chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.2 in /extension

[dependabot]

Bumps markdown-it from 14.2.0 to 14.3.2.

Changelog

Sourced from markdown-it's changelog.

[14.3.2] - 2026-09-12

Security

• Backported 15.0.2 fixes.

[14.3.1] - 2026-08-27

Security

• Backported 15.0.1 fixes.

[14.3.0] - 2026-07-02

Changed

• Reworked build pipeline & tools.
• Added source maps.
• Bumped linkify-it to 5.0.2.

Fixed

• Preserve backslash-space hard line breaks, matching CommonMark 6.7, #1185.

Commits

• efb9993 14.3.2 released
• daf5a3c Backported 15.0.2 fixes
• a855f10 14.3.1 released
• ad70f6b Backported 15.0.1 fixes
• b407f3b Ignore generated API docs in lint
• bf025ad Prepare package.json for v14 backports
• 2d9bbea fix: recognize lowercase declarations as HTML blocks (CommonMark 4.6) (#1189)
• a311cfb fix: keep literal backslash before space in link destination (CommonMark 6.3)...
• ff0ee08 14.3.0 released
• 52e2749 Bump linkify-it / vite deps
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[Changyong Gong (chagong)]

Lockfile-only minor security update; current-head CI is fully green.

[Changyong Gong (chagong)]

Decision: MERGED

Dependabot PR Manager result

Repository: microsoft/vscode-gradle
Pull request: microsoft/vscode-gradle#1947 — chore(deps-dev): bump markdown-it from 14.2.0 to 14.3.2 in /extension
Update: markdown-it 14.2.0 -> 14.3.2 (minor, indirect development dependency, security-related).
Safety assessment: Dependabot-only provenance; Standard Dependency Gate passed with a one-file generated lockfile diff. markdown-it remains required transitively by direct dev dependency @vscode/vsce; release notes preserve the v14 line and backport security fixes. Risk: low.
Final state: Head e060d03883fbeb8db11f73b25798844f411e847f; merged as squash commit 54a7562ed41d40bfab4665ffd0dab164788d2111; post-merge state MERGED/merge state UNKNOWN; review decision APPROVED; CI 16 successful, 0 failed, 0 non-terminal.
Actions taken: Confirmed the head includes base 7dc995fc0fc1d705244e3db738ad423862134159 with behind_by=0; no branch update, rerun, recreation, or remediation was needed. Audited dependency provenance, necessity, release notes, diff, reviews, rules, and current-head checks; approved head e060d03883fbeb8db11f73b25798844f411e847f; squash merge succeeded at 2026-10-03T08:00:33Z.
Reason: None.
Next action: None.