fix(deps): update dependency markuplint to v4.18.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
markuplint	4.14.0 → 4.18.3

---

Release Notes

markuplint/markuplint (markuplint)

v4.18.3

Compare Source

Highlights

• Astro parser — Stop surfacing non-fatal Astro diagnostics as parse errors and preserve spread attributes containing TypeScript
• <script> / <style> raw-text — Correctly parse raw-text element bodies in parseCodeFragment per HTML LS §13.2.5.1
• VS Code on Windows — Make module-specifier resolution OS-independent for POSIX absolute paths
• v4 maintenance release; no API changes

---

Bug Fixes

@​markuplint/astro-parser@​4.18.3

• Stop surfacing non-fatal Astro diagnostics as parse errors (#​3834, #​3823)
  • Astro reports <script> linting hints as diagnostics; markuplint no longer turns these into parse errors that mask real issues
• Preserve spread attributes containing TypeScript and expression-child siblings (#​3854, #​3824)
  • Brace-aware extractor for {...spread} attributes that contain generics, casts, or template-string children

@​markuplint/parser-utils@​4.18.3

• Handle raw-text element body in parseCodeFragment per HTML LS §13.2.5.1 (#​3862, #​3859, #​3860)
  • v4 backport of #​3825; fixes downstream Astro <script> / <style> body handling and matches WHATWG raw-text tokenization

vscode-markuplint@​4.18.3

• Make toImportSpecifier OS-independent for POSIX absolute paths (#​3841, #​3836)
  • The extension now resolves module specifiers consistently on Windows and POSIX

---

Other Changes

• ci: Switch pnpm build approval to pnpm-workspace.yaml allowBuilds (#​3863) — v4 backport
• docs: Document parser-utils raw-text behavior and downstream impact, add astro-parser troubleshooting, and add a v4 backport port guide cross-linking #​3825 / #​3859
• test: Regression coverage for #​3823 (ml-core), #​3860 (jsx-parser, astro-parser script/style raw-text body)
• chore: Register rcdata in the cspell dictionary

---

Updated Packages

Package	Version
markuplint	4.18.3
vscode-markuplint	4.18.3
@​markuplint/astro-parser	4.18.3
@​markuplint/parser-utils	4.18.3
@​markuplint/ml-core	4.18.3
@​markuplint/file-resolver	4.18.3
@​markuplint/html-parser	4.18.3
@​markuplint/jsx-parser	4.18.3
@​markuplint/svelte-parser	4.18.3
@​markuplint/vue-parser	4.18.3
@​markuplint/pug-parser	4.18.3
@​markuplint/alpine-parser	4.18.3
@​markuplint/ejs-parser	4.18.3
@​markuplint/erb-parser	4.18.3
@​markuplint/htmx-parser	4.18.3
@​markuplint/liquid-parser	4.18.3
@​markuplint/mustache-parser	4.18.3
@​markuplint/nunjucks-parser	4.18.3
@​markuplint/php-parser	4.18.3
@​markuplint/smarty-parser	4.18.3
@​markuplint/rules	4.18.3
@​markuplint/rule-textlint	4.18.3
@​markuplint/create-rule	4.18.3
@​markuplint/pretenders	4.18.3
@​markuplint-test/react	4.18.3

---

Full Changelog: markuplint/markuplint@v4.18.2...v4.18.3

v4.18.1

Compare Source

v4.18.0

Compare Source

Highlights

• TypeScript 6.0 support — Adds compatibility with TypeScript 6.0 (#​3763, closes #​3759)
• Switched v4 to fixed versioning — All v4 packages now share a single version, starting at 4.18.0, to simplify npm OIDC Trusted Publishing via a single tag-triggered workflow
• npm OIDC Trusted Publishing — Releases now publish via GitHub Actions with OIDC provenance instead of long-lived npm tokens
• Dependency upgrades — Prettier 3.8, eslint-plugin-unicorn v63, typescript-eslint v8.55, Svelte 5.50, React 19.2.5, Node 22.22.2, and more

---

v4 Maintenance Policy

Going forward, the v4 line will only receive dependency updates and critical fixes. Feature work and non-critical improvements happen on the v5 line (currently in RC).

---

Versioning Change

Starting with 4.18.0, all markuplint and @markuplint/* packages share a single version instead of versioning independently.

Why: npm's OIDC Trusted Publishing workflow is triggered by a single v* tag. Independent versioning produced per-package tags (@markuplint/cli@x.y.z) that did not fire the publish workflow. Fixed versioning enables tag-triggered releases with a clean, single entry per release.

Impact: Some packages see a large version jump (e.g., @markuplint/ml-ast 4.4.12 → 4.18.0). No API changes; all packages stay within the v4 line's semver contract.

---

Features

• Add TypeScript 6.0 support (#​3763, #​3759)
  • Update TypeScript from 5.9.3 to 6.0.2
  • Remove deprecated baseUrl and paths from root tsconfig.json
  • Add DOM stubs for TS 6 lib.dom.d.ts updates (MLNode.moveBefore, MLElement.customElementRegistry, matches() overloads, aria*Elements nullability, etc.)

---

Bug Fixes

• Adapt code to breaking changes from dependency upgrades
• Disable unicorn/no-array-sort rule and fix no-immediate-mutation
• Resolve additional eslint-plugin-unicorn v63 errors
• Update glob import to use named export
• Force local file: resolution in isolated-env sandbox tests

---

Other Changes

• Switch lerna.json from independent to fixed versioning at 4.18.0
• Add npm OIDC Trusted Publishing workflow (.github/workflows/publish.yml)
• Run test/lint CI on pull requests to v4
• Bump packageManager to yarn@​4.14.1
• Dependency upgrades: React 19.2.5, Node 22.22.2, dotenv 17.4.2, Docusaurus 3.9.2, Svelte 5.50.2, stylelint 17.2.0, typescript-eslint 8.55.0, lerna 9.0.4, glob 13.0.2, textlint-rule-prh v6, and others
• Style: format files with Prettier 3.8.1

---

Updated Packages

All packages bumped to 4.18.0:

Package	Version
markuplint	4.18.0
@​markuplint/cli-utils	4.18.0
@​markuplint/config-presets	4.18.0
@​markuplint/create-rule	4.18.0
@​markuplint/file-resolver	4.18.0
@​markuplint/html-parser	4.18.0
@​markuplint/html-spec	4.18.0
@​markuplint/htmx-parser	4.18.0
@​markuplint/i18n	4.18.0
@​markuplint/jsx-parser	4.18.0
@​markuplint/ml-ast	4.18.0
@​markuplint/ml-config	4.18.0
@​markuplint/ml-core	4.18.0
@​markuplint/ml-spec	4.18.0
@​markuplint/parser-utils	4.18.0
@​markuplint/pretenders	4.18.0
@​markuplint/react-spec	4.18.0
@​markuplint/rule-textlint	4.18.0
@​markuplint/rules	4.18.0
@​markuplint/selector	4.18.0
@​markuplint/shared	4.18.0
@​markuplint/spec-generator	4.18.0
@​markuplint/svelte-parser	4.18.0
@​markuplint/svelte-spec	4.18.0
@​markuplint/types	4.18.0
@​markuplint/vue-parser	4.18.0
@​markuplint/vue-spec	4.18.0
@​markuplint/alpine-parser	4.18.0
@​markuplint/astro-parser	4.18.0
@​markuplint/ejs-parser	4.18.0
@​markuplint/erb-parser	4.18.0
@​markuplint/liquid-parser	4.18.0
@​markuplint/mustache-parser	4.18.0
@​markuplint/nunjucks-parser	4.18.0
@​markuplint/php-parser	4.18.0
@​markuplint/pug-parser	4.18.0
@​markuplint/smarty-parser	4.18.0
@​markuplint-dev/eslint-config	4.18.0
@​markuplint-dev/prettier-config	4.18.0
@​markuplint-dev/tsconfig	4.18.0

---

Full Changelog: markuplint/markuplint@v4.14.1...v4.18.0

v4.14.1

Compare Source

Highlights

• Added ignoreOmittedElements option to the required-element rule
• neighbor-popovers rule now supports the Invoker Commands API
• Added non-interactive CLI mode to create-rule (for AI/automation)
• Major HTML spec updates: new attributes, ARIA role fixes, deprecated attributes

---

Features

@​markuplint/rules@​4.12.0

• Added ignoreOmittedElements option to required-element rule (#​3135, #​2066)
  • Allows excluding elements with implicit omission (<head>, <body>, <tbody>, etc.) from required element checks
• neighbor-popovers rule now supports the Invoker Commands API (#​3134, #​3065)
  • Correctly recognizes popover invocation patterns using commandfor/command attributes

@​markuplint/create-rule@​4.8.0

• Added non-interactive CLI mode (#​3132)
  • Scaffold rules without prompts using --name, --lang, and other flags

@​markuplint/html-spec@​4.17.0

New HTML attributes:

• Added headingoffset / headingreset attributes (whatwg/html#11086, whatwg/html#11979)
• Added switch attribute to <input>
• Added privateToken attribute to <iframe>
• Added shadowrootreferencetarget attribute to <template>
• Added requiredExtensions and systemLanguage attributes to <svg:switch>
• Added request-close value to <button> command attribute
• Added interestfor attribute (Interest Invokers API)
• Changed scrollbar aria-controls from required to inherited

Deprecations:

• Deprecated attributionsrc attribute
• Deprecated browsingtopics attribute on <iframe>

---

Bug Fixes

@​markuplint/html-spec@​4.17.0

• Added math and meter to permitted roles for <img> (#​3129)
• Added permitted roles to <button> based on HTML-ARIA spec (#​3127)
• Fixed typo in <meter> element's implicit role (#​3123)
• Updated <html> element's implicit role to generic (w3c/aria#2504, w3c/html-aria#550)
• Reverted overly broad role description changes

@​markuplint/spec-generator@​4.8.2

• Fixed MDN data to correctly merge with spec-defined attributes (#​3102)

---

Other Changes

• @markuplint/svelte-parser: Upgraded Svelte to 5.50.0
• @markuplint/create-rule: Replaced fail() with UsageHintError class, removed ts-node dependency
• ESLint v10 compatibility
• Documentation improvements (architecture docs, JSDoc, SKILL.md additions)
• Dependency updates

---

Updated Packages

Package	Version
markuplint	4.14.1
@​markuplint/rules	4.12.0
@​markuplint/html-spec	4.17.0
@​markuplint/create-rule	4.8.0
@​markuplint/spec-generator	4.8.2

---

Full Changelog: markuplint/markuplint@v4.14.0...v4.14.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.