Bump markdown-it and @vscode/vsce

[dependabot]

Bumps markdown-it to 14.2.0 and updates ancestor dependency @vscode/vsce. These dependencies need to be updated together.

Updates markdown-it from 12.3.2 to 14.2.0

Changelog

Sourced from markdown-it's changelog.

[14.2.0] - 2026-05-24

Added

• isPunctCharCode to utilities.

Fixed

• Don't end HTML comment blocks on a blank line, #1155.
• Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
• Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
• More strict entities decode to avoid false positives ;, #1096.
• Restore block parser state on fail in lheading rule, #1131.

Security

• Fixed poor smartquotes perfomance on > 70k quotes in single block
• Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

[14.1.1] - 2026-01-11

Security

• Fixed regression from v13 in linkify inline rule. Specific patterns could cause high CPU use. Thanks to @​ltduc147 for report.

[14.1.0] - 2024-03-19

Changed

• Updated CM spec compatibility to 0.31.2, #1009.

Fixed

• Fixed quadratic complexity when parsing references, #996.
• Fixed quadratic output size with pathological user input in tables, #1000.

[14.0.0] - 2023-12-08

Changed

• Drop ancient browsers support (use .fromCodePoint and other features).
• Rewrite to ESM (including all plugins/deps). CJS fallback still available. No signatures changed, except markdown-it-emoji plugin.
• Dropped dist/ folder from repo, build on package publish.
• Set punicode.js as external dependency.

Fixed

• Html tokens inside img alt are now rendered as their original text, #896.
• Hardbreaks inside img alt are now rendered as newlines.

[13.0.2] - 2023-09-26

Security

• Fixed crash/infinite loop caused by linkify inline rule, #957.

... (truncated)

Commits

• 829797a 14.2.0 released
• 9ce2087 Fix smartquotes perfomance
• 02e73b8 linkify-it bump
• 68cfb8c fix: don't end HTML comment blocks on a blank line (#1155)
• 1083137 Readme cleanup
• 97c7ca2 Update funding info
• c471b55 Changelog update
• 7769621 isPunctChar => isPunctCharCode
• aa2aa70 fix: always reset parentType in lheading rule (#1131)
• 59955f2 Polish PRs #1072, #1074
• Additional commits viewable in compare view

Updates @vscode/vsce from 2.32.0 to 3.9.2

Release notes

Sourced from @​vscode/vsce's releases.

v3.9.2

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node
• #1274: Run npm audit fix
• #1272: Bump fast-uri from 3.0.6 to 3.1.2
• #1267: Bump minimatch from 10.2.2 to 10.2.3
• #1247: Update minimatch dependency to v10

This list of changes was auto generated.

v3.9.2-4

Changes:

• #1283: fix: skip APIScan
• #1282: chore: bump CI to Node 22 and fix build
• #1279: Bump the uuid test fixture version to 100.0.0
• #1278: Bump tmp from 0.2.4 to 0.2.6
• #1277: Bump qs from 6.14.2 to 6.15.2
• #1276: Bump uuid and @​azure/msal-node

This list of changes was auto generated.

v3.9.2-3

Changes:

• #1274: Run npm audit fix

This list of changes was auto generated.

v3.9.2-2

Changes:

• #1272: Bump fast-uri from 3.0.6 to 3.1.2

This list of changes was auto generated.

... (truncated)

Commits

• f7501f2 fix: skip APIScan (#1283)
• 7cd3244 chore: bump CI to Node 22 and fix build (#1282)
• df1a68e Bump the uuid test fixture version to 100.0.0 (#1279)
• 3a5786e Merge pull request #1278 from microsoft/dependabot/npm_and_yarn/tmp-0.2.6
• 4954e08 Bump tmp from 0.2.4 to 0.2.6
• 54dce87 Bump qs from 6.14.2 to 6.15.2 (#1277)
• 86fc2d6 Bump uuid and @​azure/msal-node (#1276)
• 4699582 Run npm audit fix and update lockfile (#1274)
• e003a0a Merge pull request #1272 from microsoft/dependabot/npm_and_yarn/fast-uri-3.1.2
• 74ab7a9 Bump fast-uri from 3.0.6 to 3.1.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for @​vscode/vsce since your current version.