[dependabot]

Bumps marked from 18.1.2 to 18.2.0.

Release notes

Sourced from marked's releases.

v18.2.0

18.2.0 (2026-11-09)

Bug Fixes

• keep hard line breaks in image alt text (#4187) (ed54c54)
• let emphasis open after the other delimiter character (#4169) (219492a)
• let emphasis open and close in angle brackets that are not html (#4190) (7bfa1f7)
• preserve zero from named extension renderers (#4199) (b81a00a)
• text after a heading or code block in a nested list item is pulled into the outer item (#4179) (4cb767a)

Features

• add lastToken to lexer state (#4160) (e4ab77f)

v18.1.3

18.1.3 (2026-11-02)

Bug Fixes

• allow trailing tabs after a setext heading underline (#4152) (1f1b480)
• avoid quadratic scan for unmatched emphasis delimiters (#4103) (eab1e48), closes #4099
• await promise arrays from walkTokens extensions (#4153) (c38704c)
• cli: honor defaults and config when outputting tokens (#4146) (9470e8f)
• collapse internal whitespace when normalizing link labels (#4157) (02c73e8)
• do not allow a blank line inside a link reference definition label (#4165) (f3d21af)
• don't treat an escaped ) or quote as an inline link or title closer (#4151) (9cb84e0)
• end a list item before a lazy line after an html block (#4159) (7ba42f4)
• end blockquote before a lazy line after a table (#4161) (e7dcf52)
• isolate extension names from Object.prototype (#4177) (5cb03bd)
• keep a block quote open after a lazy line in a nested block quote (#4175) (1d7272f)
• only close a code fence with the opening fence character (#4164) (1d4d8fe)
• preserve zero-valued custom renderer results (#4162) (e43ceef)
• recognize task list items when a tab follows the checkbox (#4163) (64a299d)
• start a GFM www autolink only at a word boundary (#4166) (84beefb)

Performance Improvements

• fix backtracking in padantic html (#4173) (2d4a23c)

Commits

• afba454 chore(release): 18.2.0 [skip ci]
• 7220efa chore(deps-dev): bump rimraf from 6.1.3 to 6.1.4 (#4212)
• 6fd880c chore(deps-dev): bump tslib from 2.8.1 to 2.9.1 (#4211)
• 8ac3e20 docs: list --version in the man page and fix --no- option spelling (#4192)
• e4ab77f feat: add lastToken to lexer state (#4160)
• 219492a fix: let emphasis open after the other delimiter character (#4169)
• b81a00a fix: preserve zero from named extension renderers (#4199)
• 7bfa1f7 fix: let emphasis open and close in angle brackets that are not html (#4190)
• 4cb767a fix: text after a heading or code block in a nested list item is pulled into ...
• ed54c54 fix: keep hard line breaks in image alt text (#4187)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)