[dependabot]

Updates the requirements on markdown to permit the latest version.

Release notes

Sourced from markdown's releases.

Release 3.11.1

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

Changelog

Sourced from markdown's changelog.

[3.11.1] - 2026-10-13

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

[3.11.0] - 2026-09-25

Changed

• Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).
• Officially support Python 3.15 and drop support for Python 3.10
• Walk backtick runs in BacktickInlineProcessor without a regex (#1620).
• Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

• Ensure removing Abbreviations does not raise an error (#1634).
• Fix an issue with excessive backtracking when matching inline code blocks (#1617).
• md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).
• Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).
• Document attr_list usage for def_list (#1123).

[3.10.3] - 2026-07-30

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

[3.10.2] - 2026-02-09

Fixed

• Fix a regression related to comment handling (#1590).
• More reliable fix for </ (#1593).

... (truncated)

Commits

• 2258b48 Bump version to 3.11.1
• 6f825aa Rewrite emphasis handling
• 0bf535b Keep a comment inside raw inline HTML in the same paragraph
• 3ade80d Add playground to docs
• ee57673 docs/extensions/tables.md: Fix header formatting
• 7c265bc Ensure that unterminated HTML tags do not cause text to be dropped
• 7a29324 Fix inline HTML case
• 3002575 Fix ancestor handling
• b2125da Serialize HTML non-recursively
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[xrplf-ai-reviewer]

Routine Dependabot bump of the markdown requirement's lower bound from >=3.11 to >=3.11.1 (still <4.0.0). This is a minor patch-level floor increase with no code changes required; nothing to flag.

[Copilot]

🟢 Approval recommended

The narrow constraint update requires an already-permitted patch release, with no identified compatibility issues.

No open issues 🎉

What changed in this PR

Raises the minimum Python-Markdown version used by XLS site generation to include patch fixes.

Changes:

• Requires markdown>=3.11.1, retaining the <4.0.0 upper bound.

File	Description
scripts/​requirements.txt	Raises the Markdown dependency’s minimum patch version.

_{Review effort: Balanced}