build(deps): bump md-editor-v3 from 5.8.5 to 7.0.0 in /ui in the npm_and_yarn group across 1 directory

[dependabot]

Bumps the npm_and_yarn group with 1 update in the /ui directory: md-editor-v3.

Updates md-editor-v3 from 5.8.5 to 7.0.0

Release notes

Sourced from md-editor-v3's releases.

v7.0.0

7.0.0 (2026-09-16)

Features

• support code block line highlighting (commit 1bcd84d)

  • Parse fence metadata for line highlighting, support custom highlighters, and cancel stale delayed preview renders.

• replace .md-editor-dark with .md-editor[data-theme="dark"] for theme toggling (commit 6d408c9)

Fixed Bugs

• disable raw HTML parsing in markdown-it (commit 22ba4aa)

• correct input box width change event casing (commit d7cf506)

  • Rename oninputBoxWidthChange to onInputBoxWidthChange across event declarations, runtime forwarding, JSX usage, and API references.
  • BREAKING CHANGE: replace oninputBoxWidthChange listeners with onInputBoxWidthChange.

• replace dynamic option evaluation with JSON5 (commit 909d153)

  • Parse ECharts code blocks as data and require a top-level object.

• keep code line numbers aligned after wrapping (commit 8202ccd)

Others

• chore(deps): upgrade @​vavt/markdown-theme (commit d556e26)

• chore(config): update CDN extensions and v7 integration docs (commit fead4ea)

• ci(publish): merge beta and latest publish into one workflow (commit 0b2a19c)

  • npm trusted publishing allows only one trusted workflow per package, so
  • both release channels now live in publish.yml and pick the npm dist-tag
  • from the trigger ref. NPM_TOKEN is no longer needed.
  • Release note generation and issue notification move to versioned scripts
  • under .github/scripts/, keeping the workflow file declarative.
  • Checkout keeps fetch-depth: 0 because both scripts resolve the previous
  • tag from history, and pushing the CHANGELOG commit fails on a shallow
  • clone. Publish permissions are scoped to the job, and a concurrency group
  • serializes runs that write to npm or the default branch.

Full Changelog: v6.5.6...v7.0.0

---

v6.5.6

6.5.6 (2026-08-05)

... (truncated)

Changelog

Sourced from md-editor-v3's changelog.

7.0.0 (2026-09-16)

Features

• support code block line highlighting (commit 1bcd84d)

  • Parse fence metadata for line highlighting, support custom highlighters, and cancel stale delayed preview renders.

• replace .md-editor-dark with .md-editor[data-theme="dark"] for theme toggling (commit 6d408c9)

Fixed Bugs

• disable raw HTML parsing in markdown-it (commit 22ba4aa)

• correct input box width change event casing (commit d7cf506)

  • Rename oninputBoxWidthChange to onInputBoxWidthChange across event declarations, runtime forwarding, JSX usage, and API references.
  • BREAKING CHANGE: replace oninputBoxWidthChange listeners with onInputBoxWidthChange.

• replace dynamic option evaluation with JSON5 (commit 909d153)

  • Parse ECharts code blocks as data and require a top-level object.

• keep code line numbers aligned after wrapping (commit 8202ccd)

Others

• chore(deps): upgrade @​vavt/markdown-theme (commit d556e26)

• chore(config): update CDN extensions and v7 integration docs (commit fead4ea)

• ci(publish): merge beta and latest publish into one workflow (commit 0b2a19c)

  • npm trusted publishing allows only one trusted workflow per package, so
  • both release channels now live in publish.yml and pick the npm dist-tag
  • from the trigger ref. NPM_TOKEN is no longer needed.
  • Release note generation and issue notification move to versioned scripts
  • under .github/scripts/, keeping the workflow file declarative.
  • Checkout keeps fetch-depth: 0 because both scripts resolve the previous
  • tag from history, and pushing the CHANGELOG commit fails on a shallow
  • clone. Publish permissions are scoped to the job, and a concurrency group
  • serializes runs that write to npm or the default branch.

Full Changelog: v6.5.6...v7.0.0

---

6.5.6 (2026-08-05)

Fixed Bugs

• preserve structured tokens for rich content (commit 60db605)

Others

... (truncated)

Commits

• a71f976 7.0.0
• d556e26 chore(deps): upgrade @​vavt/markdown-theme
• 22ba4aa fix(preview): disable raw HTML parsing in markdown-it
• 252f7aa Merge branch 'feature/7' into develop
• fead4ea chore(config): update CDN extensions and v7 integration docs
• 0b2a19c ci(publish): merge beta and latest publish into one workflow
• dc002f5 Merge branch 'main' into feature/7
• e252ee2 docs(changelog): update for v6.5.6
• 44e5c63 6.5.6
• 91410e9 ci(release): use changelog entry as release notes
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for md-editor-v3 since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.