X Tutup
Skip to content

chore(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.8.2#13045

Open
dependabot[bot] wants to merge 1 commit intotrunkfrom
dependabot/go_modules/github.com/yuin/goldmark-1.8.2
Open

chore(deps): bump github.com/yuin/goldmark from 1.7.16 to 1.8.2#13045
dependabot[bot] wants to merge 1 commit intotrunkfrom
dependabot/go_modules/github.com/yuin/goldmark-1.8.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps github.com/yuin/goldmark from 1.7.16 to 1.8.2.

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.2

fix: setext headings positions

v1.8.1

fix: block positions

v1.8.0

  • feat: add position information to all nodes
    • add position information to all nodes, including inline nodes and link reference definition nodes.
    • Now link reference definition nodes are represented as a new node type.
    • Link and image nodes have a new field Reference which is a pointer to the reference link if this link is a reference link. This field is nil for non-reference links.

v1.7.17 release

Full Changelog: yuin/goldmark@v1.7.16...v1.7.17

Commits
  • 379bf24 fix: setext headings positions
  • e8f2337 fix: block positions
  • dfa1ae1 feat: add position information to all nodes
  • cb46bbc fix: prevent XSS by escaping dangerous URLs in links and images
  • d8b123c refactor: simplify codes
  • db34c99 Merge pull request #535 from Sebbito/master
  • 5a2a2bf Merge pull request #545 from maxatome/fix-table-panic
  • 9aca462 fix(table): if table cell attribute is a string, a panic occurs
  • ea86b36 Fix doc error in markdown.go
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/yuin/goldmark](https://github.com/yuin/goldmark) from 1.7.16 to 1.8.2.
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.7.16...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 26, 2026 14:03
@dependabot dependabot bot requested a review from williammartin March 26, 2026 14:03
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants

X Tutup