Skip to content

chore(deps): Bump markdown from 3.8.1 to 3.10.2#334

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/markdown-3.10.2
Open

chore(deps): Bump markdown from 3.8.1 to 3.10.2#334
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/markdown-3.10.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps markdown from 3.8.1 to 3.10.2.

Release notes

Sourced from markdown's releases.

Release 3.10.2

Fixed

  • Fix a regression related to comment handling (#1590).
  • More reliable fix for </ (#1593).

Release 3.10.1

Fixed

  • Ensure nested elements inside inline comments are properly unescaped (#1571).
  • Make the docs build successfully with mkdocstrings-python 2.0 (#1575).
  • Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).
  • Fix another infinite loop when handling bad comments (#1586).

Release 3.10.0

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

Release 3.9.0

Changed

  • Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

  • Ensure inline processing iterates through elements in document order (#1546).
  • Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

Release 3.8.2

Fixed

  • Fix codecs deprecation in Python 3.14.
  • Fix issue with unclosed comment parsing in Python 3.14.
  • Fix issue with unclosed declarations in Python 3.14.
  • Fix issue with unclosed HTML tag <foo and Python 3.14.
Changelog

Sourced from markdown's changelog.

[3.10.2] - 2026-02-09

Fixed

  • Fix a regression related to comment handling (#1590).
  • More reliable fix for </ (#1593).

[3.10.1] - 2026-01-21

Fixed

  • Ensure nested elements inside inline comments are properly unescaped (#1571).
  • Make the docs build successfully with mkdocstrings-python 2.0 (#1575).
  • Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).
  • Fix another infinite loop when handling bad comments (#1586).

[3.10.0] - 2025-11-03

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

  • Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

  • Ensure inline processing iterates through elements in document order (#1546).
  • Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

[3.8.2] - 2025-06-19

Fixed

  • Fix codecs deprecation in Python 3.14 (#1537).

... (truncated)

Commits
  • e7a0efb Bump version to 3.10.2
  • 6301833 Document HTML sanitation policy
  • 7f29f1a More reliable fix for </
  • c438647 Fix regression of special comments
  • e5fa5b8 Bump version to 3.10.1
  • f925349 More HTML fixes
  • 9933a0a Revert "Allow reference links with backticks"
  • 07dfa4e Allow reference links with backticks
  • fb6b27a Fix infinite loop when text contains multiple unclosed comments
  • 89112c2 Make the docs build successfully with mkdocstrings-python 2.0
  • Additional commits viewable in compare view

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 30, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 30, 2026 18:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 30, 2026
@codacy-production
Copy link
Copy Markdown
Contributor

codacy-production bot commented Mar 30, 2026

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric Results
Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes. Give us feedback

Copy link
Copy Markdown
Contributor

@codacy-production codacy-production bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR upgrades the 'markdown' dependency from 3.8.1 to 3.10.2. While Codacy analysis shows no quality issues, this version jump introduces a breaking change: support for Python 3.9 and PyPy 3.9 has been dropped (as of version 3.10.0). It is imperative to confirm that the project's runtime and CI environments are running on Python 3.10 or later before merging. Furthermore, the PR lacks automated verification to ensure that the rendering engine changes do not affect existing content or footnote ordering.

About this PR

  • The upgrade to markdown 3.10.2 drops support for Python 3.9 and PyPy 3.9. If the project's production runtime or CI pipeline is still using Python 3.9, this change will lead to execution failures.

Test suggestions

  • Verify that markdown rendering remains functional and consistent with existing content.
  • Confirm that footnote ordering adheres to the 'definition order' default reinstated in 3.10.0.
  • Verify the application environment is running on Python 3.10+, as support for Python 3.9 was dropped in this version jump.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that markdown rendering remains functional and consistent with existing content.
2. Confirm that footnote ordering adheres to the 'definition order' default reinstated in 3.10.0.
3. Verify the application environment is running on Python 3.10+, as support for Python 3.9 was dropped in this version jump.
Low confidence findings
  • There are no regression tests included to verify that the rendering engine upgrade does not break existing documentation layout or the newly stabilized footnote ordering logic.

🗒️ Improve review quality by adding custom instructions

Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.8.1 to 3.10.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.8.1...3.10.2)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: 3.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/markdown-3.10.2 branch from 4a47a5c to 1ab7346 Compare March 31, 2026 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants