chore(deps): bump the prod-npm-minor-dependencies group with 5 updates

[dependabot]

Bumps the prod-npm-minor-dependencies group with 5 updates:

Package	From	To
markdown-it	14.1.1	14.2.0
enhanced-resolve	5.21.6	5.23.0
linkify-it	5.0.0	5.0.1
terser-webpack-plugin	5.6.0	5.6.1
webpack-sources	3.4.1	3.5.0

Updates markdown-it from 14.1.1 to 14.2.0

Changelog

Sourced from markdown-it's changelog.

[14.2.0] - 2026-05-24

Added

• isPunctCharCode to utilities.

Fixed

• Don't end HTML comment blocks on a blank line, #1155.
• Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
• Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
• More strict entities decode to avoid false positives ;, #1096.
• Restore block parser state on fail in lheading rule, #1131.

Security

• Fixed poor smartquotes perfomance on > 70k quotes in single block
• Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

Commits

• 829797a 14.2.0 released
• 9ce2087 Fix smartquotes perfomance
• 02e73b8 linkify-it bump
• 68cfb8c fix: don't end HTML comment blocks on a blank line (#1155)
• 1083137 Readme cleanup
• 97c7ca2 Update funding info
• c471b55 Changelog update
• 7769621 isPunctChar => isPunctCharCode
• aa2aa70 fix: always reset parentType in lheading rule (#1131)
• 59955f2 Polish PRs #1072, #1074
• Additional commits viewable in compare view

Updates enhanced-resolve from 5.21.6 to 5.23.0

Release notes

Sourced from enhanced-resolve's releases.

v5.23.0

Minor Changes

• Allow the path-like resolve options roots, modules, alias/fallback targets, restrictions, and tsconfig (the config file, configFile, baseUrl, and references) to accept file URL instances (such as new URL("./dir/", import.meta.url)), converting them to filesystem paths. Plain strings are still treated as literal paths, matching Node's fs. (by @​alexander-akait in #604)

v5.22.2

Patch Changes

• Fall back to the next modules entry when a package exports target is filtered out by restrictions, instead of throwing. (by @​alexander-akait in #600)

v5.22.1

Patch Changes

• Fix restrictions bypass via an in-root symlink pointing outside the root. (by @​alexander-akait in #595)

v5.22.0

Minor Changes

• CachedInputFileSystem#purge accepts a second { exact?: boolean } argument; exact: true removes only entries whose key matches what exactly instead of any entry whose key starts with what. (by @​alexander-akait in #591)

Changelog

Sourced from enhanced-resolve's changelog.

5.23.0

Minor Changes

• Allow the path-like resolve options roots, modules, alias/fallback targets, restrictions, and tsconfig (the config file, configFile, baseUrl, and references) to accept file URL instances (such as new URL("./dir/", import.meta.url)), converting them to filesystem paths. Plain strings are still treated as literal paths, matching Node's fs. (by @​alexander-akait in #604)

5.22.2

Patch Changes

• Fall back to the next modules entry when a package exports target is filtered out by restrictions, instead of throwing. (by @​alexander-akait in #600)

5.22.1

Patch Changes

• Fix restrictions bypass via an in-root symlink pointing outside the root. (by @​alexander-akait in #595)

5.22.0

Minor Changes

• CachedInputFileSystem#purge accepts a second { exact?: boolean } argument; exact: true removes only entries whose key matches what exactly instead of any entry whose key starts with what. (by @​alexander-akait in #591)

Commits

• 476fad1 chore(release): new release (#605)
• 03016f9 feat: accept URLs in options
• 795fab9 chore(deps-dev): bump tooling from a671b6d to a28b891 (#593)
• 38a5aa8 ci: disable npm cache for Node 10 test leg (#603)
• fcb3e3f chore: update deps and fix CI (#602)
• 487659b chore(release): new release (#601)
• d49f27c fix: fall back when an exports target is filtered out by restrictions (#600)
• e4c1db3 chore(deps-dev): bump the dependencies group with 4 updates (#598)
• 716236f chore(deps): bump CodSpeedHQ/action from 4.15.1 to 4.17.0 in the dependencies...
• ec96727 chore(release): new release (#596)
• Additional commits viewable in compare view

Updates linkify-it from 5.0.0 to 5.0.1

Changelog

Sourced from linkify-it's changelog.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

Commits

• 0b72d37 5.0.1 released
• 2dbe0e7 Add funding field to ackage.json
• 6be6d15 Fix fuzzy link/email scan perfomance
• 8e887d5 Update .github configs
• See full diff in compare view

Updates terser-webpack-plugin from 5.6.0 to 5.6.1

Release notes

Sourced from terser-webpack-plugin's releases.

v5.6.1

Patch Changes

• deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

Changelog

Sourced from terser-webpack-plugin's changelog.

5.6.1

Patch Changes

• deduplicate extracted comments in linear time, so builds stay fast when an asset contains many distinct preserved comments (by @​alexander-akait in #682)

Commits

• 5207f94 chore(release): new release (#683)
• 06bda34 fix: dedupe extracted comments in linear time (#682)
• 39fd982 chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#680)
• See full diff in compare view

Updates webpack-sources from 3.4.1 to 3.5.0

Release notes

Sourced from webpack-sources's releases.

v3.5.0

Minor Changes

• Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

Changelog

Sourced from webpack-sources's changelog.

3.5.0

Minor Changes

• Add clearCache(options?, visited?) method to Source that recursively releases cached data (CachedSource cached maps/buffers/strings, SourceMapSource parsed/serialized map caches, and dual-buffer caches in leaf sources). Lets consumers like webpack's SourceMapDevToolPlugin reclaim memory between chunks rather than accumulating per-task source map data across an entire build. Options: maps (default true) drops cached source maps; source (default true) drops cached source/buffer copies — pass false to keep source available for downstream plugins; parsedMap (default false) additionally drops the parsed object form on SourceMapSource instances when a buffer or string form survives (the combination { maps: true, source: false, parsedMap: true } matches the SourceMapDevToolPlugin call shape in webpack/webpack#20963). The optional visited WeakSet deduplicates the walk when the same child is reachable through multiple parents (e.g. modules shared across chunks). (by @​alexander-akait in #221)

Commits

• 7ad6559 chore(release): new release (#225)
• a402b24 feat: add Source.prototype.clearCache() to release per-instance caches (#221)
• 68d9c8e chore(deps-dev): bump the dependencies group with 3 updates (#222)
• ca270da chore(deps-dev): bump tooling from v1.26.1 to v1.26.2 (#223)
• 5da0885 chore(deps): bump codecov/codecov-action in the dependencies group (#224)
• db3f9df chore(deps): bump the dependencies group with 2 updates (#220)
• 06acc92 chore(deps-dev): bump fast-uri from 3.1.0 to 3.1.2 (#219)
• b6d2fee chore(deps-dev): bump axios from 1.15.0 to 1.16.0 (#217)
• 652ff13 chore: fix lint (#218)
• 6c0206d chore(deps): bump CodSpeedHQ/action in the dependencies group (#216)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.