chore(deps): bump marked from 18.0.9 to 18.0.12

[dependabot]

Bumps marked from 18.0.9 to 18.0.12.

Release notes

Sourced from marked's releases.

v18.0.12

18.0.12 (2026-09-07)

Bug Fixes

• allow a tab before the closing sequence of an ATX heading (#4084) (4417582)
• allow one more level of nested brackets in a link label (#4064) (37b28d8)
• do not add a newline to an empty code block (#4073) (23b1706)
• escape character references in autolink destinations (#4053) (8f432f0)
• reject GFM email autolink when the domain ends in _ or - (#4063) (df57534)
• reject invalid characters in HTML tag names (#4083) (300bb1d)
• remove up to the fence indentation from each content line (#4074) (0244f08)

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

• do not nest a link inside a link (#4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#4059) (b699db3)

v18.0.10

18.0.10 (2026-08-18)

Bug Fixes

• keep the em/strong mask the same length as the source (#4044) (681373c)
• parse EOF backtick fences after paragraphs (#4039) (81bd750)
• place task checkboxes after list loose is finalized (#4046) (b8cf7dc), closes #4045

Commits

• 24bf47c chore(release): 18.0.12 [skip ci]
• 475ba3d chore(deps-dev): bump eslint from 10.9.1 to 10.10.0 (#4088)
• 4417582 fix: allow a tab before the closing sequence of an ATX heading (#4084)
• 23b1706 fix: do not add a newline to an empty code block (#4073)
• df57534 fix: reject GFM email autolink when the domain ends in _ or - (#4063)
• 37b28d8 fix: allow one more level of nested brackets in a link label (#4064)
• 8f432f0 fix: escape character references in autolink destinations (#4053)
• 44ddc31 docs: add inspect.software health badge (#4062)
• 0244f08 fix: remove up to the fence indentation from each content line (#4074)
• 300bb1d fix: reject invalid characters in HTML tag names (#4083)
• Additional commits viewable in compare view

[dependabot]

Superseded by #180.