From 9c821da9387e42470711128dc88babdeafc68ec7 Mon Sep 17 00:00:00 2001 From: Konrad Heimel Date: Wed, 14 Oct 2026 12:22:23 +0200 Subject: [PATCH] :lock: fix(deps): override katex to 0.18.2 in the docs lint toolchain Clears GHSA-238p-pmpm-9mq7 (Dependabot #60). markdownlint pulls katex through micromark-extension-math, whose latest release still asks for ^0.16.0; markdownlint imports only the math syntax extension, never lib/html.js where katex is used, so the override cannot change lint behaviour. Same pattern as the existing js-yaml and smol-toml overrides. --- docs/package-lock.json | 6 +++--- docs/package.json | 1 + 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/docs/package-lock.json b/docs/package-lock.json index 7554f592..92f64334 100644 --- a/docs/package-lock.json +++ b/docs/package-lock.json @@ -469,9 +469,9 @@ } }, "node_modules/katex": { - "version": "0.16.47", - "resolved": "https://registry.npmjs.org/katex/-/katex-0.16.47.tgz", - "integrity": "sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==", + "version": "0.18.2", + "resolved": "https://registry.npmjs.org/katex/-/katex-0.18.2.tgz", + "integrity": "sha512-3snve4y0SXTMequLim1FMiPvLGElySam0blN5xQZBqEY3lOJz1TnuaaiugnBZBqHzlSAGmFTYL7MCQkORuLKCA==", "dev": true, "funding": [ "https://opencollective.com/katex", diff --git a/docs/package.json b/docs/package.json index 6583eb9b..57868962 100644 --- a/docs/package.json +++ b/docs/package.json @@ -10,6 +10,7 @@ }, "overrides": { "js-yaml": "5.4.2", + "katex": "0.18.2", "smol-toml": "1.9.0" } }