Skip to content

chore(deps): bump markdown-it and @pnp/spfx-controls-react in /samples/react-command-share-to-teams - #2035

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/react-command-share-to-teams/multi-56fea920a1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/samples/react-command-share-to-teams/multi-56fea920a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026

Copy link
Copy Markdown
Contributor

Bumps markdown-it to 14.3.3 and updates ancestor dependency @pnp/spfx-controls-react. These dependencies need to be updated together.

Updates markdown-it from 12.3.2 to 14.3.3

Changelog

Sourced from markdown-it's changelog.

[14.3.3] - 2026-10-16

Security

  • Backported 15.0.3 fixes.

[14.3.2] - 2026-09-12

Security

  • Backported 15.0.2 fixes.

[14.3.1] - 2026-08-27

Security

  • Backported 15.0.1 fixes.

[14.3.0] - 2026-07-02

Changed

  • Reworked build pipeline & tools.
  • Added source maps.
  • Bumped linkify-it to 5.0.2.

Fixed

  • Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.

[14.2.0] - 2026-05-24

Added

  • isPunctCharCode to utilities.

Fixed

  • Don't end HTML comment blocks on a blank line, #1155.
  • Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
  • Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
  • More strict entities decode to avoid false positives ;, #1096.
  • Restore block parser state on fail in lheading rule, #1131.

Security

  • Fixed poor smartquotes perfomance on > 70k quotes in single block
  • Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

[14.1.1] - 2026-01-11

Security

  • Fixed regression from v13 in linkify inline rule. Specific patterns could

... (truncated)

Commits
  • d372f0d 14.3.3 released
  • d99f488 Backported 15.0.3 fixes
  • efb9993 14.3.2 released
  • daf5a3c Backported 15.0.2 fixes
  • a855f10 14.3.1 released
  • ad70f6b Backported 15.0.1 fixes
  • b407f3b Ignore generated API docs in lint
  • bf025ad Prepare package.json for v14 backports
  • 2d9bbea fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (#1189)
  • a311cfb fix: keep literal backslash before space in link destination (CommonMark 6.3)...
  • Additional commits viewable in compare view

Updates @pnp/spfx-controls-react from 3.9.0 to 3.21.0

Release notes

Sourced from @​pnp/spfx-controls-react's releases.

v3.21.0 release

New control(s)

  • ShareDialog: new control ShareDialog #1897
  • Add cs-cz.ts #1932
  • FilterBar: new control FilterBar #1884
  • Calendar: new controls Calendar #1955

Enhancements

  • Update markdown-it to >=13.0.2 #1916
  • Dispose of Async instance to prevent memory leak #1936
  • DynamicForm: Added support to ModernTaxonomyPicker #1962

Fixes

  • ListItemComments: Can't select text from comment #1874
  • Localization: Bad translations in DateTimePicker control #1909
  • WebPartTitle: Control Fails to Update After Initial Save #1877
  • DynamicForm: Creating a document set sometimes throws a 409 save #1919
  • ModernTaxonomyPicker: Fix - Adding a new term adds the term to the parentLevel #1922
  • ModernTaxonomyPicker: allowMultipleSelections = false, but panel allows multiple items to be selected #1847
  • UserPicker: fix exports and add missing link to documentation #1925
  • Optimizing ControlsTest webpart in the SPFx source project #1951
  • DynamicForm: Not handling mandatory Lookup fields well #1914
  • DynamicForm: Loads with Validation Errors if no List Item Id is set #1655
  • DynamicForm: required Fields not checked before submit #1953
  • DynamicForm: Fix for 1788/1794 and add styles property for support customizing styling #1913
  • DynamicForm: Hotfix for 1937 and 1961 #1967
  • AdaptiveCardHost: Fix default value for Date.Input #1972

Contributors

Special thanks to our contributors (in alphabetical order): Adam Wójcik, Alessandro Chiavarino, Antanina Druzhkina, brianpmccullough, EnablingLogic, Guido Zambarda, João Mendes, Kevin T. Coughlin, Konrad K., Martin Lingstuyl, Michaël Maillot, Nello D'Andrea, Nishkalank Bezawada, Patrik Hellgren, Petr Malášek, wuxiaojun514.

v3.20.0 release

Enhancements

  • Dashboard: added new WidgetSize #1845
  • Dashboard: IWidgetLink improvements #1813
  • DynamicForm: custom sorting #1802
  • ImagePicker: new Control ImagePicker #1820
  • UserPicker: new Control UserPicker #1675
  • DynamicForm: DynamicForm storeLastActiveTab option #1879 #1879

Fixes

  • Debug Controls in any language #1882
  • AdaptiveCardHost: lock down adaptive-expression package version #1876
  • ListItemPicker: PR fixes an issue with filtering when using calculated column as columnInternalName in ListItemPicker. #1887

... (truncated)

Changelog

Sourced from @​pnp/spfx-controls-react's changelog.

3.21.0

New control(s)

  • ShareDialog: new control ShareDialog #1897
  • Add cs-cz.ts #1932
  • FilterBar: new control FilterBar #1884
  • Calendar: new controls Calendar #1955

Enhancements

  • Update markdown-it to >=13.0.2 #1916
  • Dispose of Async instance to prevent memory leak #1936
  • DynamicForm: Added support to ModernTaxonomyPicker #1962

Fixes

  • ListItemComments: Can't select text from comment #1874
  • Localization: Bad translations in DateTimePicker control #1909
  • WebPartTitle: Control Fails to Update After Initial Save #1877
  • DynamicForm: Creating a document set sometimes throws a 409 save #1919
  • ModernTaxonomyPicker: Fix - Adding a new term adds the term to the parentLevel #1922
  • ModernTaxonomyPicker: allowMultipleSelections = false, but panel allows multiple items to be selected #1847
  • UserPicker: fix exports and add missing link to documentation #1925
  • Optimizing ControlsTest webpart in the SPFx source project #1951
  • DynamicForm: Not handling mandatory Lookup fields well #1914
  • DynamicForm: Loads with Validation Errors if no List Item Id is set #1655
  • DynamicForm: required Fields not checked before submit #1953
  • DynamicForm: Fix for 1788/1794 and add styles property for support customizing styling #1913
  • DynamicForm: Hotfix for 1937 and 1961 #1967
  • AdaptiveCardHost: Fix default value for Date.Input #1972

Contributors

Special thanks to our contributors (in alphabetical order): Adam Wójcik, Alessandro Chiavarino, Antanina Druzhkina, brianpmccullough, EnablingLogic, Guido Zambarda, João Mendes, Kevin T. Coughlin, Konrad K., Martin Lingstuyl, Michaël Maillot, Nello D'Andrea, Nishkalank Bezawada, Patrik Hellgren, Petr Malášek, wuxiaojun514.

3.20.0

Enhancements

  • Dashboard: added new WidgetSize #1845
  • Dashboard: IWidgetLink improvements #1813
  • DynamicForm: custom sorting #1802
  • ImagePicker: new Control ImagePicker #1820
  • UserPicker: new Control UserPicker #1675
  • DynamicForm: DynamicForm storeLastActiveTab option #1879 #1879
  • FilePicker: Image picker enhancements #1805
  • DynamicForm: Adds ability to create files/folders in subfolder using DynamicForm. #1901

Fixes

... (truncated)

Commits
  • a4a6ff0 Merge pull request #1987 from pnp/dev
  • e33b91f Fix reference to Calender control & assets within
  • 90f7310 Update changelog following merged PR #1972
  • cf93e29 Fix default value for Date.Input in AdaptiveCardHost (#1972)
  • ee78c79 Update changelog following merged PR #1967
  • 5aa9b28 Hotfix for 1937 and 1961 (#1967)
  • c25e643 Specify exact versions of new packages, add missing return type on FilterBar ...
  • ecec61a Update changelog following merged PR #1962
  • b484e17 💡Added support to ModernTaxonomyPicker in DynamicForm - Fix 1275 [Repo Rescue...
  • 7a8e182 Update changelog following merged PR #1913
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [markdown-it](https://github.com/markdown-it/markdown-it) to 14.3.3 and updates ancestor dependency [@pnp/spfx-controls-react](https://github.com/pnp/sp-dev-fx-controls-react). These dependencies need to be updated together.


Updates `markdown-it` from 12.3.2 to 14.3.3
- [Changelog](https://github.com/markdown-it/markdown-it/blob/14.3.3/CHANGELOG.md)
- [Commits](markdown-it/markdown-it@12.3.2...14.3.3)

Updates `@pnp/spfx-controls-react` from 3.9.0 to 3.21.0
- [Release notes](https://github.com/pnp/sp-dev-fx-controls-react/releases)
- [Changelog](https://github.com/pnp/sp-dev-fx-controls-react/blob/dev/CHANGELOG.md)
- [Commits](pnp/sp-dev-fx-controls-react@v3.9.0...v3.21.0)

---
updated-dependencies:
- dependency-name: markdown-it
  dependency-version: 14.3.3
  dependency-type: indirect
- dependency-name: "@pnp/spfx-controls-react"
  dependency-version: 3.21.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 20, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants