From a151bb73e417397b90f22c452f38000d38e75811 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 5 Oct 2026 09:45:28 +0000 Subject: [PATCH 1/2] Bump markdown-it and js-yaml to close Dependabot alerts #73 and #74 --- package-lock.json | 12 ++++++------ package.json | 3 ++- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/package-lock.json b/package-lock.json index eca22a7..cae69cf 100644 --- a/package-lock.json +++ b/package-lock.json @@ -5027,9 +5027,9 @@ "license": "MIT" }, "node_modules/js-yaml": { - "version": "5.2.2", - "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz", - "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==", + "version": "5.4.2", + "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.2.tgz", + "integrity": "sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==", "dev": true, "funding": [ { @@ -5722,9 +5722,9 @@ } }, "node_modules/markdown-it": { - "version": "14.3.0", - "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.3.0.tgz", - "integrity": "sha512-RCEsPjR+sr0x+AuYp601tKTkgFG4YEPLCzHST3cQ/fhlJkqAkz1L2/Qbp1j9qw5SBwQHFBoW8+hoN5xssOF0Tw==", + "version": "14.3.2", + "resolved": "https://registry.npmjs.org/markdown-it/-/markdown-it-14.3.2.tgz", + "integrity": "sha512-sHHjZ5fJKlgrG4qns2YwVcdNep35h5fERrfkD2YNsb9UFk0UIHarbiTaHKVMlPuWAoiilyK8Fv/jAm11slsY7Q==", "dev": true, "funding": [ { diff --git a/package.json b/package.json index 0d2f09e..180e5c4 100644 --- a/package.json +++ b/package.json @@ -44,7 +44,8 @@ "overrides": { "fast-uri": "^3.1.7", "form-data": "^4.0.4", - "js-yaml": ">=4.2.0", + "js-yaml": "~5.4.1", + "markdown-it": "~14.3.1", "flatted": "^3.4.2", "postcss": "^8.5.10", "nanoid": "^3.3.18", From 0627b085520e523b0553301e6ec75a183048d2f5 Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Mon, 5 Oct 2026 09:47:21 +0000 Subject: [PATCH 2/2] Ignore org-profile README in markdownlint so lockfile PRs stay green --- .markdownlint-cli2.jsonc | 1 + 1 file changed, 1 insertion(+) diff --git a/.markdownlint-cli2.jsonc b/.markdownlint-cli2.jsonc index e2a3551..2be9175 100644 --- a/.markdownlint-cli2.jsonc +++ b/.markdownlint-cli2.jsonc @@ -5,6 +5,7 @@ ], "ignores": [ "_teaching/**", + "_org_profile/**", "assets/css/academicons-1.7.0/README.md", "comphy-lab-design-system/**" ],