

`v2.13.2`

Compare Source

Released on 2026-08-28

Bug fixes
- Decrease cache entropy
Linters bug fixes
- iface: from 1.5.0 to 1.5.1
- staticcheck: from 0.8.0 to 0.8.1
- unparam: from 3f964bc to 2fa3d84
- canonicalheader: from v1.1.2 to a temporary fork

`v2.13.1`

Compare Source

Released on 2026-08-20

Linters bug fixes
- ginkgolinter: from 0.23.1 to 0.24.0
- gofmt: from d62b90e to e84e050
- staticcheck: from 0.8.0-rc.1 to 0.8.0
- wsl_v5: from 5.8.0 to 5.9.0

`v2.13.0`

Compare Source

Released on 2026-08-19

Enhancements
- 🎉 go1.27 support
Bug fixes
- fix: cache package facts
Linters new features or changes
- dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
- errcheck: from 1.10.0 to 1.20.0
- exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
- exhaustruct: deprecated and replaced by exhaustruct_v5
- fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
- goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
- gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
- gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
- gosec: from 2.26.1 to 2.27.1
- govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
- iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
- noinlineerr: from 1.0.5 to 1.0.6
- nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
- recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
- unparam: from 5beb8c8 to 3f964bc
Linters bug fixes
- clickhouse-go-linter: from 1.2.0 to 1.2.1
- errname: from 1.1.1 to 1.1.2
- exhaustruct: from 5.0.2 to 5.0.3
- funcorder: add missing Function field
- ginkgolinter: from 0.23.0 to 0.23.1
- gocheckcompilerdirectives: from 1.3.0 to 1.4.0
- gocritic: from 0.14.3 to 0.14.4
- gomoddirectives: add missing IgnoreForbidden field
- iface: from 1.4.2 to 1.4.3
- mirror: from 1.3.0 to 1.3.3
- nilnil: from 1.1.1 to 1.1.2
- protogetter: from 0.3.20 to 0.3.21

go-gorm/postgres (gorm.io/driver/postgres)

`v1.6.2`

Compare Source

`v1.6.1`

Compare Source

highlightjs/highlight.js (highlight.js)

`v11.12.0`

Compare Source

Parser Engine:

fix(parser) count named capture groups when rewriting backreferences spokodev

New Grammars:

add FreeDesktop config file (.desktop / systemd) grammar gg582
added 3rd party Cedar grammar to SUPPORTED_LANGUAGES Dhruv Maniya
added 3rd party DAX and M (Power Query) grammars to SUPPORTED_LANGUAGES jiaopengzi
added 3rd party Djot grammar to SUPPORTED_LANGUAGES Mark Scherer
added 3rd party Igor Pro grammar to SUPPORTED_LANGUAGES Ryne Andal
added 3rd party Jaiva grammar to SUPPORTED_LANGUAGES Lehlogonolo Poole
added 3rd party Liquidsoap grammar to SUPPORTED_LANGUAGES Romain Beauxis
added 3rd party MoonBit grammar to SUPPORTED_LANGUAGES Kaida-Amethyst
added 3rd party Pkl grammar to SUPPORTED_LANGUAGES Dan Chao
added 3rd party RAScript grammar to SUPPORTED_LANGUAGES Joshua Raphael
added 3rd party Veryl grammar to SUPPORTED_LANGUAGES Naoya Hatta
added 3rd party Why3 grammar to SUPPORTED_LANGUAGES JGalego
added 3rd party Xojo grammar to SUPPORTED_LANGUAGES patricksalo
referenced existing 3rd party ES|QL grammar in SUPPORTED_LANGUAGES Styx0x6

Core Grammars:

fix(c) only match real atomic_* type names, not C11 atomic functions, issue #3837 Mark Xian
fix(c) do not highlight C++ std types as built-ins, issue #4103 Arron Zou
fix(c, cpp) bound the run of type tokens in front of a function name (ReDoS), issue #4362 Jayesh Bhade
fix(c, cpp) scope angle-bracket header string to #include, issue #3505 Pablo
fix(c, cpp) stop a raw string's closing delimiter from swallowing quotes, issue #3585 David Pavlovschii
enh(cmake) add block and endblock keywords Anonymous Maarten
fix(cmake) only highlight standalone numbers, not digits that begin an identifier (e.g. 3rdparty), issue #4170 Mark Xian
fix(cpp) require a word boundary before numeric literals so digits inside identifiers aren't highlighted as numbers, issue #4231 Mark Xian
fix(crystal) stop treating integer division // as a regex literal Zain Asif
enh(csharp) support digit separators in binary literals and numeric type suffixes, and stop highlighting the leading _ of an identifier, issue #4258 Sarath Francis
enh(css) add corner-shape properties Hama Tanveer
enh(css) support six-digit unicode-range values Konstantin Baltsat
enh(dart) add highlighting for class and function names guuido
enh(dns) highlight registered CAA property tags, issue #4475 Joey Huang
enh(dns) improve grammar: character strings, TXT, classes, escapes, addresses Checconio
enh(dos) add batch as an alias, issue #4395 Hashim Khan
enh(gherkin) update keyword list Hirse
enh(gherkin) variables can't contain whitespace Hirse
enh(gherkin) docstrings can use backticks Hirse
enh(go) recognize binary integer literals spokodev
enh(groovy) support underscores in numeric literals greymoth
fix(haml) recognize implicit div tag lines starting with .class or #id, issue #3783 pikammmmm
fix(haskell) highlight where in GADT and closed type-family declarations, issue #3753 Konstantin Baltsat
enh(java) improve detection of types, including generic and array types Hannes Wallnoefer
enh(javascript) add self to built-in variables Dsaquel
enh(kotlin) add ktm and ktx aliases DarkMatter-999
fix(leaf) fix bug in Leaf keyword highlighting Francesco Paolo Severino
fix(lisp) preserve highlighting after quoted multiplication expressions arturict
enh(llvm) support block C-style comments utam-1
enh(lua) add Lua 5.5 global keyword Nibiri
fix(markdown) don't treat a *** or ___ thematic break as the start of bold text, issue #3719 Mayank Gupta
enh(nsis) enhance NSIS rules Jan T. Sott
enh(python) add missing builtins: aiter and anext (3.10), frozendict and sentinel (3.15) Hugo van Kemenade
enh(python) correctly highlight lazy import syntax from PEP 810 Peter Bierma
enh(python) support t-strings Nicolas Le Cam
fix(ruby) don't treat the scope resolution operator :: as a symbol, issue #4294 Hashim Khan
enh(rust) add safe keyword Frances Wingerter
enh(rust) include the raw borrow operator in keywords Shiva Kiran Koninty
enh(rust) parse f16 and f128 literals usamoi
fix(rust) allow function invocations whose names start with a keyword Xia Li-yao
fix(rust) recognize \\ and \" char-literal escapes so highlighting doesn't leak, issue #4351 Sarath Francis
enh(shell) match period (.) as part of shell prompt Ian Wienand
enh(sqf) update to Arma 3 v2.22 LouMontana
fix(xml) remove recursive sublanguage references to prevent ReDoS petejm

Documentation:

docs(php) explain the difference between php and php-template Zain Asif
document LLVM IR in SUPPORTED_LANGUAGES Jan Schultke
document the existing pwsh alias for PowerShell helpimnotdrowning
list languages with category "common" in SUPPORTED_LANGUAGES Marc Bernard
remind contributors to run npm i Proliecan
fix typos in README.CDN.md Zitrone

Themes:

added Equinox theme Griffon Langyer

Build / Tooling:

(build) allow third-party packages to override default languages Lysxia
(build) use Trusted Publishers in the publishing pipeline allejo
fix(types) allow RegExp in Mode.keywords KJyang-0114
refactor(tools) replace @colors/colors with ansis webdiscus
chore: dependency updates

CONTRIBUTORS

`v11.11.2`

Compare Source

Parser Engine:

fix illegal handling at end of input code Josh Goebel

New Grammars:

added 3rd party Aiken grammar to SUPPORTED_LANGUAGES Josh Marchand
added 3rd party VoltScript grammar to SUPPORTED_LANGUAGES Chester Moses
added 3rd party Gleam grammar to SUPPORTED_LANGUAGES Filip Hoffmann
added 3rd party Magik grammar to SUPPORTED_LANGUAGES Sebastiaan Speck
added 3rd party Prisma grammar to SUPPORTED_LANGUAGES SungHyun Kim
added 3rd party Bicep grammar to SUPPORTED_LANGUAGES Anthony Martin
added 3rd party L4 grammar to SUPPORTED_LANGUAGES Thomas Gorissen
added 3rd party Abc Notation grammar to SUPPORTED_LANGUAGES NriotHrreion

Core Grammars:

fix(cpp) exclude keywords from function calls Eisenwave
enh(csp) add missing directives / keywords from MDN (7 more) Max Liashuk
enh(ada) add new parallel keyword, allow [] for Ada 2022 Max Reznik
fix(javascript) correctly highlight 'for await' again [wolfgang42][]
fix(diff) fix unified diff hunk header regex to allow unpaired numbers Chris Wilson
enh(php) support single line and hash comments in attributes, constructor and functions Antoine Musso
fix(ex) adds support for ?' char literal and missing defguardp keyword Kevin Bloch
enh(json) add json5 support Kerry Shetline
fix(csharp) Support digit separators te-ing
fix(css) unicode-range parsing, issue #4253 Kerry Shetline

Documentation:

update link to Odin grammar to maintained version Marian Pekár
fix type highlight deprecated message Brandon Dong
fixed typo and incorrect git command SungHyun Kim
fix CONTRIBUTING.md broken badge link SungHyun Kim
alphabetized languages + upper-cased BASIC in SUPPORTED_LANGUAGES.md Adam Lui
deduplicate JSON from SUPPORTED_LANGUAGES Lukasz Czajczyk

Themes:

Fix: cybertopia themes render correctly in shadow DOM hbgl
added "vs Dark " theme Twineee1

Themes:

Added Night Coder Ash theme Ashkan Shirpour
Added Night Coder Charcoal theme Ashkan Shirpour
Added Night Coder Ember theme Ashkan Shirpour
Added Night Coder Flame theme Ashkan Shirpour
Added Paper theme Ashkan Shirpour
Added Ice theme Ashkan Shirpour

CONTRIBUTORS

KaTeX/KaTeX (katex)

`v0.18.4`

Compare Source

Bug Fixes

environment: report invalid environment names as ParseError (#4256) (e507f75), closes #3760 #3760

`v0.18.3`

Compare Source

Bug Fixes

allow braced arguments for delimsizing (#4255) (1c973ae)

`v0.18.2`

Compare Source

Bug Fixes

prevent prototype pollution in settings (#4260) (0adf7e7)

markedjs/marked (marked)

`v18.0.11`

Compare Source

Bug Fixes

do not nest a link inside a link (#4051) (e250e31)
inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
keep emphasis in the text of a rejected reference link (#4059) (b699db3)

`v18.0.10`

Compare Source

Bug Fixes

keep the em/strong mask the same length as the source (#4044) (681373c)
parse EOF backtick fences after paragraphs (#4039) (81bd750)
place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

`v18.0.9`

Compare Source

Bug Fixes

an unmatched strong run before emphasis stays literal (#4008) (e8544e6)
Fix spurious deeper nesting in a blockquote continuation (#4030) (452f1ed)
pedantic foo: and "word" emphasis parsing (#3999) (823093f)

`v18.0.8`

Compare Source

Bug Fixes

fall back to default checkbox renderer when extension returns false (#4023) (e1b6139)

`v18.0.7`

Compare Source

Bug Fixes

Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes (#4014) (f945fc5), closes #3991
Avoid O(n^2) masked source rebuild in inline tokenizer (#4017) (9154f8f)
keep empty list after blockquote as a sibling block (#4004) (3f144a0)
preserve code spans adjacent to tildes (#4012) (0de7188)
Recognize setext headings whose first line starts with # (#4015) (f056437), closes #1
treat a line of only tabs as a blank line between paragraphs (#4007) (bc2f121)

meilisearch/meilisearch-kubernetes (meilisearch)