Bump commonmark from 0.29.3 to 0.31.2

[dependabot]

Bumps commonmark from 0.29.3 to 0.31.2.

Release notes

Sourced from commonmark's releases.

commonmark.js 0.31.2

• Require minimist >= 1.2.8 (#290). See https://nvd.nist.gov/vuln/detail/CVE-2021-44906

commonmark 0.31.1

[0.31.1]

• Fix HTML comment parsing with - before closing --> (#285, Robin Stocker).
• Accept lowercase inline HTML declarations (Michael Howell).
• Fix title-related backtracking with empty string (#281, Michael Howell).
• Remove string.prototype.repeat polyfill (Steven).
• Remove source, add search to list of recognized block tags. (a spec 0.31 change we forgot in last release).

commonmark.js 0.31.0

• Update to 0.31 spec.txt.
• Treat unicode symbols like punctuation for purposes of flankingness. This updates the library to conform to the 0.31 spec.
• Do not process &-entities that don't end in ; (#278, Michael Howell).
• Html renderer: don't add language- to code block class if the info string already starts with language- (#277).
• Fix pathological regex for HTML comments (#273).
• Track underscore bottom separately mod 3, like asterisk (Michael Howell).
• Fix list tightness (taku0).
• Fix "CommomMark" typo (#270, Martin Geisler).
• commonmark/cmark#456
• Allow <!doctype to be case-insensitive.
• Fix HTML comment regex.
• Fix HTML comment regex to conform to commonmark/commonmark-spec#713.
• Fix a pathological performance case in link titles. Thanks to Stefan Dobre for reporting.
• Allow closing fence to be followed by tabs (#258).
• Replace deprecated String.prototype.substr() (#254, CommanderRoot).
• Fix bug with reference link normalization. We were only collapsing the first group of consecutive whitespace, not following ones.

commonmark.js 0.30.0

• Update tests to 0.30 spec.txt.
• Fix commonmark/cmark#383. Our optimization for emphasis parsing was flawed, leading to some corner cases where nested emphasis was parsed incorrectly.
• Allow user to specify a function to escape the output (#217, newfivefour).
• Simplify reThematicBreak.
• Fix documentation for node.listType (TheWastl). The parser produces lowercase strings, but the README said the strings are capitalized.
• Fix handling of type 7 HTML blocks (#213). They can't interrupt paragraphs (even with laziness).
• Fix link label normalization with backslash before newline (#211).

... (truncated)

Changelog

Sourced from commonmark's changelog.

0.31.2]

• Require minimist >= 1.2.8 (#290), see CVE-2021-44906.

[0.31.1]

• Fix HTML comment parsing with - before closing --> (#285, Robin Stocker).
• Accept lowercase inline HTML declarations (Michael Howell).
• Fix title-related backtracking with empty string (#281, Michael Howell).
• Remove string.prototype.repeat polyfill (Steven).
• Remove source, add search to list of recognized block tags. (a spec 0.31 change we forgot in last release).

[0.31.0]

• Update to 0.31 spec.txt.
• Treat unicode symbols like punctuation for purposes of flankingness. This updates the library to conform to the 0.31 spec.
• Do not process &-entities that don't end in ; (#278, Michael Howell).
• Html renderer: don't add language- to code block class if the info string already starts with language- (#277).
• Fix pathological regex for HTML comments (#273).
• Track underscore bottom separately mod 3, like asterisk (Michael Howell).
• Fix list tightness (taku0).
• Fix "CommomMark" typo (#270, Martin Geisler).
• commonmark/cmark#456
• Allow <!doctype to be case-insensitive.
• Fix HTML comment regex.
• Fix HTML comment regex to conform to commonmark/commonmark-spec#713.
• Fix a pathological performance case in link titles. Thanks to Stefan Dobre for reporting.
• Allow closing fence to be followed by tabs (#258).
• Replace deprecated String.prototype.substr() (#254, CommanderRoot).
• Fix bug with reference link normalization. We were only collapsing the first group of consecutive whitespace, not following ones.

[0.30.0]

• Update tests to 0.30 spec.txt.
• Fix commonmark/cmark#383. Our optimization for emphasis parsing was flawed, leading to some corner cases where nested emphasis was parsed incorrectly.
• Allow user to specify a function to escape the output (#217, newfivefour).
• Simplify reThematicBreak.
• Fix documentation for node.listType (TheWastl). The parser produces lowercase strings, but the README said the strings are capitalized.
• Fix handling of type 7 HTML blocks (#213). They can't interrupt paragraphs (even with laziness).

... (truncated)

Commits

• cb2c230 Bump to 0.31.2, update changelog.
• cb7e2e3 Require minimist >= 1.2.8.
• 16ff08a Bump to 0.31.1, update changelog
• 6f94a99 Fix HTML comment parsing with - before closing --> (#286)
• a4d859c Accept lowercase inline HTML declarations
• 3ef341b Fix title-related backtracking with empty string
• ba128a8 Remove string.prototype.repeat polyfill
• 2df33d5 Remove source, add search to list of recognized block tags.
• f6c04d8 Remove obsolete things from release checklist.
• cc7febb Bump to 0.31.0, update changelog.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)