[dependabot]

Bumps the pip group with 6 updates:

Package	From	To
markdown	3.8.2	3.11.2
pygments	2.20.0	2.21.0
pymdown-extensions	11.0.2	12.3
mkdocs-exclude-search	0.6.6	0.6.7
mkdocs-include-markdown-plugin	7.1.8	7.3.0
mkdocs-redirects	1.2.1	1.2.3

Updates markdown from 3.8.2 to 3.11.2

Release notes

Sourced from markdown's releases.

Release 3.11.2

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

Release 3.11.1

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

Release 3.11.0

Changed

• Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).
• Officially support Python 3.15 and drop support for Python 3.10
• Walk backtick runs in BacktickInlineProcessor without a regex (#1620).
• Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

• Ensure removing Abbreviations does not raise an error (#1634).
• Fix an issue with excessive backtracking when matching inline code blocks (#1617).
• md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).
• Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).
• Document attr_list usage for def_list (#1123).

Release 3.10.3

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

Release 3.10.2

Fixed

... (truncated)

Changelog

Sourced from markdown's changelog.

[3.11.2] - 2026-10-19

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

[3.11.1] - 2026-10-13

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

[3.11.0] - 2026-09-25

Changed

• Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).
• Officially support Python 3.15 and drop support for Python 3.10
• Walk backtick runs in BacktickInlineProcessor without a regex (#1620).
• Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

• Ensure removing Abbreviations does not raise an error (#1634).
• Fix an issue with excessive backtracking when matching inline code blocks (#1617).
• md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).
• Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).
• Document attr_list usage for def_list (#1123).

[3.10.3] - 2026-07-30

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.

... (truncated)

Commits

• b41e0aa Bump version to 3.11.2
• 934c53e Add checklist of parts to PR template
• 2249ffd Update AI Policy
• a27428b Sanitize attribute names in fenced_code and legacy_attrs
• 90cdcf5 Add fixed category to changelog
• 97233ef Revert enforcement of CommonMark punctuation rules
• 2258b48 Bump version to 3.11.1
• 6f825aa Rewrite emphasis handling
• 0bf535b Keep a comment inside raw inline HTML in the same paragraph
• 3ade80d Add playground to docs
• Additional commits viewable in compare view

Updates pygments from 2.20.0 to 2.21.0

Release notes

Sourced from pygments's releases.

2.21.0

• New lexers:

  • BitBake (#3103)
  • Caddyfile (#3225)
  • CEL (#3048)
  • PureScript (#1077, #3054)

• Updated lexers:

  • Bash: Fix coloured keyword at the beginning of a name (#2926)
  • Boogie: Add missing Boogie and Civl Verifier keywords (#3156)
  • C#:
    • Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)
    • Support dollar-prefixed and multi-quote raw strings (#3129, #2897)
    • Recognize union (#3182)
  • C/C++:
    • Add C23/C++26 attributes (#3084)
    • Add more C2Y keywords (#3092)
    • Highlight a function following a namespace body (#2928)
    • Fix C/C++ lexer support for multiline pre-processor comments (#3051)
    • Add .ipp as a file extension (#3141, #1008)
  • Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)
  • Csound: Add missing opcode parameter type letter (#3161)
  • CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)
  • D: Allow non-ASCII (Unicode) identifiers (#1088)
  • Fish: Fix single quote backslash escape (#3138, #2821)
  • Go: Various lexer improvements (#3199)
  • GoogleSQL: Require a word break after SET (#3167)
  • Hexdump: Only match valid digits (#3200, #2847)
  • JavaScript: Highlight the arguments object (#3146)
  • Jsonnet: Recognize colons in array slice expressions (#2828)
  • JSX: Allow apostrophes in element text (#2816)
  • Julia: Fix rstrings backslash (#3140, #2537)
  • Kotlin: Support companion objects without an explicit name (#2525)
  • Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)
  • Kusto: Recognize member-access dots in dynamic objects (#2779)
  • Lua: Various improvements (#3143)
  • Macaulay2: Update symbols to 1.26.05 (#3120)
  • Markdown:
    • Highlight bold-italics (***...*** and ___...___) (#3067)
    • Fix mention regex to support hyphens in usernames (#3139, #3135)
  • Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for embedded code blocks (#3133)
  • Mathematica: Recognize \[Name] named-character escapes such as \[Nu] instead of emitting an Error token (#3097)

... (truncated)

Changelog

Sourced from pygments's changelog.

Version 2.21.0

(released August 17th, 2026)

• New lexers:

  • BitBake (#3103)
  • Caddyfile (#3225)
  • CEL (#3048)
  • PureScript (#1077, #3054)

• Updated lexers:

  • Bash: Fix coloured keyword at the beginning of a name (#2926)
  • Boogie: Add missing Boogie and Civl Verifier keywords (#3156)
  • C#:
    • Recognize interpolated verbatim strings with either $@ or @$ prefixes (#2685)
    • Support dollar-prefixed and multi-quote raw strings (#3129, #2897)
    • Recognize union (#3182)
  • C/C++:
    • Add C23/C++26 attributes (#3084)
    • Add more C2Y keywords (#3092)
    • Highlight a function following a namespace body (#2928)
    • Fix C/C++ lexer support for multiline pre-processor comments (#3051)
    • Add .ipp as a file extension (#3141, #1008)
  • Clojure: Recognize named, octal and unicode character literals such as \space and \o377 as a single token (#979)
  • Csound: Add missing opcode parameter type letter (#3161)
  • CUDA: Derive from the C++ lexer instead of C to highlight C++ constructs such as template, class and namespace (#3127)
  • D: Allow non-ASCII (Unicode) identifiers (#1088)
  • Fish: Fix single quote backslash escape (#3138, #2821)
  • Go: Various lexer improvements (#3199)
  • GoogleSQL: Require a word break after SET (#3167)
  • Hexdump: Only match valid digits (#3200, #2847)
  • JavaScript: Highlight the arguments object (#3146)
  • Jsonnet: Recognize colons in array slice expressions (#2828)
  • JSX: Allow apostrophes in element text (#2816)
  • Julia: Fix rstrings backslash (#3140, #2537)
  • Kotlin: Support companion objects without an explicit name (#2525)
  • Kotlin: Don't let a nullable type marker (?) consume the following character, so Foo?, and a?:b tokenize correctly (#2964)
  • Kusto: Recognize member-access dots in dynamic objects (#2779)
  • Lua: Various improvements (#3143)
  • Macaulay2: Update symbols to 1.26.05 (#3120)
  • Markdown:
    • Highlight bold-italics (***...*** and ___...___) (#3067)
    • Fix mention regex to support hyphens in usernames (#3139, #3135)
  • Markdown, reStructuredText, TiddlyWiki5: Fix wrong token offsets for

... (truncated)

Commits

• a43b45d Get ready for the 2.21.0 release.
• d8f14cb Fix version_added for Purescript.
• 19c5817 Remove superfluous parentheses from PostgresExplainLexer (#3232)
• 9992e09 Merge pull request #3191 from jvoisin/dupes
• bd22577 Fix regexlint warnings after latest update.
• 6a62df1 Release preparation: Update the changelog.
• aabba32 Merge pull request #3221 from jvoisin/alter
• d3441d0 Merge pull request #3225 from jvoisin/caddy
• c593f3f Add a lexer for Caddy
• 0644b53 Simplify single-character regex alternations to character classes
• Additional commits viewable in compare view

Updates pymdown-extensions from 11.0.2 to 12.3

Release notes

Sourced from pymdown-extensions's releases.

12.3

• NEW: BetterEm: Expose a way to disable CommonMark punctuation rules in BetterEm if desired via a new punctuation option.

12.2

• NEW: Add official support for Python 3.15.
• NEW: Tilde, Caret: For backwards compatibility, disable CommonMark punctuation rules by default. If subscript or superscript is disabled in the respective extension, CommonMark rules will be honored again. A new punctuation rule has been added to force CommonMark rules. When done, people will need to be aware of punctuation when subscript or superscript is enabled and escape any that violates CommonMark rules.
• NEW: Highlight: Highlight now allows in the auto_title_map specifying the title as a simple string or a dictionary containing the title and the title mode: either text or html, with text being the default. This allows a title to be specified and treated as HTML when the mode is html.
• NEW: SuperFences: Add new title_mode option for Pygments fenced blocks that allows a user to specify a title to be treated as HTML via title_mode="html".

12.1

• NEW: SuperFences: Add optional reset function that can be specified for custom fences.
• FIX: Tilde, Caret: Fix performance for long invalid delimiters.

12.0.1

• FIX: BetterEm: fix a case with new logic.

12.0

• BREAK: BetterEm: Complete rewrite. There may be some subtle differences between legacy behavior and new CommonMark behavior.

  • * and _ emphasis are handled at the same time to provide more natural nesting.
  • More performant.
  • CommonMark compliant.

• BREAK: Tilde, Caret, Mark: Rewritten and now built upon the latest BetterEm logic.

  • When used with BetterEm, Tilde, Caret, and Mark will be added to the same delimiter processor under the hood and will be parsed at the same time as emphasis, allowing for better nesting logic.
  • More performant. Performance issues reported by (@​lexdotdev).
  • Tilde, Caret, Mark: Allow deletion, insertions, and marking mid-word by default. Set smart_delete, smart_insert, or smart_mark, respectively, to enable previous behavior, which prevented mid-word deletion.
  • Tilde, Caret: Add new option no_space to control whether the Pandoc style requirement of "no unescaped spaces" is enabled for subscript and superscript, respectively. no_space is enabled by default.

• NEW: Details, Blocks.Details, Blocks.Admonitions: Allow and handle headers specially in titles.

• NEW: Quotes: Allow and handle headers specially in callout titles.

• NEW: BracketSpan: New extension that allows for the creation of spans using a Pandoc style bracket notation.

• NEW: Arithmatex: Remove deprecated inline_mathjax_preview_format, inline_mathjax_format, and

... (truncated)

Commits

• 24ae2b3 Fix link
• f19f2d1 Allow disabling CommonMark punctuation rules in BetterEm
• a656909 Docs: Fix duplicate word
• 0b90546 Revert "Fix lint"
• 11fbe9f Revert "Drop Python 3.10 support"
• 3b5e585 Docs: Fix grammar
• 91ec2a8 Docs: Fix default admonition/details styling
• 5d7efe4 Docs: update js dependencies
• 195228a Fix lint
• ff07dc2 Drop Python 3.10 support
• Additional commits viewable in compare view

Updates mkdocs-exclude-search from 0.6.6 to 0.6.7

Release notes

Sourced from mkdocs-exclude-search's releases.

0.6.7

• Fixes exclusions having no effect with use_directory_urls: false, the .html page urls did not match any exclude/ignore entry and root level pages were always kept.
• Fixes exclude/ignore given as a single string being iterated character by character.
• Fixes UnicodeDecodeError when reading the search index on platforms with a non-utf-8 default encoding (e.g. Windows).
• Fixes exclude/ignore entries and record locations with multiple # being mishandled.
• Fixes tag page detection (exclude_tags) with the default use_directory_urls: true, where the tags page is located at tags/ instead of tags.html.
• Fixes duplicated entries when resolving named subchapters of the mkdocs nav.
• Fixes the ignore validation message being logged for valid configurations.
• Tests on Python 3.9 to 3.14, requires Python >= 3.9.

Changelog

Sourced from mkdocs-exclude-search's changelog.

0.6.7 (2026-08-09)

• Fixes exclusions having no effect with use_directory_urls: false, the .html page urls did not match any exclude/ignore entry and root level pages were always kept.
• Fixes exclude/ignore given as a single string being iterated character by character.
• Fixes UnicodeDecodeError when reading the search index on platforms with a non-utf-8 default encoding (e.g. Windows).
• Fixes exclude/ignore entries and record locations with multiple # being mishandled.
• Fixes tag page detection (exclude_tags) with the default use_directory_urls: true, where the tags page is located at tags/ instead of tags.html.
• Fixes duplicated entries when resolving named subchapters of the mkdocs nav.
• Fixes the ignore validation message being logged for valid configurations.
• Tests on Python 3.9 to 3.14, requires Python >= 3.9.

Commits

• 8d46999 Release 0.6.7 (#50)
• 837ece2 Fix exclusions when use_directory_urls is false (#49)
• 961fa96 Update supported Python versions (#48)
• abf2fb2 Update README.md
• See full diff in compare view

Updates mkdocs-include-markdown-plugin from 7.1.8 to 7.3.0

Release notes

Sourced from mkdocs-include-markdown-plugin's releases.

v7.3.0

New features

• Add new setting include_from_url

v7.2.2

Bug fixes

• Fix natural order by extension not correctly applied

v7.2.1

Enhancements

• Optimize string concatenation.

v7.2.0

New features

• Add new argument order to sort multiple inclusions.

Commits

• 0604be2 Add new setting include_from_url(#299)
• f0809f9 Document order setting (#298)
• 98cf8e8 Fix natural order by extension not correctly applied (#292)
• 39df609 Optimize string concatenation across multiple files (#288)
• 39fb543 docs(license): update copyright year(s) (#287)
• 6fd647f Document that filesystem order allows reverse (#286)
• 32978ca Deduplicate common arguments in documentation (#285)
• 708a374 Add new argument order to sort inclusions (#279)
• 8b77f66 Add a security policy (#278)
• See full diff in compare view

Updates mkdocs-redirects from 1.2.1 to 1.2.3

Release notes

Sourced from mkdocs-redirects's releases.

v1.2.3

• Warn when this plugin is being used from the mkdocs executable (ProperDocs/mkdocs-redirects#2)

  Apologies for the inconvenience. We are starting a community continuation of MkDocs under a new name ProperDocs, and plugins are our main hope regarding how we can spread the word. See Our continuation of MkDocs and a warning regarding "MkDocs 2.0" ProperDocs/properdocs#33

• Drop support for Python 3.9, officially support Python 3.14

Full Changelog: ProperDocs/mkdocs-redirects@v1.2.2...v1.2.3

Commits

• 77c7f93 Release 1.2.3 (#4)
• 15082ac Remove unused Makefile
• f38f502 Warn when this plugin is being used from the mkdocs executable (#2)
• 92979c5 Update references - use the new origin repository for this package (#3)
• 44e0bca Bump the minimal required version of MkDocs (#1)
• a9dd8d4 Template upgrade
• 100e7b4 Template upgrade
• df6b0a8 Release 1.2.2 (#67)
• 656ef80 Remove noindex (#66)
• 32ccfd0 Merge pull request #60 from dp1218/master
• Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
markdown	[>= 3.4.a, < 3.5]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric	Results
Complexity	0
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

✅ No blocking issues noticed

No blocking findings were identified. A documentation build verification is still recommended for the dependency updates.

Test suggestions

• Install the requirements and verify the documentation build remains successful with all six upgraded dependencies.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Install the requirements and verify the documentation build remains successful with all six upgraded dependencies.

_{TIP How was this review? Give us feedback}