Bump markdown-it and jsdoc-to-markdown

[dependabot]

Bumps markdown-it to 14.2.0 and updates ancestor dependency jsdoc-to-markdown. These dependencies need to be updated together.

Updates markdown-it from 8.4.2 to 14.2.0

Changelog

Sourced from markdown-it's changelog.

[14.2.0] - 2026-05-24

Added

• isPunctCharCode to utilities.

Fixed

• Don't end HTML comment blocks on a blank line, #1155.
• Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
• Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
• More strict entities decode to avoid false positives ;, #1096.
• Restore block parser state on fail in lheading rule, #1131.

Security

• Fixed poor smartquotes perfomance on > 70k quotes in single block
• Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

[14.1.1] - 2026-01-11

Security

• Fixed regression from v13 in linkify inline rule. Specific patterns could cause high CPU use. Thanks to @​ltduc147 for report.

[14.1.0] - 2024-03-19

Changed

• Updated CM spec compatibility to 0.31.2, #1009.

Fixed

• Fixed quadratic complexity when parsing references, #996.
• Fixed quadratic output size with pathological user input in tables, #1000.

[14.0.0] - 2023-12-08

Changed

• Drop ancient browsers support (use .fromCodePoint and other features).
• Rewrite to ESM (including all plugins/deps). CJS fallback still available. No signatures changed, except markdown-it-emoji plugin.
• Dropped dist/ folder from repo, build on package publish.
• Set punicode.js as external dependency.

Fixed

• Html tokens inside img alt are now rendered as their original text, #896.
• Hardbreaks inside img alt are now rendered as newlines.

[13.0.2] - 2023-09-26

Security

• Fixed crash/infinite loop caused by linkify inline rule, #957.

... (truncated)

Commits

• 829797a 14.2.0 released
• 9ce2087 Fix smartquotes perfomance
• 02e73b8 linkify-it bump
• 68cfb8c fix: don't end HTML comment blocks on a blank line (#1155)
• 1083137 Readme cleanup
• 97c7ca2 Update funding info
• c471b55 Changelog update
• 7769621 isPunctChar => isPunctCharCode
• aa2aa70 fix: always reset parentType in lheading rule (#1131)
• 59955f2 Polish PRs #1072, #1074
• Additional commits viewable in compare view

Updates jsdoc-to-markdown from 5.0.3 to 9.1.3

Release notes

Sourced from jsdoc-to-markdown's releases.

v9.1.3

Non-breaking change since v9.1.2

• Removed deprecated lodash.omit package. jsdoc2md/jsdoc-parse#43

v9.1.2

Regression fix since v9.1.1

Previously, you could manually render files in a specific order. For example, in the output this code would render docs for two.js before one.js.

const output = await jsdoc2md.render({ files: ['src/two.js', 'src/one.js'] })

This behaviour was broken by the jsdoc-api v9.0.0 release - instead, that version first sorted the files into alphabetical order, thus rendering one.js before two.js.

Jsdoc-api v9.3.5 (used internally by jsdoc2md) fixes that regression - previous behaviour restored.

v9.1.1

Non-breaking changes since v9.1.0

• Amended the fix for #90 so that @link, @linkcode and @linkplain tags are resolved in the @deprecated tag text.

v9.1.0

New feature since v9.0.5

• Any text passed to the @deprecated tag is now displayed. #90

Upgrade notes

See this testbed directory for example source code and output.

Previously, the tag @deprecated This method has been deprecated since v2.0.0 would simply print ***Deprecated*** in the output, ignoring the deprecation text. The new behaviour:

• For an empty @deprecated tag with no text, display ***Deprecated*** (same as before).
• If the tag has text, e.g. @deprecated This method has been deprecated since v2.0.0, then the full text line will be printed as written
  • This will replace the previous ***Deprecated*** line with ***This method has been deprecated since v2.0.0***.
  • This approach gives you full control over the text displayed (without assuming you want the line to begin with "Deprecated").

v9.0.5

Non-breaking changes since v9.0.4

• Fixed a regression where spaces in the jsdoc binary path caused jsdoc2md to fail. #307

v9.0.4

Non-breaking change

• Implemented a permanent fix for the critical util.isRegExp is not a function issue in Node v23, replacing the previous temporary workaround. #306

... (truncated)

Commits

• 21798ef 9.1.3
• 8cccbda Remove deprecated lodash.omit package
• defb5c7 9.1.2
• 3964f2b update copyright dates
• 53fb496 Fix regression where files passed directly to jsdoc2md.render() were sorted u...
• a6b2309 Merge pull request #311 from Fdawgs/patch-1
• d2d1bcb Replace node 23 with 24 in ci test matrix
• bc77277 9.1.1
• 7574e44 Amended the fix for #90 so that @​link, @​linkcode and @​linkplain tags are reso...
• f2719e3 9.1.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.