QRun-IO/qbit-email
3
0 Fork 0
Code Issues 1 Pull Requests 4 Actions Packages Projects Releases 10 Wiki Activity

chore(deps): Bump the maven-minor-and-patch group across 1 directory with 11 updates #32

Open
dependabot[bot] wants to merge 1 commits from dependabot/maven/develop/maven-minor-and-patch-8b0e88151c into develop
pull from: dependabot/maven/develop/maven-minor-and-patch-8b0e88151c
merge into: QRun-IO:develop
Conversation 1 Commits 1 Files Changed 3
+198 -198
dependabot[bot] commented 2026-10-21 02:34:52 +00:00 (Migrated from github.com)
Copy link
Copy source

Bumps the maven-minor-and-patch group with 11 updates in the / directory:

Package From To
com.kingsrook:qbit-build-parent 2.0.0 2.1.2
org.commonmark:commonmark 0.27.1 0.31.0
org.commonmark:commonmark-ext-gfm-tables 0.27.1 0.31.0
org.commonmark:commonmark-ext-autolink 0.27.1 0.31.0
org.commonmark:commonmark-ext-gfm-tables 0.27.1 0.31.0
org.commonmark:commonmark-ext-autolink 0.27.1 0.31.0
software.amazon.awssdk:sesv2 2.41.34 2.57.3
com.icegreen:greenmail-junit5 2.0.1 2.1.14
com.h2database:h2 2.2.224 2.5.252
org.postgresql:postgresql 42.7.9 42.7.14
org.testcontainers:testcontainers-postgresql 2.0.3 2.0.5
org.apache.maven.plugins:maven-checkstyle-plugin 3.3.1 3.6.0
org.apache.maven:apache-maven 3.9.11 3.10.0

Updates com.kingsrook:qbit-build-parent from 2.0.0 to 2.1.2

Release notes

Sourced from com.kingsrook:qbit-build-parent's releases.

Build Parent and Guardrails 2.1.2

com.kingsrook:qbit-build-parent:2.1.2 and com.kingsrook:qbit-guardrails:2.1.2 are published to Maven Central from the signed tag v2.1.2 on main 1630c83.

  • G1 default allow-lists now include qbit-assistant's provider SPI package (com.kingsrook.qbits.assistant.spi), so qbits can depend on the provider API without per-repo allow-list entries (#13).

This is a patch release with no other changes since 2.1.1.

Build Parent and Guardrails 2.1.1

com.kingsrook:qbit-build-parent:2.1.1 and com.kingsrook:qbit-guardrails:2.1.1 are published to Maven Central from the signed tag v2.1.1 on main 699c457.

  • G1 default allow-lists now include qbit-email and its public api package, so qbits can depend on qbit-email without per-repo allow-list entries (#12).

Patch release; no other changes from 2.1.0.

Build Parent and Guardrails 2.1.0

com.kingsrook:qbit-build-parent:2.1.0 and the new com.kingsrook:qbit-guardrails:2.1.0 are published to Maven Central from the signed tag v2.1.0 on main 67fa618 (#10, closes #9).

  • Architecture guardrails G1, G2, G3, G4 and G7 (from QRun-IO/qqq#1150, section 5) ship as qbit-guardrails, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).
  • The parent turns them on: a qbit-guardrails profile, active unless -Dqbit.guardrails.skip=true, runs the *GuardrailTest classes inside each qbit's surefire run and the enforcer at validate.
  • Report-first: every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.

Use com.kingsrook:qbit-build-parent:2.1.0 as the Maven parent to adopt them. See the README.

Commits
  • 1630c83 Merge pull request #13 from QRun-IO/feature/assistant-spi-allowlist
  • 00c6f1b feat(guardrails): allow qbit-assistant's provider SPI by default
  • b42f4f3 Bump version to 2.1.1 [skip ci]
  • 699c457 Merge pull request #12 from QRun-IO/feature/email-api-allowlist
  • 574a169 ci: re-run after a ChromeDriver install flake
  • 0f54482 feat(guardrails): allow qbit-email's published API by default
  • 736b796 Merge pull request #11 from QRun-IO/feature/ga-only-tag-filter-main
  • a4035aa ci: fix regex escaping in the GA tag filter
  • 52706aa ci: publish_release only on GA tags (port of #7 to main)
  • 67fa618 Merge pull request #10 from QRun-IO/feature/architecture-guardrails
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark from 0.27.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting

... (truncated)

Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark-ext-gfm-tables from 0.27.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark-ext-gfm-tables's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark-ext-gfm-tables's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting

... (truncated)

Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark-ext-autolink from 0.27.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark-ext-autolink's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark-ext-autolink's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting

... (truncated)

Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark-ext-gfm-tables from 0.27.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark-ext-gfm-tables's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark-ext-gfm-tables's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting

... (truncated)

Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates org.commonmark:commonmark-ext-autolink from 0.27.1 to 0.31.0

Release notes

Sourced from org.commonmark:commonmark-ext-autolink's releases.

v0.31.0

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

commonmark-java 0.30.1

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

commonmark-java 0.30.0

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see maxInlineNesting above). This can happen with emphasis, e.g. "*".repeat(n) + "x" + "*".repeat(n) or "*a ".repeat(n) + " b*".repeat(n), as well as with images, e.g. "![".repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + "x" + "](u)".repeat(n)

... (truncated)

Changelog

Sourced from org.commonmark:commonmark-ext-autolink's changelog.

[0.31.0] - 2026-10-22

Changed

  • To get link text in LinkProcessor, Scanner needs to be passed to LinkInfo#text now

Fixed

  • Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (#460)
  • Keep partially consumed tab when an HTML block starts or continues in a block quote (#462)
  • Make list loose for blank line after HTML block or indented code (#463)
  • Allow info string of fenced code to start with the other fence character (#464)
  • Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters
  • Fix quadratic runtime for parsing deeply nested image brackets

[0.30.1] - 2026-10-11

Changed

  • Improve MarkdownRenderer performance by appending unescaped spans in bulk (#456)

Fixed

  • Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (#459)

[0.30.0] - 2026-08-06

Added

  • New option lineSeparator for MarkdownRenderer.Builder to change the default line separator from \n (e.g. to \r\n) (#442)
  • YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (#391)

Changed

  • Tables extension: Limit max number of parsed table cells by default (1 million cells), see option maxCells in TablesExtension.Builder. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.
  • The default for maxOpenBlockParsers for Parser.Builder is now 100; configure the option to remove the limit.
  • Limit how deeply inline nodes may nest by default (100), see option maxInlineNesting in Parser.Builder; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. * or the ins extension's +) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.

Fixed

  • Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished):
    • Inline HTML like "x <!--".repeat(100_000) (#447)
    • Autolink starts like "<".repeat(100_000)
    • Emphasis like "a**b" + "c* ".repeat(100_000)
    • Backticks runs of different lengths
  • Fix stack overflow errors when parsing pathological inputs with repeated syntax:
    • HTML block attributes
    • Autolink email addresses
    • Deeply nested emphasis
  • Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting

... (truncated)

Commits
  • 210a182 [maven-release-plugin] prepare release commonmark-parent-0.31.0
  • b678d65 mvn versions:set -DnewVersion=0.31.0-SNAPSHOT
  • 9ed1e0a Prepare CHANGELOG for version 0.31.0
  • db9a549 Fix quadratic runtime for parsing deeply nested image brackets
  • a78b400 Fix for large number of lines starting with block opening characters
  • 0f6434a Merge pull request #464 from ybai08/fix-fence-info-with-other-fence-char
  • cf964f1 Merge pull request #463 from ybai08/fix-loose-list-blank-line-after-html-block
  • 4f4f1e7 Merge pull request #462 from Shaisolaris/fix-html-block-partial-tab
  • e4589e6 Merge pull request #465 from commonmark/issue-460
  • 0982a26 Fix title/source spans for link reference definitions with unclosed titles
  • Additional commits viewable in compare view

Updates software.amazon.awssdk:sesv2 from 2.41.34 to 2.57.3

Updates com.icegreen:greenmail-junit5 from 2.0.1 to 2.1.14

Release notes

Sourced from com.icegreen:greenmail-junit5's releases.

2.1.14

What's Changed

Bugfixes

Bumps the maven-minor-and-patch group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [com.kingsrook:qbit-build-parent](https://github.com/Kingsrook/qbit-bom) | `2.0.0` | `2.1.2` | | [org.commonmark:commonmark](https://github.com/commonmark/commonmark-java) | `0.27.1` | `0.31.0` | | [org.commonmark:commonmark-ext-gfm-tables](https://github.com/commonmark/commonmark-java) | `0.27.1` | `0.31.0` | | [org.commonmark:commonmark-ext-autolink](https://github.com/commonmark/commonmark-java) | `0.27.1` | `0.31.0` | | [org.commonmark:commonmark-ext-gfm-tables](https://github.com/commonmark/commonmark-java) | `0.27.1` | `0.31.0` | | [org.commonmark:commonmark-ext-autolink](https://github.com/commonmark/commonmark-java) | `0.27.1` | `0.31.0` | | software.amazon.awssdk:sesv2 | `2.41.34` | `2.57.3` | | [com.icegreen:greenmail-junit5](https://github.com/greenmail-mail-test/greenmail) | `2.0.1` | `2.1.14` | | [com.h2database:h2](https://github.com/h2database/h2database) | `2.2.224` | `2.5.252` | | [org.postgresql:postgresql](https://github.com/pgjdbc/pgjdbc) | `42.7.9` | `42.7.14` | | [org.testcontainers:testcontainers-postgresql](https://github.com/testcontainers/testcontainers-java) | `2.0.3` | `2.0.5` | | [org.apache.maven.plugins:maven-checkstyle-plugin](https://github.com/apache/maven-checkstyle-plugin) | `3.3.1` | `3.6.0` | | org.apache.maven:apache-maven | `3.9.11` | `3.10.0` | Updates `com.kingsrook:qbit-build-parent` from 2.0.0 to 2.1.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kingsrook/qbit-bom/releases">com.kingsrook:qbit-build-parent's releases</a>.</em></p> <blockquote> <h2>Build Parent and Guardrails 2.1.2</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.2</code> and <code>com.kingsrook:qbit-guardrails:2.1.2</code> are published to Maven Central from the signed tag <code>v2.1.2</code> on main <code>1630c83</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-assistant's provider SPI package (<code>com.kingsrook.qbits.assistant.spi</code>), so qbits can depend on the provider API without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/13">#13</a>).</li> </ul> <p>This is a patch release with no other changes since 2.1.1.</p> <h2>Build Parent and Guardrails 2.1.1</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.1</code> and <code>com.kingsrook:qbit-guardrails:2.1.1</code> are published to Maven Central from the signed tag <code>v2.1.1</code> on main <code>699c457</code>.</p> <ul> <li><strong>G1 default allow-lists</strong> now include qbit-email and its public api package, so qbits can depend on <code>qbit-email</code> without per-repo allow-list entries (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/12">#12</a>).</li> </ul> <p>Patch release; no other changes from 2.1.0.</p> <h2>Build Parent and Guardrails 2.1.0</h2> <p><code>com.kingsrook:qbit-build-parent:2.1.0</code> and the new <code>com.kingsrook:qbit-guardrails:2.1.0</code> are published to Maven Central from the signed tag <code>v2.1.0</code> on main <code>67fa618</code> (<a href="https://redirect.github.com/QRun-IO/qbit-bom/pull/10">#10</a>, closes <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/9">#9</a>).</p> <ul> <li><strong>Architecture guardrails G1, G2, G3, G4 and G7</strong> (from <a href="https://redirect.github.com/QRun-IO/qqq/issues/1150">QRun-IO/qqq#1150</a>, section 5) ship as <code>qbit-guardrails</code>, an ArchUnit-based test jar with no QQQ dependency. G5 (no HTML widgets) waits for core typed widgets (qqq#1151).</li> <li><strong>The parent turns them on:</strong> a <code>qbit-guardrails</code> profile, active unless <code>-Dqbit.guardrails.skip=true</code>, runs the <code>*GuardrailTest</code> classes inside each qbit's surefire run and the enforcer at <code>validate</code>.</li> <li><strong>Report-first:</strong> every rule only reports by default, so adopting 2.1.0 doesn't break existing qbits.</li> </ul> <p>Use <code>com.kingsrook:qbit-build-parent:2.1.0</code> as the Maven parent to adopt them. See the <a href="https://github.com/QRun-IO/qbit-bom/blob/v2.1.0/README.md">README</a>.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/1630c830fe943a0857e0c149c8e640622a1960e8"><code>1630c83</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/13">#13</a> from QRun-IO/feature/assistant-spi-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/00c6f1bb5557184f803f16a65e06b67970204158"><code>00c6f1b</code></a> feat(guardrails): allow qbit-assistant's provider SPI by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/b42f4f30a2003c57341ff44313061c494f0ee936"><code>b42f4f3</code></a> Bump version to 2.1.1 [skip ci]</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/699c457f374e85120e7a5c3e665afcb4e6bcca24"><code>699c457</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/12">#12</a> from QRun-IO/feature/email-api-allowlist</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/574a1696b6e5c3eb3cf8af7490df96c39f7bba72"><code>574a169</code></a> ci: re-run after a ChromeDriver install flake</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/0f5448256c77647fa6c18ae1fbca108142f97e36"><code>0f54482</code></a> feat(guardrails): allow qbit-email's published API by default</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/736b796d48f7cea65bfde28fce19f4ed3a307936"><code>736b796</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/11">#11</a> from QRun-IO/feature/ga-only-tag-filter-main</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/a4035aa8d714f659ec49b1664a639927bae4f217"><code>a4035aa</code></a> ci: fix regex escaping in the GA tag filter</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/52706aa987f881ebc39a25a941ff0b6b300760bb"><code>52706aa</code></a> ci: publish_release only on GA tags (port of <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/7">#7</a> to main)</li> <li><a href="https://github.com/QRun-IO/qbit-bom/commit/67fa618d37d037f5689c8bf132240ed9266db89f"><code>67fa618</code></a> Merge pull request <a href="https://redirect.github.com/Kingsrook/qbit-bom/issues/10">#10</a> from QRun-IO/feature/architecture-guardrails</li> <li>Additional commits viewable in <a href="https://github.com/Kingsrook/qbit-bom/compare/v2.0.0...v2.1.2">compare view</a></li> </ul> </details> <br /> Updates `org.commonmark:commonmark` from 0.27.1 to 0.31.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/releases">org.commonmark:commonmark's releases</a>.</em></p> <blockquote> <h2>v0.31.0</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>commonmark-java 0.30.1</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>commonmark-java 0.30.0</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see <code>maxInlineNesting</code> above). This can happen with emphasis, e.g. <code>&quot;*&quot;.repeat(n) + &quot;x&quot; + &quot;*&quot;.repeat(n)</code> or <code>&quot;*a &quot;.repeat(n) + &quot; b*&quot;.repeat(n)</code>, as well as with images, e.g. <code>&quot;![&quot;.repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + &quot;x&quot; + &quot;](u)&quot;.repeat(n)</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md">org.commonmark:commonmark's changelog</a>.</em></p> <blockquote> <h2>[0.31.0] - 2026-10-22</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>[0.30.1] - 2026-10-11</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>[0.30.0] - 2026-08-06</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/commonmark/commonmark-java/commit/210a18286b023ab0e18e62c0fbec86690a9f57cd"><code>210a182</code></a> [maven-release-plugin] prepare release commonmark-parent-0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/b678d65e788a8f68d536e2b470f0ebad4278a044"><code>b678d65</code></a> mvn versions:set -DnewVersion=0.31.0-SNAPSHOT</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/9ed1e0ae28bc76b684e807f05fcb0e6f63c05700"><code>9ed1e0a</code></a> Prepare CHANGELOG for version 0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/db9a54905e4d3daf8ad567084c504b859442c3b3"><code>db9a549</code></a> Fix quadratic runtime for parsing deeply nested image brackets</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/a78b400240d2cd874048ef2a2388ba6f0b8db4ea"><code>a78b400</code></a> Fix for large number of lines starting with block opening characters</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0f6434a8c8714050d234275d60348a3a1cbaee27"><code>0f6434a</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a> from ybai08/fix-fence-info-with-other-fence-char</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/cf964f161dc7f34713ca8a886807ce9772b6efa7"><code>cf964f1</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a> from ybai08/fix-loose-list-blank-line-after-html-block</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/4f4f1e731ab4bacbfbcd6cb10067572478e6f3d0"><code>4f4f1e7</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a> from Shaisolaris/fix-html-block-partial-tab</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/e4589e6c4bf0e34baae97c49966f1a84eefb217d"><code>e4589e6</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/465">#465</a> from commonmark/issue-460</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0982a26f8788b3681fd3f1fd412b5be2e42c9342"><code>0982a26</code></a> Fix title/source spans for link reference definitions with unclosed titles</li> <li>Additional commits viewable in <a href="https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.27.1...commonmark-parent-0.31.0">compare view</a></li> </ul> </details> <br /> Updates `org.commonmark:commonmark-ext-gfm-tables` from 0.27.1 to 0.31.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/releases">org.commonmark:commonmark-ext-gfm-tables's releases</a>.</em></p> <blockquote> <h2>v0.31.0</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>commonmark-java 0.30.1</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>commonmark-java 0.30.0</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see <code>maxInlineNesting</code> above). This can happen with emphasis, e.g. <code>&quot;*&quot;.repeat(n) + &quot;x&quot; + &quot;*&quot;.repeat(n)</code> or <code>&quot;*a &quot;.repeat(n) + &quot; b*&quot;.repeat(n)</code>, as well as with images, e.g. <code>&quot;![&quot;.repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + &quot;x&quot; + &quot;](u)&quot;.repeat(n)</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md">org.commonmark:commonmark-ext-gfm-tables's changelog</a>.</em></p> <blockquote> <h2>[0.31.0] - 2026-10-22</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>[0.30.1] - 2026-10-11</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>[0.30.0] - 2026-08-06</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/commonmark/commonmark-java/commit/210a18286b023ab0e18e62c0fbec86690a9f57cd"><code>210a182</code></a> [maven-release-plugin] prepare release commonmark-parent-0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/b678d65e788a8f68d536e2b470f0ebad4278a044"><code>b678d65</code></a> mvn versions:set -DnewVersion=0.31.0-SNAPSHOT</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/9ed1e0ae28bc76b684e807f05fcb0e6f63c05700"><code>9ed1e0a</code></a> Prepare CHANGELOG for version 0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/db9a54905e4d3daf8ad567084c504b859442c3b3"><code>db9a549</code></a> Fix quadratic runtime for parsing deeply nested image brackets</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/a78b400240d2cd874048ef2a2388ba6f0b8db4ea"><code>a78b400</code></a> Fix for large number of lines starting with block opening characters</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0f6434a8c8714050d234275d60348a3a1cbaee27"><code>0f6434a</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a> from ybai08/fix-fence-info-with-other-fence-char</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/cf964f161dc7f34713ca8a886807ce9772b6efa7"><code>cf964f1</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a> from ybai08/fix-loose-list-blank-line-after-html-block</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/4f4f1e731ab4bacbfbcd6cb10067572478e6f3d0"><code>4f4f1e7</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a> from Shaisolaris/fix-html-block-partial-tab</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/e4589e6c4bf0e34baae97c49966f1a84eefb217d"><code>e4589e6</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/465">#465</a> from commonmark/issue-460</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0982a26f8788b3681fd3f1fd412b5be2e42c9342"><code>0982a26</code></a> Fix title/source spans for link reference definitions with unclosed titles</li> <li>Additional commits viewable in <a href="https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.27.1...commonmark-parent-0.31.0">compare view</a></li> </ul> </details> <br /> Updates `org.commonmark:commonmark-ext-autolink` from 0.27.1 to 0.31.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/releases">org.commonmark:commonmark-ext-autolink's releases</a>.</em></p> <blockquote> <h2>v0.31.0</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>commonmark-java 0.30.1</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>commonmark-java 0.30.0</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see <code>maxInlineNesting</code> above). This can happen with emphasis, e.g. <code>&quot;*&quot;.repeat(n) + &quot;x&quot; + &quot;*&quot;.repeat(n)</code> or <code>&quot;*a &quot;.repeat(n) + &quot; b*&quot;.repeat(n)</code>, as well as with images, e.g. <code>&quot;![&quot;.repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + &quot;x&quot; + &quot;](u)&quot;.repeat(n)</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md">org.commonmark:commonmark-ext-autolink's changelog</a>.</em></p> <blockquote> <h2>[0.31.0] - 2026-10-22</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>[0.30.1] - 2026-10-11</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>[0.30.0] - 2026-08-06</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/commonmark/commonmark-java/commit/210a18286b023ab0e18e62c0fbec86690a9f57cd"><code>210a182</code></a> [maven-release-plugin] prepare release commonmark-parent-0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/b678d65e788a8f68d536e2b470f0ebad4278a044"><code>b678d65</code></a> mvn versions:set -DnewVersion=0.31.0-SNAPSHOT</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/9ed1e0ae28bc76b684e807f05fcb0e6f63c05700"><code>9ed1e0a</code></a> Prepare CHANGELOG for version 0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/db9a54905e4d3daf8ad567084c504b859442c3b3"><code>db9a549</code></a> Fix quadratic runtime for parsing deeply nested image brackets</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/a78b400240d2cd874048ef2a2388ba6f0b8db4ea"><code>a78b400</code></a> Fix for large number of lines starting with block opening characters</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0f6434a8c8714050d234275d60348a3a1cbaee27"><code>0f6434a</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a> from ybai08/fix-fence-info-with-other-fence-char</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/cf964f161dc7f34713ca8a886807ce9772b6efa7"><code>cf964f1</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a> from ybai08/fix-loose-list-blank-line-after-html-block</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/4f4f1e731ab4bacbfbcd6cb10067572478e6f3d0"><code>4f4f1e7</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a> from Shaisolaris/fix-html-block-partial-tab</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/e4589e6c4bf0e34baae97c49966f1a84eefb217d"><code>e4589e6</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/465">#465</a> from commonmark/issue-460</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0982a26f8788b3681fd3f1fd412b5be2e42c9342"><code>0982a26</code></a> Fix title/source spans for link reference definitions with unclosed titles</li> <li>Additional commits viewable in <a href="https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.27.1...commonmark-parent-0.31.0">compare view</a></li> </ul> </details> <br /> Updates `org.commonmark:commonmark-ext-gfm-tables` from 0.27.1 to 0.31.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/releases">org.commonmark:commonmark-ext-gfm-tables's releases</a>.</em></p> <blockquote> <h2>v0.31.0</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>commonmark-java 0.30.1</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>commonmark-java 0.30.0</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see <code>maxInlineNesting</code> above). This can happen with emphasis, e.g. <code>&quot;*&quot;.repeat(n) + &quot;x&quot; + &quot;*&quot;.repeat(n)</code> or <code>&quot;*a &quot;.repeat(n) + &quot; b*&quot;.repeat(n)</code>, as well as with images, e.g. <code>&quot;![&quot;.repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + &quot;x&quot; + &quot;](u)&quot;.repeat(n)</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md">org.commonmark:commonmark-ext-gfm-tables's changelog</a>.</em></p> <blockquote> <h2>[0.31.0] - 2026-10-22</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>[0.30.1] - 2026-10-11</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>[0.30.0] - 2026-08-06</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/commonmark/commonmark-java/commit/210a18286b023ab0e18e62c0fbec86690a9f57cd"><code>210a182</code></a> [maven-release-plugin] prepare release commonmark-parent-0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/b678d65e788a8f68d536e2b470f0ebad4278a044"><code>b678d65</code></a> mvn versions:set -DnewVersion=0.31.0-SNAPSHOT</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/9ed1e0ae28bc76b684e807f05fcb0e6f63c05700"><code>9ed1e0a</code></a> Prepare CHANGELOG for version 0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/db9a54905e4d3daf8ad567084c504b859442c3b3"><code>db9a549</code></a> Fix quadratic runtime for parsing deeply nested image brackets</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/a78b400240d2cd874048ef2a2388ba6f0b8db4ea"><code>a78b400</code></a> Fix for large number of lines starting with block opening characters</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0f6434a8c8714050d234275d60348a3a1cbaee27"><code>0f6434a</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a> from ybai08/fix-fence-info-with-other-fence-char</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/cf964f161dc7f34713ca8a886807ce9772b6efa7"><code>cf964f1</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a> from ybai08/fix-loose-list-blank-line-after-html-block</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/4f4f1e731ab4bacbfbcd6cb10067572478e6f3d0"><code>4f4f1e7</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a> from Shaisolaris/fix-html-block-partial-tab</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/e4589e6c4bf0e34baae97c49966f1a84eefb217d"><code>e4589e6</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/465">#465</a> from commonmark/issue-460</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0982a26f8788b3681fd3f1fd412b5be2e42c9342"><code>0982a26</code></a> Fix title/source spans for link reference definitions with unclosed titles</li> <li>Additional commits viewable in <a href="https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.27.1...commonmark-parent-0.31.0">compare view</a></li> </ul> </details> <br /> Updates `org.commonmark:commonmark-ext-autolink` from 0.27.1 to 0.31.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/releases">org.commonmark:commonmark-ext-autolink's releases</a>.</em></p> <blockquote> <h2>v0.31.0</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>commonmark-java 0.30.1</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>commonmark-java 0.30.0</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting depth during parsing (see <code>maxInlineNesting</code> above). This can happen with emphasis, e.g. <code>&quot;*&quot;.repeat(n) + &quot;x&quot; + &quot;*&quot;.repeat(n)</code> or <code>&quot;*a &quot;.repeat(n) + &quot; b*&quot;.repeat(n)</code>, as well as with images, e.g. <code>&quot;![&quot;.repeat(https://github.com/commonmark/commonmark-java/blob/HEAD/n) + &quot;x&quot; + &quot;](u)&quot;.repeat(n)</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/commonmark/commonmark-java/blob/main/CHANGELOG.md">org.commonmark:commonmark-ext-autolink's changelog</a>.</em></p> <blockquote> <h2>[0.31.0] - 2026-10-22</h2> <h3>Changed</h3> <ul> <li>To get link text in <code>LinkProcessor</code>, <code>Scanner</code> needs to be passed to <code>LinkInfo#text</code> now</li> </ul> <h3>Fixed</h3> <ul> <li>Correctly parse unclosed titles for link reference definitions, fix source spans in resulting paragraph (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/460">#460</a>)</li> <li>Keep partially consumed tab when an HTML block starts or continues in a block quote (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a>)</li> <li>Make list loose for blank line after HTML block or indented code (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a>)</li> <li>Allow info string of fenced code to start with the other fence character (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a>)</li> <li>Fix quadratic runtime for a large number of lines in a single paragraph starting with potential block opening characters</li> <li>Fix quadratic runtime for parsing deeply nested image brackets</li> </ul> <h2>[0.30.1] - 2026-10-11</h2> <h3>Changed</h3> <ul> <li>Improve MarkdownRenderer performance by appending unescaped spans in bulk (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/456">#456</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Fix parsing code spans after an unclosed backtick string; a regression that was introduced in the previous version (0.30.0) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/459">#459</a>)</li> </ul> <h2>[0.30.0] - 2026-08-06</h2> <h3>Added</h3> <ul> <li>New option <code>lineSeparator</code> for <code>MarkdownRenderer.Builder</code> to change the default line separator from <code>\n</code> (e.g. to <code>\r\n</code>) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/442">#442</a>)</li> <li>YAML front matter extension: Support extracting the raw YAML content so that you can do the YAML parsing using a library (instead of the limited built-in parsing) (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/391">#391</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Tables extension: Limit max number of parsed table cells by default (1 million cells), see option <code>maxCells</code> in <code>TablesExtension.Builder</code>. Parsing will throw an error if the limit would be exceeded, to protect against malicious input.</li> <li>The default for <code>maxOpenBlockParsers</code> for <code>Parser.Builder</code> is now 100; configure the option to remove the limit.</li> <li>Limit how deeply inline nodes may nest by default (100), see option <code>maxInlineNesting</code> in <code>Parser.Builder</code>; configure the option to remove the limit. This covers emphasis-like delimiters (e.g. <code>*</code> or the ins extension's <code>+</code>) as well as images, which can otherwise nest arbitrarily deep for a small amount of input. Anything over the limit is treated as plain text instead.</li> </ul> <h3>Fixed</h3> <ul> <li>Fix quadratic runtime on various pathological inputs (where inline syntax to start a node is used repeatedly but never finished): <ul> <li>Inline HTML like <code>&quot;x &lt;!--&quot;.repeat(100_000)</code> (<a href="https://redirect.github.com/commonmark/commonmark-java/issues/447">#447</a>)</li> <li>Autolink starts like <code>&quot;&lt;&quot;.repeat(100_000)</code></li> <li>Emphasis like <code>&quot;a**b&quot; + &quot;c* &quot;.repeat(100_000)</code></li> <li>Backticks runs of different lengths</li> </ul> </li> <li>Fix stack overflow errors when parsing pathological inputs with repeated syntax: <ul> <li>HTML block attributes</li> <li>Autolink email addresses</li> <li>Deeply nested emphasis</li> </ul> </li> <li>Fix stack overflow error when rendering/visiting deeply nested inline nodes, by capping nesting</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/commonmark/commonmark-java/commit/210a18286b023ab0e18e62c0fbec86690a9f57cd"><code>210a182</code></a> [maven-release-plugin] prepare release commonmark-parent-0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/b678d65e788a8f68d536e2b470f0ebad4278a044"><code>b678d65</code></a> mvn versions:set -DnewVersion=0.31.0-SNAPSHOT</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/9ed1e0ae28bc76b684e807f05fcb0e6f63c05700"><code>9ed1e0a</code></a> Prepare CHANGELOG for version 0.31.0</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/db9a54905e4d3daf8ad567084c504b859442c3b3"><code>db9a549</code></a> Fix quadratic runtime for parsing deeply nested image brackets</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/a78b400240d2cd874048ef2a2388ba6f0b8db4ea"><code>a78b400</code></a> Fix for large number of lines starting with block opening characters</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0f6434a8c8714050d234275d60348a3a1cbaee27"><code>0f6434a</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/464">#464</a> from ybai08/fix-fence-info-with-other-fence-char</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/cf964f161dc7f34713ca8a886807ce9772b6efa7"><code>cf964f1</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/463">#463</a> from ybai08/fix-loose-list-blank-line-after-html-block</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/4f4f1e731ab4bacbfbcd6cb10067572478e6f3d0"><code>4f4f1e7</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/462">#462</a> from Shaisolaris/fix-html-block-partial-tab</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/e4589e6c4bf0e34baae97c49966f1a84eefb217d"><code>e4589e6</code></a> Merge pull request <a href="https://redirect.github.com/commonmark/commonmark-java/issues/465">#465</a> from commonmark/issue-460</li> <li><a href="https://github.com/commonmark/commonmark-java/commit/0982a26f8788b3681fd3f1fd412b5be2e42c9342"><code>0982a26</code></a> Fix title/source spans for link reference definitions with unclosed titles</li> <li>Additional commits viewable in <a href="https://github.com/commonmark/commonmark-java/compare/commonmark-parent-0.27.1...commonmark-parent-0.31.0">compare view</a></li> </ul> </details> <br /> Updates `software.amazon.awssdk:sesv2` from 2.41.34 to 2.57.3 Updates `com.icegreen:greenmail-junit5` from 2.0.1 to 2.1.14 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/greenmail-mail-test/greenmail/releases">com.icegreen:greenmail-junit5's releases</a>.</em></p> <blockquote> <h2>2.1.14</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <h3>Bugfixes</h3> <ul> <li>Use first content-disposition header when a message repeats it by <a href="https://github.com/netliomax25-code"><code>@​netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1059">greenmail-mail-test/greenmail#1059</a></li> <li>Fail malformed SMTP and IMAP AUTH without closing the connection by <a href="https://github.com/netliomax25-code"><code>@​netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1063">greenmail-mail-test/greenmail#1063</a></li> <li>Improve SASL authentication failure logging by <a href="https://github.com/marcelmay"><code>@​marcelmay</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1067">greenmail-mail-test/greenmail#1067</a></li> <li>Return a snapshot from ListBasedStoredMessageCollection.getMessages by <a href="https://github.com/netliomax25-code"><code>@​netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1068">greenmail-mail-test/greenmail#1068</a></li> <li>Reject malformed SORT criteria with BAD instead of closing connection by <a href="https://github.com/netliomax25-code"><code>@​netliomax25-code</code></a> in <a href="https://redirect.github.com/greenmail-mail-test/greenmail/pull/1069">greenmail-mail-test/greenmail#1069</a></li> <li>Fix Maven compiler warning of bootstrap class path not set in conjunct... _Description has been truncated_
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-21 02:34:52 +00:00
This pull request has changes conflicting with the target branch.
  • pom.xml
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/develop/maven-minor-and-patch-8b0e88151c:dependabot/maven/develop/maven-minor-and-patch-8b0e88151c
git checkout dependabot/maven/develop/maven-minor-and-patch-8b0e88151c
Sign in to join this conversation.
Reviewers
No Reviewers
KofTwentyTwo
Labels
Clear labels
bug
Something isn't working
 dependencies
documentation
Improvements or additions to documentation
 duplicate
This issue or pull request already exists
 enhancement
New feature or request
 github_actions
Pull requests that update GitHub Actions code
 good first issue
Good for newcomers
 help wanted
Extra attention is needed
 invalid
This doesn't seem right
 java
Pull requests that update java code
 question
Further information is requested
 release:rc
Merging this develop PR cuts the next release candidate
 secuurity
wontfix
This will not be worked on
No labels dependencies java
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
forge-recovery (Forge Recovery) james.maes (James Maes)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: QRun-IO/qbit-email#32