chore(deps): bump linkify-it and text-runner

[dependabot]

Bumps linkify-it to 5.0.2 and updates ancestor dependency text-runner. These dependencies need to be updated together.

Updates linkify-it from 4.0.1 to 5.0.2

Changelog

Sourced from linkify-it's changelog.

5.0.2 / 2026-07-02

• Fixed DoS in mailto: links (restrict user name to 64 chars).
• Restricted user/pass part length in links.

5.0.1 / 2026-05-23

• Fixed DoS in fuzzy links/emails search.
• Reworked search logic - check each pattern separate, use g regexes instead of slice.
• Removed internal cache - useless overcomplication.

5.0.0 / 2023-12-01

• Rewrite to ESM.

Commits

• 50a0c91 5.0.2 released
• de3b885 Update package hooks
• 13effaa Add package lock
• 39d748d Bump c8
• 00ce877 Drop tlds deps
• ecde823 Update benchmark to mitata
• 23c62cd Refactor demo / doc build and publish
• fd63f3b CI config update
• f4ea5af demo: update bootstrap & layout
• 1454fb6 lint: dim warnings
• Additional commits viewable in compare view

Updates text-runner from 5.0.2 to 7.5.0

Release notes

Sourced from text-runner's releases.

7.1.0

• provides JSON-Schema definition for Text-Runner config files: https://raw.githubusercontent.com/kevgo/text-runner/refs/heads/main/documentation/text-runner.schema.json
• actions are now type stripped rather than transpiled - if you want to keep using full TypeScript, move your actions into their own npm modules or transpile them yourself

Updates to the standard library:

• the new npm/script-name action verifies that file package.json defines a script with the given name
• the new npm/script-call action verifies full calls of a script defined in package.json
• renames workspace/existing-file to workspace/existing-file-with-content
• the workspace/new-file action now allows providing the filename via a HTML attributed called filename
• new workspace/existing-file action verifies only file existence, not content
• new workspace/empty-file action creates an empty file with the given name in the workspace

7.0.0

• Streamlining the naming, everything named text-run is now named text-runner:

  • The Text-Runner binary name changes from text-run to text-runner.
  • The configuration file name changes from text-run.yml to text-runner.jsonc
  • The folder in which Text-Runner looks for actions changes from text-run/ to text-runner/.

• The configuration file format changes from YML to JSONC (JSON with comments).

• There is now JSON-Schema support for configuration files:

  {
    "$schema": "https://raw.githubusercontent.com/kevgo/text-runner/refs/heads/main/documentation/text-runner.schema.json",
    //...
  

Changelog

Sourced from text-runner's changelog.

7.5.0

• requires Node 24 or newer

7.4.0

• new action: workspace/copy-file
• new action: workspace/compare-files

7.3.0

• subshell actions can now receive the command to execute via the command attribute

7.2.1

• updates dependencies to remove all security warnings
• remove outdated dependencies that cause security warnings

7.2.0

• rename workspace/additional-file-content to workspace/append-file
• you can now run env DEBUG=* text-runner to see additional debug messages
• all workspace actions now consistently allow dir and filename attributes
• [workspace/append-file] now errors if the file to append doesn't exist

7.1.2

• updates dependencies to fix all current security alerts

7.1.1

• adds missing ast.NodeType for list items

7.1.0

• provides JSON-Schema definition for Text-Runner config files: https://raw.githubusercontent.com/kevgo/text-runner/refs/heads/main/documentation/text-runner.schema.json
• actions are now type stripped rather than transpiled - if you want to keep using full TypeScript, move your actions into their own npm modules or transpile them yourself

Updates to the standard library:

• the new npm/script-name action verifies that file package.json defines a script with the given name
• the new npm/script-call action verifies full calls of a script defined in package.json

... (truncated)

Commits

• de1a73c Publish
• 08c58a7 v7.5.0
• c531c06 Fix path (#1658)
• 87989cd Require Node 24 (#1657)
• 4d53a4a Update dependencies (#1656)
• ac8f587 Improve startup (#1655)
• 9259936 Improve startup logic (#1654)
• 8f0111c Instructions for agents (#1653)
• a173b52 v7.4.0 (#1651)
• 837b0d5 workspace/compare-files action (#1650)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.