chore(deps): bump linkify-it and @ronradtke/react-native-markdown-display

[dependabot]

Bumps linkify-it to 5.0.2 and updates ancestor dependency @ronradtke/react-native-markdown-display. These dependencies need to be updated together.

Updates linkify-it from 4.0.1 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

• Fixed DoS in mailto: links (restrict user name to 64 chars).
• Restricted user/pass part length in links.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

• Rewrite to ESM.

Commits

• 50a0c91 5.0.2 released
• de3b885 Update package hooks
• 13effaa Add package lock
• 39d748d Bump c8
• 00ce877 Drop tlds deps
• ecde823 Update benchmark to mitata
• 23c62cd Refactor demo / doc build and publish
• fd63f3b CI config update
• f4ea5af demo: update bootstrap & layout
• 1454fb6 lint: dim warnings
• Additional commits viewable in compare view

Updates @ronradtke/react-native-markdown-display from 8.1.0 to 9.0.3

Release notes

Sourced from @​ronradtke/react-native-markdown-display's releases.

9.0.3

Everything included in https://github.com/RonRadtke/react-native-markdown-display/releases/tag/9.0.0

• some fixes for listing / prettier
• improved readme

9.0.0

Dependency updates

I updated all dependencies to the current version

Typing & Tests

The lib got better typing in the code itself. I made a full transition to typescript and added tests to validate the lib

Plugin support

The lib now supports common mark plugins. You also can define your own markdown elements directly

Streaming support

The lib now supports markdown streaming e.g. for the output of generative AI systems

Input

I added a markdown input. For now it will display raw markdown with a preview box. The toolbar can be modified. Full support for plugins and own elements is given. I am working also on a WYSIWYG Editor, but that will take some more time. I want to keep in on JS side only, thus it likely won't offer all markdown but only the most common elements.

Example App

I also added an example App showcasing most of the possibilities

Accessibility

I keep an eye on the accessibility and added accessibility features to everything to my best knowledge. Of course I might have missed out on sth. I also added test cases for it using react-native-accessibility-engine and the test-renderer. If you find issues, please create an issue or a PR.

Documentation rework

To give you a better overview I split the documentation in 2 files, one for the display, one for the input.

Of course I used a mixture of different coding AI systems to support here, still I tested and check everything manually as good as I can. I also am using the library in production so it is of my interest to have it stable, since I need the features myself.

8.1.1

No release notes provided.

Commits

• 0d74bde who doesn't like fancy icons in th ereadme
• 78f2534 enhance readme a bit
• da55017 fix/run prettier
• 9b24d3c small cleanup
• 8f89203 version
• 3705763 - Add streaming support
• 6afa433 rework styling a bit
• 0b6156a update docu
• d26a403 add darkmode to the example app and fix some accessibility
• 8cce659 adds syntax highlighting in a code fragment and possibility to copy code
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.