Skip to content

build(deps): bump marked from 17.0.5 to 18.0.3 - #13

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/marked-18.0.3
Closed

build(deps): bump marked from 17.0.5 to 18.0.3#13
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/marked-18.0.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 9, 2026

Copy link
Copy Markdown

Bumps marked from 17.0.5 to 18.0.3.

Release notes

Sourced from marked's releases.

v18.0.3

18.0.3 (2026-05-01)

Bug Fixes

  • avoid task checkbox for setext heading text (#3960) (2608e81)

v18.0.2

18.0.2 (2026-04-18)

Bug Fixes

  • fix infinite loop for indented code blank line (#3947) (58a52e8)

v18.0.1

18.0.1 (2026-04-17)

Bug Fixes

  • rules: ensure lookbehind regex is evaluated correctly by minifiers (#3945) (abd907a)

v18.0.0

18.0.0 (2026-04-07)

Bug Fixes

  • Bump typescript from 5.9.3 to 6.0.2 (#3934) (e8efc51)
  • prevent GFM table tokens from greedily capturing trailing newlines (#3926) (40f2665)
  • prevent heading and def tokens from greedily capturing multiple newlines (#3925) (b379e3e)
  • trim blank lines from block tokens (#3939) (b70895f)

BREAKING CHANGES

  • trim trailing blank lines from block tokens
  • update Typescript to v6

v17.0.6

17.0.6 (2026-04-05)

Bug Fixes

  • avoid race condition in async parallel parse/parseInline with hooks (#3924) (6e96fa7)
  • cli: honor positional input file (#3922) (a1c2617)
  • cli: use file URL for config import (#3923) (73e1f3f)
Commits
  • e8dc395 chore(release): 18.0.3 [skip ci]
  • 2608e81 fix: avoid task checkbox for setext heading text (#3960)
  • dba76f6 chore(deps-dev): bump eslint from 10.2.0 to 10.2.1 (#3953)
  • 015f1eb chore(deps-dev): bump typescript from 6.0.2 to 6.0.3 (#3954)
  • 17c06e9 chore: fix building license for docs (#3952)
  • 55a54b5 chore: Rename LICENSE.md to LICENSE for better compatibility with Bazel tooli...
  • c4f4529 chore(release): 18.0.2 [skip ci]
  • 58a52e8 fix: fix infinite loop for indented code blank line (#3947)
  • 98b3824 chore(release): 18.0.1 [skip ci]
  • abd907a fix(rules): ensure lookbehind regex is evaluated correctly by minifiers (#3945)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [marked](https://github.com/markedjs/marked) from 17.0.5 to 18.0.3.
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v17.0.5...v18.0.3)

---
updated-dependencies:
- dependency-name: marked
  dependency-version: 18.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 9, 2026
@dependabot @github

dependabot Bot commented on behalf of github May 19, 2026

Copy link
Copy Markdown
Author

Superseded by #32.

@dependabot dependabot Bot closed this May 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/marked-18.0.3 branch May 19, 2026 19:44
inkatail pushed a commit that referenced this pull request Jun 27, 2026
…lkan)

On Linux with the Vulkan encoder, reinit triggered by display switching
or mode changes can crash Sunshine due to packets in flight after encoder
teardown.

With extra debug logging, this pattern was occurring:

Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.625]: Warning: [crash] encode_avcodec session=0x7fd8c89ad480 thread=140569594554048 avctx=0x7fd8c8c7f980 hw_frames=0x7fd8c883a940 FFmpeg frames ctx=0x7fd8c8a6b200
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: PACKET DESTROY 0x7fd8c8b76d00
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] SESSION DESTROY START 0x7fd8c89ad480
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: PACKET DESTROY 0x7fd8e8bfd490
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] Calling avcodec_ctx.reset()
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] SESSION DESTROY AFTER RESET 0x7fd8c89ad480
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.628]: Warning: [crash] Calling device.reset()
Jun 26 23:57:21 archlinux sunshine[263621]: [2026-06-26 23:57:21.629]: Warning: PACKET DESTROY 0x7fd8c882de40
Jun 26 23:57:21 archlinux kernel: rtsp::handler[263877]: segfault at 7fd8a0af7e20 ip 00007fd8a0af7e20 sp 00007fd8ebffd638 error 14 likely on CPU 11 (core 3, socket 0)
Jun 26 23:57:21 archlinux kernel: Code: Unable to access opcode bytes at 0x7fd8a0af7df6.
Jun 26 23:57:21 archlinux systemd-coredump[263973]: Process 263621 (sunshine) of user 1000 terminated abnormally with signal 11/SEGV, processing...
Jun 26 23:57:21 archlinux systemd[1]: Started Process Core Dump (PID 263973/UID 0).
Jun 26 23:57:21 archlinux systemd[1]: Started Pass systemd-coredump journal entries to relevant user for potential DrKonqi handling.
Jun 26 23:57:22 archlinux systemd-coredump[263974]: [🡕] Process 263621 (sunshine) of user 1000 dumped core.

                                                    Stack trace of thread 263877:
                                                    #0  0x00007fd8a0af7e20 n/a (libvulkan_radeon.so + 0xf7e20)
                                                    #1  0x00007fd8a0bcd8cf n/a (libvulkan_radeon.so + 0x1cd8cf)
                                                    #2  0x00005636d70c0ea4 ff_vk_unmap_buffers (sunshine + 0x45dea4)
                                                    #3  0x00005636d70c100b ff_vk_unmap_buffer (sunshine + 0x45e00b)
                                                    #4  0x00005636d70c102d free_data_buf (sunshine + 0x45e02d)
                                                    #5  0x00005636d7198a17 buffer_pool_flush (sunshine + 0x535a17)
                                                    #6  0x00005636d7198c26 buffer_replace (sunshine + 0x535c26)
                                                    #7  0x00005636d704596e av_packet_unref (sunshine + 0x3e296e)
                                                    #8  0x00005636d70459da av_packet_free (sunshine + 0x3e29da)
                                                    #9  0x00005636d6eb51a8 _ZNSt10unique_ptrIN5video12packet_raw_tESt14default_deleteIS1_EED2Ev.lto_priv.0 (sunshine + 0x2521a8)
                                                    #10 0x00005636d6ea6b69 _ZN6stream20videoBroadcastThreadERN5boost4asio21basic_datagram_socketINS1_2ip3udpENS1_15any_io_executorEEE (sunshine + 0x243b69)
                                                    #11 0x00005636d7f4f749 execute_native_thread_routine (sunshine + 0x12ec749)
                                                    #12 0x00007fd938a97739 n/a (libc.so.6 + 0x97739)
                                                    #13 0x00007fd938b1bedc n/a (libc.so.6 + 0x11bedc)

Since an in-flight packet's packet_raw_avcodec destructor was calling av_packet_free(..) after device.reset(), a UAF-type SEGFAULT would manifest. Moving the breakout check
of the encoding loop to check immediately before encode() resolves the issue on my system via repeated stress testing. It may be possible that in-flight packets can still
be active, which may necessitate future refcounting of packets in flight and waiting for it to drop to zero before breaking out of the encode loop, but for now, this minimal change
fully resolves the issue on my system.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants