chore(deps): bump linkify-it and @quasar/quasar-app-extension-qmarkdown in /frontend

[dependabot]

Bumps linkify-it to 5.0.2 and updates ancestor dependency @quasar/quasar-app-extension-qmarkdown. These dependencies need to be updated together.

Updates linkify-it from 3.0.3 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

• Fixed DoS in mailto: links (restrict user name to 64 chars).
• Restricted user/pass part length in links.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

• Rewrite to ESM.

4.0.1 / 2022-05-02

• Fix http:// incorrectly returned as a link by matchStart.

4.0.0 / 2022-04-22

• Add matchAtStart method to match full URLs at the start of the string.
• Fixed paired symbols ((), {}, "", etc.) after punctuation.
• --- option now affects parsing of emails (e.g. user@example.com---)

Commits

• 50a0c91 5.0.2 released
• de3b885 Update package hooks
• 13effaa Add package lock
• 39d748d Bump c8
• 00ce877 Drop tlds deps
• ecde823 Update benchmark to mitata
• 23c62cd Refactor demo / doc build and publish
• fd63f3b CI config update
• f4ea5af demo: update bootstrap & layout
• 1454fb6 lint: dim warnings
• Additional commits viewable in compare view

Updates @quasar/quasar-app-extension-qmarkdown from 2.0.5 to 3.0.1

Release notes

Sourced from @​quasar/quasar-app-extension-qmarkdown's releases.

QMarkdown v3.0.1

Release date: 2026-07-14

Summary

This point release fixes QMarkdown App Extension startup under strict pnpm dependency isolation, including Quasar SSR projects, and refreshes the documentation toolchain.

What’s Changed

Fixes:

• ffe610a5 Fix #412 by loading QMarkdown styles from the App Extension boot module. The import now resolves from the App Extension dependency context instead of the generated application client entry, where strict pnpm installations cannot see transitive packages.
• Remove the host-level quasar.config CSS injection that caused @quasar/quasar-ui-qmarkdown/src/index.scss resolution failures in newly generated SSR applications.

Maintenance:

• Update the documentation stack to MD-Plugins and Q-Press 1.1.0.
• 15760e01 Refresh Quasar and repository tooling dependencies.

Breaking Changes

• None.

Compatibility

• Node.js: >=22.13
• pnpm: >=11.5.0
• Quasar: ^2.21.3
• Quasar App Vite: >=3.0.0
• Vue: ^3.5.39
• npm dist-tag: latest

Installation

Install the UI package directly:

pnpm add @quasar/quasar-ui-qmarkdown

Or install the Quasar App Extension:

quasar ext add @quasar/qmarkdown

Documentation

• Docs: https://qmarkdown.netlify.app/

... (truncated)

Commits

• ffe610a fix(app-extension): resolve UI styles with strict pnpm
• 15760e0 chore(deps): update Quasar tooling
• 58d9478 merge: fold qmarkdown v3 beta into dev
• fe43da7 docs: finalize qmarkdown v3 stable guidance
• 648744c chore(release): prepare qmarkdown v3.0.0 packages
• 7a877af fix(build): generate valid version module
• 4f5e2fe chore: align qmarkdown app-vite metadata
• a3d0f72 chore: refresh qpress generated shell
• 5d4c380 chore(deps): update md-plugins to 1.0.0
• f662d9f chore: update READMEs for sponsorship and clarity
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.