build(deps): bump github.com/nao1215/markdown from 0.13.0 to 1.0.0

[dependabot]

Bumps github.com/nao1215/markdown from 0.13.0 to 1.0.0.

Release notes

Sourced from github.com/nao1215/markdown's releases.

v1.0.0

From this release the exported API and the generated bytes are stable. Within v1.x nothing exported is removed, renamed or re-signatured, and every builder keeps producing byte-for-byte identical output; the only exception is output that is objectively wrong, which is fixed in a patch release with the reasoning recorded here. doc/v1-api-audit.md is the inventory of the exported symbols they cover.

Added: mermaid diagram types

• Timeline #149
• Sankey #150
• Radar #151
• Treemap #153
• C4 context #156
• Venn #182
• Wardley map #183

Added: API

• EscapeTableCell, and TableSet.EscapeCells to apply it to a whole table #113
• WithBlockSpacing, and with it the Option parameter on NewMarkdown #111
• Markdown.BlankLine, the clearer name for LF #111
• Error on the entity relationship, flowchart and pie chart builders, which every other builder already had #176
• Flowchart subgraphs, direction, and the styling the other builders have #181

Fixed: output that did not render

Each of these replaced output that mermaid refused to draw or that GitHub read as something other than what the call described. Labels that already rendered are untouched, which the golden files enforce.

• A quotation mark lost a flowchart, a pie chart, an entity relationship diagram #157 #159 #161
• A colon cut a gantt task name short, ended a class statement, ended a state note #162 #163 #168
• Each user journey field lost a different set of characters, including a comma that split one actor into two #164
• Shape delimiters lost a mindmap; a kanban card label was rejected rather than encoded #166 #167
• An xy chart label of non-ASCII text went out unquoted and lost the chart #165
• A sequence diagram read a hyphen in a participant name as an arrow, and a "#" in a message as a comment #169
• A quadrant chart could not read most punctuation in any of its labels #170
• Front matter titles are quoted, and control characters in them escaped, so YAML cannot swallow a title #117
• Table alignment, nil writers, the table of contents indent, and line endings on Windows #110 #112
• A class annotation is emitted inside the class body, where GitHub accepts it #115
• The index links to markdown files relative to itself, with URL separators #142

Extending the probe set past the first measurement found more, fixed the same way #187:

• A raw line break in a label lost or silently corrupted every diagram type that accepts one; it is written as <br/>, or as [#10](https://github.com/nao1215/markdown/issues/10); where that is the form the drawing decodes
• A ~, @ or ^ lost a quadrant chart; a + or @ lost a sequence diagram from its participant name; a ^ in kanban metadata lost the board
• A < in a title was eaten by the renderer's sanitizer along with the rest; it is written as [#60](https://github.com/nao1215/markdown/issues/60); in the title statements that decode it
• A timeline colon was drawn as &:, a # cut a period short, and %% lost a whole line — the timeline package was the one type the probe had missed
• A backslash in a quoted class, xy chart, packet, block, git graph or requirement string was drawn as &\, the half decoded HTML form; it is written as [#92](https://github.com/nao1215/markdown/issues/92);, which draws the character
• An &, < or > in a git graph or xy chart string was drawn as the literal text &, < or >; a < in a block label or a requirement name was read as an opening tag and ate the rest; a " in a packet field or an xy chart title was drawn as the literal " — each is written as the entity form its drawing decodes
• The renderer check now asserts, character by character, that everything an edge-case document declares actually reaches the rendered SVG text; parse and render alone had let each of the above ship

mermaid/arch is the one place a label still cannot carry punctuation: mermaid's architecture-beta grammar accepts only [A-Za-z0-9_ ] and refuses its own escape form, so there is nothing to encode to. The package documentation says so #171. A sankey node name refuses <, tab and zero-width characters along with non-ASCII text, and a front matter title draws every escape of < as literal text, so those two limits are documented the same way.

A mermaid title that is not valid UTF-8 is reinterpreted rather than mangled, which is documented rather than changed #155.

... (truncated)

Changelog

Sourced from github.com/nao1215/markdown's changelog.

v1.0.0 (2026-08-13)

From this release the exported API and the generated bytes are stable. Within v1.x nothing exported is removed, renamed or re-signatured, and every builder keeps producing byte-for-byte identical output; the only exception is output that is objectively wrong, which is fixed in a patch release with the reasoning recorded here. https://github.com/nao1215/markdown/blob/main/doc/v1-api-audit.md is the inventory of the exported symbols they cover.

Added: mermaid diagram types

• Timeline #149
• Sankey #150
• Radar #151
• Treemap #153
• C4 context #156
• Venn #182
• Wardley map #183

Added: API

• EscapeTableCell, and TableSet.EscapeCells to apply it to a whole table #113
• WithBlockSpacing, and with it the Option parameter on NewMarkdown #111
• Markdown.BlankLine, the clearer name for LF #111
• Error on the entity relationship, flowchart and pie chart builders, which every other builder already had #176
• Flowchart subgraphs, direction, and the styling the other builders have #181

Fixed: output that did not render

Each of these replaced output that mermaid refused to draw or that GitHub read as something other than what the call described. Labels that already rendered are untouched, which the golden files enforce.

• A quotation mark lost a flowchart, a pie chart, an entity relationship diagram #157 #159 #161
• A colon cut a gantt task name short, ended a class statement, ended a state note #162 #163 #168
• Each user journey field lost a different set of characters, including a comma that split one actor into two #164
• Shape delimiters lost a mindmap; a kanban card label was rejected rather than encoded #166 #167
• An xy chart label of non-ASCII text went out unquoted and lost the chart #165
• A sequence diagram read a hyphen in a participant name as an arrow, and a "#" in a message as a comment #169
• A quadrant chart could not read most punctuation in any of its labels #170
• Front matter titles are quoted, and control characters in them escaped, so YAML cannot swallow a title #117
• Table alignment, nil writers, the table of contents indent, and line endings on Windows #110 #112
• A class annotation is emitted inside the class body, where GitHub accepts it #115
• The index links to markdown files relative to itself, with URL separators #142

Extending the probe set past the first measurement found more, fixed the same way #187:

• A raw line break in a label lost or silently corrupted every diagram type that accepts one; it is written as <br/>, or as [#10](https://github.com/nao1215/markdown/issues/10); where that is the

... (truncated)

Commits

• f26c6fd docs(changelog): finalize the v1.0.0 release notes (#189)
• 3668b7e fix(mermaid): escape the labels the extended probe set found unreadable (#188)
• 8327d41 Merge pull request #139 from nao1215/dependabot/github_actions/actions/setup-...
• 8289a5f build(deps): bump actions/setup-node from 6.5.0 to 7.0.0
• 54c79de docs(readme): fix the grammar in the opening sentence (#186)
• 487135e docs(readme): condense the intro and drop the feature checklist (#185)
• 5981bdc docs: put the README head back to what it was, and drop SPEC.md (#184)
• 838ca18 feat(mermaid): add Wardley map support (#183)
• ec0c9ee feat(mermaid): add Venn diagram support (#182)
• 41d07e8 feat(mermaid/flowchart): add subgraphs and the styling the other builders hav...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Code Metrics Report

	main (545e369)	#24 (29935cf)	+/-
Coverage	82.0%	82.0%	0.0%
Test Execution Time	14s	24s	+10s

Details

  |                     | main (545e369) | #24 (29935cf) | +/-  |
  |---------------------|----------------|---------------|------|
  | Coverage            |          82.0% |         82.0% | 0.0% |
  |   Files             |             32 |            32 |    0 |
  |   Lines             |           2812 |          2812 |    0 |
  |   Covered           |           2306 |          2306 |    0 |
- | Test Execution Time |            14s |           24s | +10s |

---

Reported by octocov