fix: bump vitepress-plugin-llms to resolve dependabot alerts

[sriramveeraghanta]

Summary

Resolves the two open high-severity dependabot alerts:

• Alert merge master to plane one #69 — linkify-it <= 5.0.1 (quadratic-complexity DoS via mailto: validator) → now 5.0.2
• Alert Self hosted installation changes #68 — brace-expansion >= 3.0.0 < 5.0.7 (exponential-time expansion DoS) → now 5.0.8

Both were transitive dependencies of vitepress-plugin-llms@1.13.1 (via markdown-it and minimatch). Bumping the plugin to ^1.13.4 pulls in patched versions:

• markdown-it 14.3.0 → linkify-it 5.0.2
• minimatch 10.2.6 → brace-expansion 5.0.8

Verification

• pnpm why linkify-it / pnpm why brace-expansion confirm patched versions, single resolution each
• pnpm build completes successfully
• pnpm check:format passes

Summary by CodeRabbit

• Chores
  • Updated the VitePress LLMs plugin development dependency to version 1.13.4.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
docs	Ready	Preview	Jul 29, 2026 8:33pm

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 179c8da2-3eae-435e-99b2-28362ce779f0

📥 Commits

Reviewing files that changed from the base of the PR and between db4451d and b5d805b.

⛔ Files ignored due to path filters (1)

• pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml

📒 Files selected for processing (1)

• package.json

---

📝 Walkthrough

Walkthrough

The development dependency vitepress-plugin-llms was updated from ^1.13.1 to ^1.13.4 in package.json.

Changes

Development dependency update

Layer / File(s)	Summary
Update plugin version package.json	Bumps vitepress-plugin-llms from ^1.13.1 to ^1.13.4.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the dependency bump and its purpose of resolving Dependabot alerts.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/dependabot-alerts-llms-deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}