Bump the npm_and_yarn group across 2 directories with 1 update

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps the npm_and_yarn group with 1 update in the / directory: markdown-to-jsx.
Bumps the npm_and_yarn group with 1 update in the /apps/website directory: markdown-to-jsx.

Updates markdown-to-jsx from 6.11.4 to 7.4.0

Release notes

Sourced from markdown-to-jsx's releases.

v7.4.0

Happy New Year! 🎆

markdown-to-jsx v7.4 features a new option renderRule! — From the README:

Supply your own rendering function that can selectively override how rules are rendered (note, this is different than options.overrides which operates at the HTML tag level and is more general). You can use this functionality to do pretty much anything with an established AST node; here's an example of selectively overriding the "codeBlock" rule to process LaTeX syntax using the @matejmazur/react-katex library:

import { Markdown, RuleType } from 'markdown-to-jsx'
import TeX from '@matejmazur/react-katex'
const exampleContent =
'Some important formula:\n\nlatex\nmathbb{N} = { a in mathbb{Z} : a > 0 }\n\n'
function App() {
return (
<Markdown
children={exampleContent}
options={{
renderRule(next, node, renderChildren, state) {
if (node.type === RuleType.codeBlock && node.lang === 'latex') {
return (
<TeX as="div" key={state.key}>{String.raw${node.text}}</TeX>
)
}
      return next()
    },
  }}
/&gt;

)
}

The README docs around syntax highlighting have also been updated with sample code.

With the new year comes a push toward v8. Performance will be a top priority, reducing the complexity of the library's regexes to increase throughput for SSR use-cases and ideally eliminate rare but frustrating issues like catastrophic backtracking. In addition, the library will be pivoting into more of a pure compiler model, with a React adapter offered and ones added for other major frameworks as well. The idea is anywhere you can run JS, you can use [secret new library name].

Stay tuned and thanks for being part of the journey ✌🏼 Here's to a great 2024 🍾

markdown-to-jsx is maintained by @​quantizor, buy him a coffee

Full Changelog: quantizor/markdown-to-jsx@v7.3.2...v7.4.0

v7.3.2

fix(types): path to esm types in "exports"

Full Changelog: quantizor/markdown-to-jsx@v7.3.1...v7.3.2

... (truncated)

Commits

• 34531eb chore: bump version
• 715e4e9 chore: update docs
• 8eb74da fix: ensure src prop is sanitized
• 44122eb chore: switch RuleType back to an enum
• f665b00 docs: add syntax highlighting example
• c68b1fb chore: update doc site
• 20c7a0b refactor: rename content to children
• c20733a refactor: strongly-type all nodes
• 79d640b refactor: compile away priority mapping
• 4b5f1c3 chore: cuter styles
• Additional commits viewable in compare view

Updates markdown-to-jsx from 6.11.4 to 7.4.0

Release notes

Sourced from markdown-to-jsx's releases.

v7.4.0

Happy New Year! 🎆

markdown-to-jsx v7.4 features a new option renderRule! — From the README:

Supply your own rendering function that can selectively override how rules are rendered (note, this is different than options.overrides which operates at the HTML tag level and is more general). You can use this functionality to do pretty much anything with an established AST node; here's an example of selectively overriding the "codeBlock" rule to process LaTeX syntax using the @matejmazur/react-katex library:

import { Markdown, RuleType } from 'markdown-to-jsx'
import TeX from '@matejmazur/react-katex'
const exampleContent =
'Some important formula:\n\nlatex\nmathbb{N} = { a in mathbb{Z} : a > 0 }\n\n'
function App() {
return (
<Markdown
children={exampleContent}
options={{
renderRule(next, node, renderChildren, state) {
if (node.type === RuleType.codeBlock && node.lang === 'latex') {
return (
<TeX as="div" key={state.key}>{String.raw${node.text}}</TeX>
)
}
      return next()
    },
  }}
/&gt;

)
}

The README docs around syntax highlighting have also been updated with sample code.

With the new year comes a push toward v8. Performance will be a top priority, reducing the complexity of the library's regexes to increase throughput for SSR use-cases and ideally eliminate rare but frustrating issues like catastrophic backtracking. In addition, the library will be pivoting into more of a pure compiler model, with a React adapter offered and ones added for other major frameworks as well. The idea is anywhere you can run JS, you can use [secret new library name].

Stay tuned and thanks for being part of the journey ✌🏼 Here's to a great 2024 🍾

markdown-to-jsx is maintained by @​quantizor, buy him a coffee

Full Changelog: quantizor/markdown-to-jsx@v7.3.2...v7.4.0

v7.3.2

fix(types): path to esm types in "exports"

Full Changelog: quantizor/markdown-to-jsx@v7.3.1...v7.3.2

... (truncated)

Commits

• 34531eb chore: bump version
• 715e4e9 chore: update docs
• 8eb74da fix: ensure src prop is sanitized
• 44122eb chore: switch RuleType back to an enum
• f665b00 docs: add syntax highlighting example
• c68b1fb chore: update doc site
• 20c7a0b refactor: rename content to children
• c20733a refactor: strongly-type all nodes
• 79d640b refactor: compile away priority mapping
• 4b5f1c3 chore: cuter styles
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub ↗.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	markdown-to-jsx@​6.11.4 ⏵ 7.4.0	+2	+5	+1

View full report ↗