chore(release): 18.0.7 [skip ci]

## [18.0.7](v18.0.6...v18.0.7) (2026-07-21)

### Bug Fixes

* Avoid O(n^2) backtracking in HTML block close and tilde interrupt regexes ([#4014](#4014)) ([f945fc5](f945fc5)), closes [#3991](#3991)
* Avoid O(n^2) masked source rebuild in inline tokenizer ([#4017](#4017)) ([9154f8f](9154f8f))
* keep empty list after blockquote as a sibling block ([#4004](#4004)) ([3f144a0](3f144a0))
* preserve code spans adjacent to tildes ([#4012](#4012)) ([0de7188](0de7188))
* Recognize setext headings whose first line starts with # ([#4015](#4015)) ([f056437](f056437)), closes [#1](#1)
* treat a line of only tabs as a blank line between paragraphs ([#4007](#4007)) ([bc2f121](bc2f121))

chore(release): 18.0.6 [skip ci]

## [18.0.6](v18.0.5...v18.0.6) (2026-07-09)

### Bug Fixes

* Avoid O(n^2) backtracking in inline link href regex ([#4013](#4013)) ([a009808](a009808))
* Fix ordered lists after blockquotes ([#4003](#4003)) ([33928d0](33928d0))
* keep trailing text on HTML block close line for PI, declarations, and CDATA ([#3991](#3991)) ([bbb84c8](bbb84c8))

chore(release): 18.0.5 [skip ci]

## [18.0.5](v18.0.4...v18.0.5) (2026-06-04)

### Bug Fixes

* parse empty list item with trailing space ([#3984](#3984)) ([b55410f](b55410f))

chore(release): 18.0.4 [skip ci]

## [18.0.4](v18.0.3...v18.0.4) (2026-05-19)

### Bug Fixes

* cache list indentation regexes ([#3969](#3969)) ([a37983f](a37983f))
* fix cli not reading stdin ([#3967](#3967)) ([11adb69](11adb69))

chore(release): 18.0.3 [skip ci]

## [18.0.3](v18.0.2...v18.0.3) (2026-05-01)

### Bug Fixes

* avoid task checkbox for setext heading text ([#3960](#3960)) ([2608e81](2608e81))

chore(release): 18.0.2 [skip ci]

## [18.0.2](v18.0.1...v18.0.2) (2026-04-18)

### Bug Fixes

* fix infinite loop for indented code blank line ([#3947](#3947)) ([58a52e8](58a52e8))

chore(release): 18.0.1 [skip ci]

## [18.0.1](v18.0.0...v18.0.1) (2026-04-17)

### Bug Fixes

* **rules:** ensure lookbehind regex is evaluated correctly by minifiers ([#3945](#3945)) ([abd907a](abd907a))

chore(release): 18.0.0 [skip ci]

# [18.0.0](v17.0.6...v18.0.0) (2026-04-07)

### Bug Fixes

* Bump typescript from 5.9.3 to 6.0.2 ([#3934](#3934)) ([e8efc51](e8efc51))
* prevent GFM table tokens from greedily capturing trailing newlines ([#3926](#3926)) ([40f2665](40f2665))
* prevent heading and def tokens from greedily capturing multiple newlines ([#3925](#3925)) ([b379e3e](b379e3e))
* trim blank lines from block tokens ([#3939](#3939)) ([b70895f](b70895f))

### BREAKING CHANGES

* trim trailing blank lines from block tokens
* update Typescript to v6

chore(release): 17.0.6 [skip ci]

## [17.0.6](v17.0.5...v17.0.6) (2026-04-05)

### Bug Fixes

* avoid race condition in async parallel parse/parseInline with hooks ([#3924](#3924)) ([6e96fa7](6e96fa7))
* **cli:** honor positional input file ([#3922](#3922)) ([a1c2617](a1c2617))
* **cli:** use file URL for config import ([#3923](#3923)) ([73e1f3f](73e1f3f))

chore(release): 17.0.5 [skip ci]

## [17.0.5](v17.0.4...v17.0.5) (2026-03-20)

### Bug Fixes

* Fix catastrophic backtracking (ReDoS) in link/reflink label regex ([#3918](#3918)) ([4625980](4625980))
* prevent quadratic complexity in emStrongLDelim regex ([#3906](#3906)) ([c732dd2](c732dd2))
* prevent single-tilde strikethrough false positives ([#3910](#3910)) ([5e03369](5e03369))
* re-assign tokenizer.lexer and renderer.parser at start of each parse call ([#3907](#3907)) ([f3a3ec0](f3a3ec0))
* trim trailing whitespace from lheading text ([#3920](#3920)) ([3ea7e88](3ea7e88))