build(deps): bump the npm_and_yarn group across 2 directories with 2 updates

[dependabot]

Bumps the npm_and_yarn group with 1 update in the / directory: brace-expansion.
Bumps the npm_and_yarn group with 2 updates in the /plugins/typedoc-plugin-react-components directory: brace-expansion and markdown-it.

Updates brace-expansion from 5.0.6 to 5.0.7

Commits

• b735ba6 5.0.7
• c7e33ec Merge commit from fork
• fa1786a Bump tar from 7.5.11 to 7.5.16 (#116)
• c16f1ec fix(package.json): use git+https instead of git+ssh for repository URL (#115)
• 196bbcc Bump ip-address from 10.1.0 to 10.2.0 (#104)
• eb18dd6 Update ci.yml (#107)
• a39928d Bump minimatch (#106)
• 7950ae3 ci: correct test workflow (#105)
• See full diff in compare view

Updates brace-expansion from 5.0.6 to 5.0.7

Commits

• b735ba6 5.0.7
• c7e33ec Merge commit from fork
• fa1786a Bump tar from 7.5.11 to 7.5.16 (#116)
• c16f1ec fix(package.json): use git+https instead of git+ssh for repository URL (#115)
• 196bbcc Bump ip-address from 10.1.0 to 10.2.0 (#104)
• eb18dd6 Update ci.yml (#107)
• a39928d Bump minimatch (#106)
• 7950ae3 ci: correct test workflow (#105)
• See full diff in compare view

Updates markdown-it from 14.1.1 to 14.3.0

Changelog

Sourced from markdown-it's changelog.

[14.3.0] - 2026-07-02

Changed

• Reworked build pipeline & tools.
• Added source maps.
• Bumped linkify-it to 5.0.2.

Fixed

• Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.

[14.2.0] - 2026-05-24

Added

• isPunctCharCode to utilities.

Fixed

• Don't end HTML comment blocks on a blank line, #1155.
• Properly recognize astral chars (surrogates) in delimiter scans for emphasis-like markers, #1072. Big thanks to @​tats-u for his global efforts with improving CJK support.
• Preserve unicode whitespaces when trimm headings/paragraphs, #1074.
• More strict entities decode to avoid false positives ;, #1096.
• Restore block parser state on fail in lheading rule, #1131.

Security

• Fixed poor smartquotes perfomance on > 70k quotes in single block
• Bumped linkify-it to 5.0.1 with fixed potential perfomance issues.

Commits

• ff0ee08 14.3.0 released
• 52e2749 Bump linkify-it / vite deps
• 56c2404 fix: keep backslash-space hard line break (CommonMark 6.7) (#1185)
• 0fbb18b Bump vite from 8.0.14 to 8.0.16 (#1181)
• 83450e2 Rework benchmark deps and bump versions
• 57a6863 benchmark => tinybench
• 7608db1 Update CI config
• 9d8eb42 Added package-lock and updated versions to latest possible
• 0aee70d lint: enable @​stylistic/no-multi-spaces rule
• 8878985 lint => neostandard
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.