[PR #22007] [CLOSED] chore(deps): bump markdown from 3.10.1 to 3.10.2 in /backend #42030

New Issue

GiteaMirror · 2026-04-25T14:04:21-05:00

GiteaMirror commented

2026-04-25 14:04:21 -05:00

📋 Pull Request Information

Original PR: https://github.com/open-webui/open-webui/pull/22007
Author: @dependabot[bot]
Created: 3/1/2026
Status: ❌ Closed

Base: dev ← Head: dependabot/pip/backend/dev/markdown-3.10.2

📝 Commits (1)

c46803c chore(deps): bump markdown from 3.10.1 to 3.10.2 in /backend

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 backend/requirements.txt (+1 -1)

📄 Description

Bumps markdown from 3.10.1 to 3.10.2.

Release notes

Sourced from markdown's releases.

Release 3.10.2

Fixed

Fix a regression related to comment handling (#1590).

More reliable fix for </ (#1593).

Changelog

Sourced from markdown's changelog.

[3.10.2] - 2026-02-09

Fixed

Fix a regression related to comment handling (#1590).

More reliable fix for </ (#1593).

Commits

e7a0efb Bump version to 3.10.2
6301833 Document HTML sanitation policy
7f29f1a More reliable fix for </
c438647 Fix regression of special comments
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/open-webui/pull/22007 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 3/1/2026 **Status:** ❌ Closed **Base:** `dev` ← **Head:** `dependabot/pip/backend/dev/markdown-3.10.2` --- ### 📝 Commits (1) - [`c46803c`](https://github.com/open-webui/open-webui/commit/c46803c1495acdd5c7a7706ad75a959a810d7013) chore(deps): bump markdown from 3.10.1 to 3.10.2 in /backend ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `backend/requirements.txt` (+1 -1) </details> ### 📄 Description Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.10.1 to 3.10.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Python-Markdown/markdown/releases">markdown's releases</a>.</em></p> <blockquote> <h2>Release 3.10.2</h2> <h3>Fixed</h3> <ul> <li>Fix a regression related to comment handling (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1590">#1590</a>).</li> <li>More reliable fix for <code></</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1593">#1593</a>).</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md">markdown's changelog</a>.</em></p> <blockquote> <h2>[3.10.2] - 2026-02-09</h2> <h3>Fixed</h3> <ul> <li>Fix a regression related to comment handling (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1590">#1590</a>).</li> <li>More reliable fix for <code></</code> (<a href="https://redirect.github.com/Python-Markdown/markdown/issues/1593">#1593</a>).</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/Python-Markdown/markdown/commit/e7a0efb3a7c36d6b8005403122705662bc17c904"><code>e7a0efb</code></a> Bump version to 3.10.2</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/630183336bda57c258becc3ed229105481876a7e"><code>6301833</code></a> Document HTML sanitation policy</li> <li><a href="https://github.com/Python-Markdown/markdown/commit/7f29f1a69d236f5bb11645c2fa03fcf701487c8c"><code>7f29f1a</code></a> More reliable fix for <code></</code></li> <li><a href="https://github.com/Python-Markdown/markdown/commit/c4386475a6b6daea43b7d7717add4271adc9a3c1"><code>c438647</code></a> Fix regression of special comments</li> <li>See full diff in <a href="https://github.com/Python-Markdown/markdown/compare/3.10.1...3.10.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=markdown&package-manager=pip&previous-version=3.10.1&new-version=3.10.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

GiteaMirror added the pull-request label 2026-04-25 14:04:21 -05:00

GiteaMirror closed this issue

2026-04-25 14:04:22 -05:00

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/open-webui#42030