Bump markdown-it and markdownlint-cli2

[dependabot]

Bumps markdown-it to 15.0.1 and updates ancestor dependency markdownlint-cli2. These dependencies need to be updated together.

Updates markdown-it from 14.3.0 to 15.0.1

Changelog

Sourced from markdown-it's changelog.

[15.0.1] - 2026-08-27

Changed

• doc: replace oxide theme with custom one.

Fixed

• Fixed code span parsing after lookaheads for unclosed link and image labels, #1201.
• Preserve spaces in code spans whose content consists only of spaces, #1180.
• Preserve brackets around IPv6 address literals when normalizing links, #1204.

Security

• Fixed quadratic complexity when replacing fuzzy links.
• Fixed quadratic complexity in scheme backscan (inline linkify rule).

[15.0.0] - 2026-07-30

Added

• Exposed parser internals classes as static properties on markdownit.
• Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
• Added the markdown-it/browser export with bundled ESM and UMD builds.
• Added colored CLI help on supported terminals via argparse 3.
• Added reference labels to link/image tokens, #938.
• Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

Changed

• [breaking] linkify-it => v6
  • No fuzzy links by default.
  • No auth part check by default.
  • Unicode punctuation terminates the link by default (should help with CJK).
  • See linkify-it changelog for other changes.
• Package root now resolves to prebuilt ESM and CJS files instead of raw sources. Distribution files were reorganized under dist/ and dist/browser/.
• Migrated to Typescript.
• entities => v8. Can be rolled back to v7 if compatibility issues happen.
• Moved validateLink, normalizeLink and normalizeLinkText from properties to prototype methods.
• Reworked issue templates and contribution guidelines.

Removed

• [breaking] Removed package-internal subpath exports (markdown-it/lib/* and similar). Use the static classes exposed on markdownit instead.
• [breaking] Removed obsolete StateBlock#ddIndent, #1139. Update markdown-it-deflist to keep it working.

Fixed

... (truncated)

Commits

• 924b203 15.0.1 released
• 25c3895 Changelog update
• aaadcfa Fix quadratic complexity in scheme backscan (inline linkify rule)
• 09fa071 Fix quadratic complexity when replacing fuzzy links
• 988c82b fix: don't strip spaces from all-space code spans
• 26b9a7b Polish previous commit
• e8c6688 fix: preserve IPv6 brackets in normalizeLink (#1204)
• 5e9b1cc Rework backticks cache to remove side effects, close #1201
• 7b9a6a3 doc: fix source link style for methods
• 1e8ab89 doc: add changelog to menu
• Additional commits viewable in compare view

Updates markdownlint-cli2 from 0.23.2 to 0.23.3

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.3

• Update dependencies

Commits

• 916ad0a Update to version 0.23.3.
• ed9cb41 Freshen list of external custom rules included with the markdownlint-cli2-rul...
• 3fe0056 Remove test-main suite now that test-fs runs all the same tests (except 1 whi...
• d52a859 Update test case infrastructure to be able to run "require" tests when using ...
• 8a4b4be Bump eslint-plugin-jsdoc from 64.3.5 to 64.3.6
• 578caa6 Update OutputFormatterOptions to include an FsPromisesLike parameter so outpu...
• 018d1eb Update indirect playwright dependencies.
• a3a26a8 Bump @​playwright/test from 1.62.1 to 1.63.0
• 75e7193 Bump eslint-plugin-jsdoc from 64.3.3 to 64.3.5
• f1a6823 Bump eslint from 10.9.1 to 10.10.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.