chore(deps): bump mistune from 3.3.0 to 3.3.4

[dependabot]

Bumps mistune from 3.3.0 to 3.3.4.

Release notes

Sourced from mistune's releases.

v3.3.4

   🐞 Bug Fixes

• Improve parsing for edge cases  -  by @​lepture (53412)
• Improve inline parser by learning from wenmode  -  by @​lepture (37bb7)
• Prevent deep alt parsing  -  by @​lepture (b77ee)
• def_list: A tab after the ':' marker no longer makes the definition a code block  -  by @​chuenchen309 and Claude Opus 4.8 (7aa49)
• table: Reject a non-delimiter second row instead of eating it  -  by @​chuenchen309 and Claude Opus 4.8 (86f9f)

   🏎 Performance

• Optimize inline edge-case parsing  -  by @​lepture (b4dd3)

    View changes on GitHub

v3.3.3

   🐞 Bug Fixes

• Set prev token in render_list_item and add block_text to ignore_blocks  -  by @​gaoflow in lepture/mistune#456 (0799e)
• Improve nested bracket link input  -  by @​lepture (fe02f)
• Escape literal emphasis markers in MarkdownRenderer  -  by @​Sanjays2402 (b0429)
• Use SAFE_PROTOCOLS instead of HARMFUL_PROTOCOLS  -  by @​lepture (4009f)
• Add max_emphasis_depth  -  by @​lepture (0938f)
• Add image max depth  -  by @​lepture (cca5e)
• inline: Use original run length in emphasis multiple-of-3 rule  -  by @​greymoth-jp and Claude Opus 4.8 (1M context) (2d26b)

   🏎 Performance

• Improve link label parsing performance  -  by @​lepture (e001d)
• Improve performance for math and formatting plugins  -  by @​lepture (c2228)
• Improve for footnotes, ruby and spoiler  -  by @​lepture (ae7e9)

    View changes on GitHub

v3.3.2

   🐞 Bug Fixes

• Try to support python 3.8  -  by @​lepture (c9f1a)
• Resolve mypy issues for python 3.8 and 3.9+  -  by @​lepture (29b70)

    View changes on GitHub

v3.3.1

   🐞 Bug Fixes

• abbr: Update process_text method in abrr, adding parse_emphasis parameter  -  by @​lepture (ae850)
• directive: Use correct file path for include directive  -  by @​lepture (18c21)

    View changes on GitHub

Changelog

Sourced from mistune's changelog.

Version 3.3.4

Released on Jul 22, 2026

• Harden inline parsing against deeply nested and adversarial link, image, emphasis, formatting, math, and reference inputs.
• Improve performance for repeated link suffixes, dense emphasis, unclosed formatting markers, inline spoilers, and adjacent ruby tokens.
• Refactor the inline parser into dedicated emphasis and link modules.
• Escape literal */_ emphasis markers in the Markdown renderer so round-tripping escaped text does not re-introduce emphasis.

Version 3.3.3

Released on Jul 9, 2026

• Limit deeply nested emphasis and image parsing to avoid RecursionError.
• Fix repeated link suffix and unclosed formatting marker performance issues.
• Fix unclosed inline spoiler performance issues.
• Avoid recursive parsing for adjacent ruby tokens.
• Speed up footnote reference indexing.

Version 3.3.2

Released on Jun 23, 2026

• Fix Python 3.8 import compatibility in the inline parser.
• Fix mypy compatibility for list parsing on Python 3.8 and 3.9+.

Version 3.3.1

Released on Jun 22, 2026

• Fix abbr plugin compatibility with escaped inline text.
• Normalize included Markdown line endings before parsing directives.

Commits

• 69ec2b8 chore: release 3.3.4
• 234aa25 test: more deadline for pypy
• b77ee58 fix: prevent deep alt parsing
• 66b2171 refactor: expose entity boundary helper
• 30ef44b refactor: move link token construction
• 3066209 refactor: require explicit emphasis depth
• 0396492 refactor: split inline parser modules
• 80b3e85 refactor: isolate inline parser state bounds
• 7b0194c test: cover inline performance edge cases
• b4dd328 perf: optimize inline edge-case parsing
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)