[dependabot]

Bumps the pip group in /tools/zensical with 3 updates: markdown, pymdown-extensions and zensical.

Updates markdown from 3.11.1 to 3.11.2

Release notes

Sourced from markdown's releases.

Release 3.11.2

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

Changelog

Sourced from markdown's changelog.

[3.11.2] - 2026-10-19

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

Commits

• b41e0aa Bump version to 3.11.2
• 934c53e Add checklist of parts to PR template
• 2249ffd Update AI Policy
• a27428b Sanitize attribute names in fenced_code and legacy_attrs
• 90cdcf5 Add fixed category to changelog
• 97233ef Revert enforcement of CommonMark punctuation rules
• See full diff in compare view

Updates pymdown-extensions from 12.2 to 12.3

Release notes

Sourced from pymdown-extensions's releases.

12.3

• NEW: BetterEm: Expose a way to disable CommonMark punctuation rules in BetterEm if desired via a new punctuation option.

Commits

• 24ae2b3 Fix link
• f19f2d1 Allow disabling CommonMark punctuation rules in BetterEm
• See full diff in compare view

Updates zensical from 0.0.70 to 0.0.72

Release notes

Sourced from zensical's releases.

0.0.72

Summary

This version brings Zensical's behavior closely in line with MkDocs, with support for the privacy plugin and fixes to Markdown rendering, link handling, and project layouts.

Fenced code blocks now work by default, Markdown extension order is preserved with SuperFences, and links to Markdown pages can end with a trailing slash. HTML URL rewriting handles character references correctly while preserving surrounding quotes and whitespace. Overlapping documentation and theme directories and custom polyfill scripts are also handled correctly.

File watching is more reliable, and template edits made within the same second are now picked up.

Additionally, the user interface is updated to v0.0.38, and this release includes a security update to rustls.

Changelog

Features

• 581fc01 zensical, compat – support privacy plugin

Bug fixes

• 1dd7988 zensical, compat – resolve HTML character references before rewriting URLs
• 3f3c8a7 compat – normalize polyfill script entries (#1075)
• b37107b compat – handle same second edits
• 967bfec zensical, compat – restrict HTML URL rewriting to attribute values
• 47cf4da zensical-watch – handle reused ext4 inode in watcher
• 878aaad zensical, compat – retain overlapping documentation and theme sources
• 36fc72a compat – preserve configured SuperFences extension order
• e0bf56d zensical-watch, compat – ignore access events in watcher
• 7cfd5f6 ui – update ui to v0.0.38
• 55186fb – patch rustls to mitigate security vulnerability
• dc85f5f zensical, compat – support links to Markdown pages with a trailing slash
• 75bbdae compat – support fenced code blocks by default
• d5086f1 zensical, zensical-serve, compat – print all bound addresses when serving (#1050)
• b4a4804 zensical – count search token positions for field limits (#1046)

0.0.71

Summary

This version adds support for mkdocs-include-markdown-plugin. It also fixes social card rendering when palette colors are unset, prevents unnecessary restarts during file discovery, and reports oversized search fields more clearly.

Changelog

Features

• db5f22e zensical, compat – support include-markdown plugin

Bug fixes

• 7430b0c zensical, compat – preserve social palette defaults for unset colors (#1041)
• 62a6e6b – build manylinux AArch64 wheel on native ARM runner (#1040)
• 812f06b zensical, zensical-watch, compat – avoid false restarts during file discovery (#1035)

... (truncated)

Commits

• 5395898 chore: release v0.0.72
• 1dd7988 fix: resolve HTML character references before rewriting URLs
• 2cb2c53 chore: upgrade uv lock file
• 3f3c8a7 fix: normalize polyfill script entries (#1075)
• b37107b fix: handle same second edits
• 94fefde chore: format Python code
• 967bfec fix: restrict HTML URL rewriting to attribute values
• 47cf4da fix: handle reused ext4 inode in watcher
• 9bec033 chore: remove Pillow dependency
• 878aaad fix: retain overlapping documentation and theme sources
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions