0.5.1

Security

• Fix inline code regex and prevent REDOS #1337
• Use @markedjs/html-differ to prevent REDOS #1331

Bug Fixes

• Fix typographic substitution in (pre|code|kbd|script) blocks when smartypants=true #1335
• Fix auto-linking email address #1338

Other

• Refactor the escape() function to improve performance 10-20% #975
• Update copyright in source code #1326
• Update benchmark tests #1019
• Add dependency badges to readme #1333

0.5.0

Security

• Use rtrim, not unsafe /X+$/ #1260

Breaking Changes

• Fix GFM empty table cells #1262
• Fix GFM extended auto-linking requiring multiple backpedals #1293
• Fix GFM strikethrough compatibility #1258
• Fix issues link references and prototypes #1299
• Fix hard line break when backslash at EOL #1303
• Fix hyperlinks with parenthesis #1305
• Fix loose lists #1304
• Fix strong and em #1315

Docs

• Fix typo in USING_ADVANCED.md #1276
• Add pictures to AUTHORS.md #1272
• Change badge to latest version of marked #1300
• Change badges from shields.io to badgen.net #1317
• Use iframe to sandbox generated html #1295
• Add additional links into readme #1310
• Add missing parameters for renderer methods #1311
• Add undocumented option descriptions #1312
• Add navigation sidebar to the docs #1316

CI

• Change travis clone depth to 3 #1270

0.4.0

Security Fixes

• Fix unsafe heading regex (#1224)
• Fix unsafe link regex (#1223, #1227)

New Features

• Add option to disable heading ids (#1190)
• Add support for GFM Task Lists to comply with the GFM spec (#1250)

Breaking Changes

• Fix escaping pipes in tables (#1239)
• Fix html output for tables to match GFM spec (#1245)
• Fix many bugs to reach parity with CommonMark spec (#1135)
• Fix new Renderer() so it uses default options (#1203)
• Fix text and paragraph return types (#1248) (#1249)
• Fix <em> less than 3 chars (#1181)
• Fix <pre> code blocks so there is no more trailing \n (#1266)
• Fix default langPrefix to follow CommonMark standard language- (#1265)

CLI Changes

• Add string argument to CLI (#1182)
• Change CLI stdio to remove warning (#994)

Other changes

• Lint all the things (#1185)
• Improved testing and DevOps (#1160, #1210, #1220, #1228, #1219, #1256)
• Update documentation and demos (#1196, #1197, #1204, #1207, #1221, #1233, #1217, #1240, #1244, #1253)

0.3.18 minified required new release

0.3.18 did not have changes to min.

Minor fixes and updated docs

• Supported Markdown flavors: CommonMark 0.28 and GitHub Flavored Markdown 0.28
• Updates to our CI pipeline; we're all green! #1098 with the caveat that there is a test that needs to get sorted (help us out #1092)
• Start ordered lists using the initial numbers from markdown lists (#1144)
• Added GitHub Pages site for documentation https://marked.js.org/ (#1138)

Processes and tools

• The elephant in the room: A security vulnerability was discovered and fixed. Please note, if something breaks due to these changes, it was not our intent, and please let us know by submitting a PR or issue to course correct (the nature of the zero-major release and having security as a number one priority) #1083
• The other elephant in the room: We missed publishing a 0.3.16 release to GitHub; so, trying to make up for that a bit.
• Updates to the project documentation and operations, you should check it out, just start with the README and you should be good.
• New release PR template available #1076
• Updates to default PR and Issue templates #1076
• Lint checks + tests + continuous integration using Travis #1020
• Updated testing output #1085 & #1087

Fix capturing parens

Fixes unintended breaking change from v0.3.14

New year, new home

• Marked has a new home under the MarkedJS org! Other advances soon to come.
• Updated minifier.
• Various parser fixes

New Year, new Marked!

• Addresses issue where some users might not have been able to update due to missing use strict #991
• Parser fix #977
• New way to perform tests with options and running individual tests #1002
• Improved test cases
• Improved links

Merry XSSmas

We think with this version we have addressed most, if not all, known security vulnerabilities. If you find more, please let us know.