chore(deps): bump marked from 12.0.2 to 18.0.0

[dependabot]

Bumps marked from 12.0.2 to 18.0.0.

Release notes

Sourced from marked's releases.

v18.0.0

18.0.0 (2026-04-07)

Bug Fixes

• Bump typescript from 5.9.3 to 6.0.2 (#3934) (e8efc51)
• prevent GFM table tokens from greedily capturing trailing newlines (#3926) (40f2665)
• prevent heading and def tokens from greedily capturing multiple newlines (#3925) (b379e3e)
• trim blank lines from block tokens (#3939) (b70895f)

BREAKING CHANGES

• trim trailing blank lines from block tokens
• update Typescript to v6

v17.0.6

17.0.6 (2026-04-05)

Bug Fixes

• avoid race condition in async parallel parse/parseInline with hooks (#3924) (6e96fa7)
• cli: honor positional input file (#3922) (a1c2617)
• cli: use file URL for config import (#3923) (73e1f3f)

v17.0.5

17.0.5 (2026-03-20)

Bug Fixes

• Fix catastrophic backtracking (ReDoS) in link/reflink label regex (#3918) (4625980)
• prevent quadratic complexity in emStrongLDelim regex (#3906) (c732dd2)
• prevent single-tilde strikethrough false positives (#3910) (5e03369)
• re-assign tokenizer.lexer and renderer.parser at start of each parse call (#3907) (f3a3ec0)
• trim trailing whitespace from lheading text (#3920) (3ea7e88)

v17.0.4

17.0.4 (2026-03-04)

Bug Fixes

• prevent ReDoS in inline link regex title group (#3902) (46fb9b8)

v17.0.3

17.0.3 (2026-02-17)

... (truncated)

Commits

• 28954e0 chore(release): 18.0.0 [skip ci]
• b70895f fix: trim blank lines from block tokens (#3939)
• 40f2665 fix: prevent GFM table tokens from greedily capturing trailing newlines (#3926)
• b379e3e fix: prevent heading and def tokens from greedily capturing multiple newlines...
• e8efc51 fix: Bump typescript from 5.9.3 to 6.0.2 (#3934)
• 71e5ae3 chore(deps-dev): Bump esbuild from 0.27.4 to 0.28.0 (#3940)
• b436e82 chore(deps-dev): Bump eslint from 10.1.0 to 10.2.0 (#3941)
• e07037e chore(release): 17.0.6 [skip ci]
• 6e96fa7 fix: avoid race condition in async parallel parse/parseInline with hooks (#3924)
• 73e1f3f fix(cli): use file URL for config import (#3923)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for marked since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.