[Snyk] Fix for 1 vulnerabilities

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DIFF-14917201	590

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

---

EntelligenceAI PR Summary

This PR upgrades the markdown rendering dependencies to their latest major versions with breaking changes.

• Upgraded react-markdown from v8.0.7 to v9.0.0 in package.json
• Upgraded remark-gfm from v3.0.1 to v4.0.0 in package.json
• Introduced new rendering architecture with hast-util-to-jsx-runtime in package-lock.json
• Updated type definitions to @types/mdast v4, @types/hast v3, @types/unist v3
• Upgraded micromark utilities to v2.x and MDX-related packages
• Added new dependencies: @ungap/structured-clone, devlop, estree-util-is-identifier-name, character entity packages
• Removed diff and uvu packages
• Upgraded style-to-object from v0.4.1 to v1.0.14 with corresponding inline-style-parser updates

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Review	Updated (UTC)
agent-gpt	Error		Jan 23, 2026 2:58am
solana-ai-agent-gpt5	Error		Jan 23, 2026 2:58am

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	remark-gfm@​3.0.1 ⏵ 4.0.0			+1
	react-markdown@​8.0.7 ⏵ 9.0.0	+1

View full report

[entelligence-ai-pr-reviews]

Walkthrough

This PR upgrades the markdown rendering stack to the latest major versions, specifically react-markdown from v8.0.7 to v9.0.0 and remark-gfm from v3.0.1 to v4.0.0. These breaking changes introduce a new rendering architecture using hast-util-to-jsx-runtime and update the entire dependency tree including type definitions (@types/mdast v4, @types/hast v3, @types/unist v3), micromark utilities (v2.x), and MDX-related packages. The upgrade adds several new dependencies for enhanced functionality (@ungap/structured-clone, devlop, estree-util-is-identifier-name, character entity packages) while removing obsolete ones (diff, uvu). The style-to-object package is also upgraded from v0.4.1 to v1.0.14 with corresponding inline-style-parser updates.

Changes

File(s)	Summary
package.json	Upgraded react-markdown from v8.0.7 to v9.0.0 and remark-gfm from v3.0.1 to v4.0.0 (breaking changes).
package-lock.json	Updated dependency tree with new rendering architecture (hast-util-to-jsx-runtime), upgraded type definitions (@types/mdast v4, @types/hast v3, @types/unist v3), updated micromark utilities to v2.x, upgraded MDX utilities (mdast-util-mdx-expression, mdast-util-mdx-jsx, mdast-util-mdxjs-esm), added new dependencies (@ungap/structured-clone, devlop, estree-util-is-identifier-name, character entity packages), removed diff and uvu packages, and upgraded style-to-object from v0.4.1 to v1.0.14 with inline-style-parser updates.

Sequence Diagram

This diagram shows the interactions between components:

sequenceDiagram
    participant App as Application
    participant RM as react-markdown v9
    participant RP as remark-parse v11
    participant RG as remark-gfm v4
    participant RR as remark-rehype v11
    participant MDTH as mdast-util-to-hast v13
    participant HTJR as hast-util-to-jsx-runtime v2
    participant React as React JSX Runtime
    
    App->>RM: Render markdown content
    RM->>RP: Parse markdown to MDAST
    Note over RP: Uses micromark v4<br/>for tokenization
    RP->>RG: Apply GFM extensions
    Note over RG: Tables, strikethrough,<br/>task lists, autolinks
    RG-->>RP: Enhanced MDAST tree
    RP-->>RM: MDAST syntax tree
    
    RM->>RR: Convert to HAST
    RR->>MDTH: Transform MDAST to HAST
    Note over MDTH: Uses @ungap/structured-clone<br/>for deep cloning
    MDTH-->>RR: HAST tree
    RR-->>RM: HTML AST
    
    RM->>HTJR: Convert HAST to JSX
    Note over HTJR: New in v9:<br/>Direct JSX runtime conversion
    HTJR->>HTJR: Process style attributes
    Note over HTJR: Uses style-to-js v1<br/>and html-url-attributes
    HTJR->>React: Create React elements
    React-->>HTJR: JSX elements
    HTJR-->>RM: React components
    RM-->>App: Rendered markdown

Loading

▶️ ⚡ AI Code Reviews for VS Code, Cursor, Windsurf
Install the extension

Note for Windsurf

Please change the default marketplace provider to the following in the windsurf settings:

Marketplace Extension Gallery Service URL: https://marketplace.visualstudio.com/_apis/public/gallery

Marketplace Gallery Item URL: https://marketplace.visualstudio.com/items

Entelligence.ai can learn from your feedback. Simply add 👍 / 👎 emojis to teach it your preferences. More shortcuts below

Emoji Descriptions:

• ⚠️ Potential Issue - May require further investigation.
• 🔒 Security Vulnerability - Fix to ensure system safety.
• 💻 Code Improvement - Suggestions to enhance code quality.
• 🔨 Refactor Suggestion - Recommendations for restructuring code.
• ℹ️ Others - General comments and information.

Interact with the Bot:

• Send a message or request using the format:
  @entelligenceai + *your message*

Example: @entelligenceai Can you suggest improvements for this code?

• Help the Bot learn by providing feedback on its responses.
  @entelligenceai + *feedback*

Example: @entelligenceai Do not comment on `save_auth` function !

Also you can trigger various commands with the bot by doing
@entelligenceai command

The current supported commands are

1. config - shows the current config
2. retrigger_review - retriggers the review

More commands to be added soon.