chore(deps): bump the dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the dependencies group with 5 updates in the / directory:

Package	From	To
markdown-it	14.3.0	15.0.0
pretty-bytes	7.1.0	7.1.1
find-my-way	9.6.0	9.7.0
ws	8.21.0	8.21.2
@openally/result	2.0.0	3.1.0

Updates markdown-it from 14.3.0 to 15.0.0

Changelog

Sourced from markdown-it's changelog.

[15.0.0] - 2026-07-30

Added

• Exposed parser internals classes as static properties on markdownit.
• Bundled TypeScript declarations. Remove @types/markdown-it if you used it.
• Added the markdown-it/browser export with bundled ESM and UMD builds.
• Added colored CLI help on supported terminals via argparse 3.
• Added reference labels to link/image tokens, #938.
• Added reference_definition tokens. They remain stripped by default for backwards compatibility, #1055. Also adjusted the line-break heuristic to keep output exactly the same.

Changed

• [breaking] linkify-it => v6
  • No fuzzy links by default.
  • No auth part check by default.
  • Unicode punctuation terminates the link by default (should help with CJK).
  • See linkify-it changelog for other changes.
• Package root now resolves to prebuilt ESM and CJS files instead of raw sources. Distribution files were reorganized under dist/ and dist/browser/.
• Migrated to Typescript.
• entities => v8. Can be rolled back to v7 if compatibility issues happen.
• Moved validateLink, normalizeLink and normalizeLinkText from properties to prototype methods.
• Reworked issue templates and contribution guidelines.

Removed

• [breaking] Removed package-internal subpath exports (markdown-it/lib/* and similar). Use the static classes exposed on markdownit instead.
• [breaking] Removed obsolete StateBlock#ddIndent, #1139. Update markdown-it-deflist to keep it working.

Fixed

• Preserve a literal backslash before a terminating space in link destinations, matching CommonMark 6.3, #1188.
• Recognize lowercase declarations as HTML blocks, matching CommonMark 4.6, #1189.
• Require semicolons for named entities in all decoding paths, completing the fix for #1096.
• Enhanced the text_join rule to process image alt text.
• Include inline code content in image alt text, #1142.

Commits

• 157b33b 15..0.0 released
• f73cb76 doc: rename files
• 3bc8e2d Add TS types
• 2620dce Update contribution guidelines and issue templates
• 7d365fe doc: migration info
• 5c9b7ce Update changelog
• 5a996d5 doc: fix @example tags display
• f5083f4 doc: continue restructuring & theme fixing
• 54289c4 Show inline code content in image alt tag #1142
• 974e2d7 text_join rule fix: process image alt content too (fixes lost escapes and...
• Additional commits viewable in compare view

Updates pretty-bytes from 7.1.0 to 7.1.1

Release notes

Sourced from pretty-bytes's releases.

v7.1.1

• Fix numbers less than 1 having excessive precision af55eb9

---

sindresorhus/pretty-bytes@v7.1.0...v7.1.1

Commits

• fd7eb38 7.1.1
• af55eb9 Fix numbers less than 1 having excessive precision
• See full diff in compare view

Updates find-my-way from 9.6.0 to 9.7.0

Release notes

Sourced from find-my-way's releases.

v9.7.0

What's Changed

• fix: backtrack on regex param mismatch by @​mcollina in delvedor/find-my-way#427
• fix: apply root path fallback for optional params in off() by @​aquie00t in delvedor/find-my-way#428
• ci: add node v26 to test matrix by @​aquie00t in delvedor/find-my-way#435
• perf(host): cache regex lookup results in HostStorage by @​aquie00t in delvedor/find-my-way#436
• chore: bump inquirer from 13.4.3 to 14.0.2 in the dev-dependencies group by @​dependabot[bot] in delvedor/find-my-way#437
• chore: bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 by @​dependabot[bot] in delvedor/find-my-way#438
• chore: bump @​types/node from 25.9.4 to 26.1.0 in the dev-dependencies group by @​dependabot[bot] in delvedor/find-my-way#440
• fix: prevent done from being called multiple times on async constraint errors by @​deepview-autofix in delvedor/find-my-way#425
• fix: align isParamSafe state in findRoute with _on by @​deepview-autofix in delvedor/find-my-way#424
• chore: bump actions/checkout from 6 to 7 by @​dependabot[bot] in delvedor/find-my-way#439
• fix: avoid crash on undefined regex capture during route lookup by @​bianyifan in delvedor/find-my-way#441

New Contributors

• @​aquie00t made their first contribution in delvedor/find-my-way#428
• @​deepview-autofix made their first contribution in delvedor/find-my-way#425
• @​bianyifan made their first contribution in delvedor/find-my-way#441

Full Changelog: delvedor/find-my-way@v9.6.0...v9.7.0

Commits

• 827248e Bumped v9.7.0
• b9d7bf1 Merge branch 'main' of github.com:delvedor/find-my-way
• b7b5657 fix: avoid crash on undefined regex capture during route lookup (#441)
• 4263d82 chore: bump actions/checkout from 6 to 7 (#439)
• 66d3015 fix: align isParamSafe state in findRoute with _on (#424)
• 75e4728 fix: prevent done from being called multiple times on async constraint errors...
• 902a02d chore: bump @​types/node in the dev-dependencies group (#440)
• b803e4e chore: bump fastify/github-action-merge-dependabot from 3.12.0 to 3.15.0 (#438)
• e63cb77 chore: bump inquirer from 13.4.3 to 14.0.2 in the dev-dependencies group (#437)
• 992c1df perf(host): cache regex lookup results in HostStorage (#436)
• Additional commits viewable in compare view

Updates ws from 8.21.0 to 8.21.2

Release notes

Sourced from ws's releases.

8.21.2

Bug fixes

• Fixed a test for CITGM (2eb3be0b).

8.21.1

Bug fixes

• Empty fragments are now counted toward the limit (a2f4e7c0).
• The default values of the maxBufferedChunks and maxFragments options have been reduced (f197ac65).

Commits

• 787ebf2 [dist] 8.21.2
• b4d62eb Revert "[ci] Trust Coveralls Homebrew tap"
• e4bb883 [security] Use GitHub PVR as main reporting channel
• 2eb3be0 [test] Skip test on Node.js versions where it does not apply
• ae1de54 [dist] 8.21.1
• 8e9511b [ci] Trust Coveralls Homebrew tap
• f197ac6 [fix] Lower default values of maxBufferedChunks and maxFragments
• 8df8265 [ci] Update actions/checkout action to v7
• a2f4e7c [fix] Count empty fragments toward the limit (#2329)
• e79f912 [pkg] Approve install scripts for bufferutil and utf-8-validate
• Additional commits viewable in compare view

Updates @openally/result from 2.0.0 to 3.1.0

Release notes

Sourced from @​openally/result's releases.

@​openally/result@​3.1.0

Minor Changes

• #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

@​openally/result@​3.0.0

Major Changes

• #304 f9e607f Thanks @​fraxken! - Drop CJS support and migrate to ESM

• #298 ca75a16 Thanks @​fraxken! - Implement missing Ok and Err APIs with few new useful helpers

Changelog

Sourced from @​openally/result's changelog.

3.1.0

Minor Changes

• #307 3227a4f Thanks @​fraxken! - Introduce Option.from to collapse value to either Some(value) or None for undefined and null primitive.

3.0.0

Major Changes

• #304 f9e607f Thanks @​fraxken! - Drop CJS support and migrate to ESM

• #298 ca75a16 Thanks @​fraxken! - Implement missing Ok and Err APIs with few new useful helpers

Commits

• bda26fc chore: update versions (#308)
• 3227a4f feat(result): implement Option.from to collapse value to Some/None (#307)
• 25865b9 chore: update versions (#299)
• f9e607f refactor: drop CJS support for all packages and remove tsup (#304)
• ca75a16 feat(result): implement missing APIs for Ok and Err + useful helpers (#298)
• c7b4b55 chore: support TypeScript 6.x (#288)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[changeset-bot]

⚠️ No Changeset found

Latest commit: ad65ac7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​openally/​result@​3.1.0
	npm/​find-my-way@​9.6.0 ⏵ 9.7.0	+1	+16		-4
	npm/​markdown-it@​14.3.0 ⏵ 15.0.0	+14		-13	-1
	npm/​ws@​8.21.0 ⏵ 8.21.2

View full report