Update dependency Markdown to v3.6 #1286
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==3.5.2
->==3.6
Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Python-Markdown/markdown (Markdown)
v3.6
Compare Source
Changed
Refactor TOC Sanitation
striptags
is provided to convert headings to plain text.Unlike, the
markupsafe
implementation, HTML entities are not unescaped.name
, richhtml
, and unescaped rawdata-toc-label
aresaved to
toc_tokens
, allowing users to access the full rich text content ofthe headings directly from
toc_tokens
.data-toc-label
is sanitized separate from heading contentbefore being written to
name
. This fixes a bug which allowed markup throughin certain circumstances. To access the raw unsanitized data, retrieve the
value from
token['data-toc-label']
directly.html.unescape
call is made just prior to callingslugify
so thatslugify
only operates on Unicode characters. Note thathtml.unescape
isnot run on
name
,html
, ordata-toc-label
.get_name
andstashedHTML2text
defined in thetoc
extensionare both deprecated. Instead, third party extensions should use some
combination of the new functions
run_postprocessors
,render_inner_html
andstriptags
.Fixed
scripts/*.py
in the generated source tarballs (#1430).^
) and square brackets (]
) but explicitly excludebackslashes (
\
) from abbreviations (#1444).attr_list
,fenced_code
), quoted attribute values arenow allowed to contain curly braces (
}
) (#1414).Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.