chore(deps): bump comrak from 0.39.0 to 0.43.0 in /backend

[dependabot]

Bumps comrak from 0.39.0 to 0.43.0.

Release notes

Sourced from comrak's releases.

v0.43.0

Parser changes:

• superscript or subscript extensions only: punctuation following a superscript or subscript delimiter no longer disqualifies the delimiter from being considered left-flanking, such that e^-i^ and n~-i~ now parse as superscript or subscript respectively (by @​kivikakk in kivikakk/comrak#593)

Changed APIs:

• html::format_document, xml::format_document, cm::format_document and friends now take an std::fmt::Write as their output argument, instead of an std::io::Write, to avoid revalidating UTF-8 (by @​kivikakk in kivikakk/comrak#601)
• bin: allow --header-ids '' for prefix-less headers (by @​kivikakk in kivikakk/comrak#610)

New APIs:

• Add CJK Friendly Emphasis to CLI option (by @​tats-u in kivikakk/comrak#607)

Documentation updates:

• Introduce cargo binstall by (@​tats-u in kivikakk/comrak#608)
• www: add (by @​kivikakk in kivikakk/comrak#611)

Diff: kivikakk/comrak@v0.42.0...v0.43.0

v0.42.0

New APIs:

• cm::escape_inline (aliased at crate level as escape_commonmark_inline) is added; escapes input text suitable for inclusion in a CommonMark document where regular inline processing takes place. (by @​kivikakk in kivikakk/comrak#602)
• cm::escape_link_destination (aliased at crate level as escape_commonmark_link_destination) is added; escapes input URL suitable for use as a link destination in a CommonMark document. (by @​kivikakk in kivikakk/comrak#605)

Changed APIs:

• html::collect_text now returns a String. html::collect_text_append is added if you still want to start with your own (String) buffer. (by @​kivikakk in kivikakk/comrak#600)
  • There was no particular reason for this populating a Vec<u8> instead of a String; it was just old.
• Anchorizer::anchorizer now takes &str instead of a String. (by @​kivikakk in kivikakk/comrak#603)
  • As above.

Updates:

• Update is_cjk in CJK Friendly Emphasis to Unicode 17. (by @​tats-u in kivikakk/comrak#598)

Behind the scenes:

• Rename a bunch of "nch" to "nh". (by @​kivikakk in kivikakk/comrak#599)

Diff: kivikakk/comrak@v0.41.1...v0.42.0

v0.41.1

Bug fixes:

• Fix the range of non-emoji general purpose variation selector by @​tats-u in kivikakk/comrak#596

Stability:

... (truncated)

Changelog

Sourced from comrak's changelog.

[v0.43.0] - 2025-09-29

Parser changes:

• superscript or subscript extensions only: punctuation following a superscript or subscript delimiter no longer disqualifies the delimiter from being considered left-flanking, such that e^-i^ and n~-i~ now parse as superscript or subscript respectively (by @​kivikakk in kivikakk/comrak#593)

Changed APIs:

• html::format_document, xml::format_document, cm::format_document and friends now take an std::fmt::Write as their output argument, instead of an std::io::Write, to avoid revalidating UTF-8 (by @​kivikakk in kivikakk/comrak#601)
• bin: allow --header-ids '' for prefix-less headers (by @​kivikakk in kivikakk/comrak#610)

New APIs:

• Add CJK Friendly Emphasis to CLI option (by @​tats-u in kivikakk/comrak#607)

Documentation updates:

• Introduce cargo binstall by (@​tats-u in kivikakk/comrak#608)
• www: add (by @​kivikakk in kivikakk/comrak#611)

Diff: kivikakk/comrak@v0.42.0...v0.43.0

[v0.42.0] - 2025-09-24

New APIs:

• cm::escape_inline (aliased at crate level as escape_commonmark_inline) is added; escapes input text suitable for inclusion in a CommonMark document where regular inline processing takes place. (by @​kivikakk in kivikakk/comrak#602)
• cm::escape_link_destination (aliased at crate level as escape_commonmark_link_destination) is added; escapes input URL suitable for use as a link destination in a CommonMark document. (by @​kivikakk in kivikakk/comrak#605)

Changed APIs:

• html::collect_text now returns a String. html::collect_text_append is added if you still want to start with your own (String) buffer. (by @​kivikakk in kivikakk/comrak#600)
  • There was no particular reason for this populating a Vec<u8> instead of a String; it was just old.
• Anchorizer::anchorizer now takes &str instead of a String. (by @​kivikakk in kivikakk/comrak#603)
  • As above.

Updates:

• Update is_cjk in CJK Friendly Emphasis to Unicode 17. (by @​tats-u in

... (truncated)

Commits

• e626b7c Merge pull request #613 from kivikakk/release/v0.43.0
• 051c7a2 .github/workflows/release: brranch!
• ac438e1 CHANGELOG.md: finish 0.43.0.
• a8b5ba9 CHANGELOG.md: add generated portion.
• abe4f3e Cargo.toml: v0.43.0.
• 9aaf3ba .github/workflows/release: remove non-functional part.
• 6197f8b Merge pull request #593 from kivikakk/push-ouwkwyxwmrup
• c0bb09f CHANGELOG.md: add this PR.
• f70e197 CHANGELOG.md: it's Markdown!
• 136e0e9 inlines: relax "left-flanking delimiter run" for superscript/subscript.
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[greptile-apps]

Greptile Overview

Greptile Summary

This PR upgrades the comrak CommonMark parsing library from version0.39.0 to 0.43.0 in the Rust backend. The comrak library is used for Markdown processing in the Atuin Desktop application, likely for rendering runbook content and documentation. This update includes breaking API changes where format functions now expect std::fmt::Write instead of std::io::Write, and some text collection functions return String instead of Vec<u8>. While this is routine dependency maintenance via Dependabot, the breaking changes need verification against existing code usage.

Important Files Changed

Changed Files

Filename	Score	Overview
backend/Cargo.toml	3/5	Updates comrak dependency from 0.39.0 to 0.43.0 with breaking API changes

Key concerns:

• Breaking API changes in comrak may cause compilation failures
• Format functions changed from std::io::Write to std::fmt::Write
• Text collection functions changed return type from Vec<u8> to String
• Need to verify existing comrak usage in codebase is compatible

Confidence Score: 3/5 - Standard dependency update but includes breaking changes that require code review to ensure compatibility.

_{1 file reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

[dependabot]

Superseded by #165.