[dependabot]

Bumps defuddle from 0.19.1 to 0.19.5.

Release notes

Sourced from defuddle's releases.

0.19.5

• Hardened Markdown escaping for links, images, footnotes, callouts, code blocks, and math, preventing page content from becoming unintended markup or unsafe links (#396).
• Fixed lazy-loaded images using explicit source attributes, preventing filenames and unrelated metadata from replacing image URLs (#388).
• Preserved screen-reader text, including mixed numbers and link labels, while removing redundant link annotations (#390).
• Fixed extraction on pages with special characters in IDs and classes, including Tailwind classes and React streaming content. Kept generated selectors stable after shadow DOM and streamed-content changes (#392).
• Fixed whole-page fallbacks overriding successfully extracted content during retries, and allowed async extractors to run before falling back to the page body (#358).
• Added caught extraction errors to debug.errors and automatic content detection when contentSelector is invalid (#358).
• Shared math processing between core and full builds, fixed element creation in cloned documents, and added direct tests for both variants.
• Removed unused code and added unused-code checks to CI.

0.19.4

• Fixed metadata and content extraction inconsistencies between linkedom and JSDOM, including missing site names and dates removed from email headers.
• Fixed lowercase heading serialization with linkedom.
• Fixed backticks escaped inside code blocks and fences ending prematurely (#359).
• Fixed unwanted spaces around inline code, superscripts, subscripts, typographic quotes, and dashes (#379, #364).
• Preserved MathML in arXiv equation tables (#376) and made the MathML converter a required dependency (#385).
• Preserved declarative shadow DOM content.
• Fixed YouTube transcript selection to prefer the default caption language over translations (#370).
• Fixed the CLI hanging after failed fetches.
• Hardened HTML sanitization for templates and unsafe content roots, and escaped C2 wiki source.
• Updated dependencies and added JSDOM coverage to CI.

0.19.3

• Fixed unsafe HTML handling in schema.org content fallbacks.
• Blocked SVG SMIL-based script injection.
• Updated dependencies.

0.19.2

• Fix Wikipedia articles losing sections after the first image row #343
• Fix X extractor due to recent DOM changes
• Reject data: and blob: URLs in content
• Keep the sandbox attribute on iframes
• Update deps

Changelog

Sourced from defuddle's changelog.

0.19.5

• Hardened Markdown escaping for links, images, footnotes, callouts, code blocks, and math, preventing page content from becoming unintended markup or unsafe links (#396).
• Fixed lazy-loaded images using explicit source attributes, preventing filenames and unrelated metadata from replacing image URLs (#388).
• Preserved screen-reader text, including mixed numbers and link labels, while removing redundant link annotations (#390).
• Fixed extraction on pages with special characters in IDs and classes, including Tailwind classes and React streaming content. Kept generated selectors stable after shadow DOM and streamed-content changes (#392).
• Fixed whole-page fallbacks overriding successfully extracted content during retries, and allowed async extractors to run before falling back to the page body (#358).
• Added caught extraction errors to debug.errors and automatic content detection when contentSelector is invalid (#358).
• Shared math processing between core and full builds, fixed element creation in cloned documents, and added direct tests for both variants.
• Removed unused code and added unused-code checks to CI.

0.19.4

• Fixed metadata and content extraction inconsistencies between linkedom and JSDOM, including missing site names and dates removed from email headers.
• Fixed lowercase heading serialization with linkedom.
• Fixed backticks escaped inside code blocks and fences ending prematurely (#359).
• Fixed unwanted spaces around inline code, superscripts, subscripts, typographic quotes, and dashes (#379, #364).
• Preserved MathML in arXiv equation tables (#376) and made the MathML converter a required dependency (#385).
• Preserved declarative shadow DOM content.
• Fixed YouTube transcript selection to prefer the default caption language over translations (#370).
• Fixed the CLI hanging after failed fetches.
• Hardened HTML sanitization for templates and unsafe content roots, and escaped C2 wiki source.
• Updated dependencies and added JSDOM coverage to CI.

Commits

• e87d416 0.19.5
• 6ec17fc Test math transforms on cloned documents
• 96bb527 Share math rule construction between core and full builds
• 3bdcee9 Test core and full math rules directly
• f70d689 Remove duplicate extractor types and lint unused locals
• 02f99a1 Remove dead code and unused helpers
• 6a0f472 Use explicit attributes for lazy image sources (#388)
• 0e206c0 Keep whole-body fallbacks from winning retries (#358)
• 27d818c Escape identifiers and keep generated selectors stable (#392)
• ededffd Keep screen-reader text as content (#390)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for defuddle since your current version.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
wordcell	Ready	Preview	Oct 16, 2026 2:44pm UTC