cmark 0.31.1

[0.31.1]

• Flag root node as open in cmark_parser_new_with_mem_into_root (#532).

• Remove source, add search to list of block tags
  (a spec 0.31 change we forgot in last release).

• Accept lowercase inline HTML declarations (Michael Howell).

• Remove unused functions (Nick Wellnhofer).

• utf8:

  • Fix encoding of U+FFFE and U+FFFF (#548, Nick Wellnhofer).
  • Rework case folding (Nick Wellnhofer). Using a table and binary
    search instead of a generated switch statement significantly
    reduces the size of the compiled code.

• houdini:

  • Rename houdini_escape_html0 -> houdini_escape_html (#536).
  • Rework HTML entity table (Nick Wellnhofer).
    The new layout saves about 20 KB and removes 50 KB of relocation
    entries from the shared library, also speeding up loading.

• cmake:

  • Tell cmake to set rpath so the installed cmark can find
    libcmark.so (Michael Witten).
  • Remove unnecessary enabling of target property: MACOSX_RPATH
    (Michael Witten).
  • Fix build type checks (Nick Wellnhofer). Make the libFuzzer
    target use the Asan build type again.

• Makefile:

  • Fix libFuzzer target (Nick Wellnhofer).
  • Use ctest and --output-on-failure in test target.
  • make debug should build a shared library (Nick Wellnhofer).
    The full test suite is only available to a shared library build.

• wrappers:

  • Fix memory leak in Ruby wrapper (Nick Wellnhofer).
    Free the string returned from cmark_markdown_to_html.
    Fix cmark_markdown_to_html argument types.
  • Fix memory leak in Python wrapper (Nick Wellnhofer).
    Free the string returned from cmark_markdown_to_html.
    Fix cmark_markdown_to_html argument types.
  • Convert to and from UTF-8 under Python 2.
  • Add PHP wraper (Vinicius Dias).

• ci:

  • Test with ASan and rework CI matrix (Nick Wellnhofer).
  • Remove the valgrind leakcheck test. This should be covered now
    by testing with LeakSanitizer on static builds, including tests
    like spectest_executable. The full test suite is only available
    to shared library builds which have to run without leak checks
    for now.
  • Separate cflags from cc (Nick Wellnhofer).
  • Make CMake matrix options work (Nick Wellnhofer).
    CMAKE_OPTIONS had no effect, leading to the shared library not being
    tested. Invoke cmake directly, so we don't have to deal with the mess
    in Makefile.
  • Do debug build so that assertions will run (#532).
  • Use -gdwarf-4 with clang for compatibility with valgrind (#532).

• test:

  • Fix memory leaks in cmark.py (Nick Wellnhofer).
    Free results of libcmark API function calls.
  • Fix memory leaks in api_test (Nick Wellnhofer).
  • Simplify test execution environment handling (Saleem Abdulrasool).
    Use generator expressions to compute the new path and avoid
    translations. This reduces complexity in the build and allows for a
    different build layout.

• fuzz: Test more parser entry points (Nick Wellnhofer).

• Remove superfluous definitions from scanners.re.

• re2c: Disable UTF-8 (Nick Wellnhofer). The regexes don't require UTF-8
  features and work in ASCII mode as well. Disabling UTF-8 reduces the
  size of the code generated by re2c.

cmark 0.31.0

• Update to 0.31.2 spec.txt.

• Treat unicode Symbols like Punctuation, as per the 0.31 spec.

• Add a new function to utf8.h:
  int cmark_utf8proc_is_punctuation_or_symbol(int32_t uc).
  The old cmark_utf8proc_is_punctuation has been kept for
  now, but it is no longer used.

• Add new exported function cmark_parser_new_with_mem_into_root
  (API change) (John Ericson).

• Avoid repeated language- in info string (commonmark/commonmark.js#277).

• Fix quadratic behavior in S_insert_emph (Nick Wellnhofer).
  Fixes part of GHSA-66g8-4hjf-77xh.

• Fix quadratic behavior in check_open_blocks (Nick Wellnhofer).
  Fixes part of GHSA-66g8-4hjf-77xh.

• Track underscore bottom separately mod 3, like asterisk (Michael
  Howell). This was already implemented correctly for asterisks,
  but not for underscore.

• Use fwrite instead of printf to print results in main (#523).
  This avoids a massive slowdown in MSYS2.

• commonmark writer: less aggressive escaping for ! (#131).

• Update libFuzzer build (Nick Wellnhofer):

  • Move fuzzing files into their own directory.
  • Use libFuzzer the modern way by compiling and linking with
    -fsanitize=fuzzer(-no-link) without requiring LIB_FUZZER_PATH.
  • Update the libFuzzer rule in Makefile and the README.md.

• CMake build changes (Saleem Abdulrasool).

  • Inline multiple variables in CMake, following CMake recommendations.
  • Simplify the version computation.
  • Remove the CMARK_STATIC and CMARK_SHARED options as one of the two
    must be enabled always as the cmark executable depends on the library.
    Instead of having a custom flag to discern between the
    library type, use the native CMake option BUILD_SHARED_LIBS,
    allowing the user to control which library to build. This matches
    CMake recommendations to only build a single copy of the library.
  • Introduce an author warning for the use of CMARK_SHARED and
    CMARK_STATIC to redirect the author of the dependent package to
    BUILD_SHARED_LIBS.
  • Permit incremental linking on Windows. Although incremental linking
    does introduce padding in the binary for incremental links, that
    should not matter for release mode builds in theory as /OPT:REF
    and /OPT:ICF will trigger full links, which is the default in
    release mode.
  • Hoist the CMake module inclusion to the top level.
  • Minor tweaks for speeding up the configure phase.
    Restructure the file layout to place the custom modules into the
    cmake/modules directory that is the common layout for CMake based
    projects.
  • Squelch C4232 warnings on MSVC builds.
  • Remove check for __builtin_expect. Use __has_builtin to check
    at compile time if the feature is supported.
    This macro is supported by both clang and GCC (as of 10).
    In the case that the compiler in use is not new enough, we still
    provide the fallback so that the code will compile but without the
    additional hints for the branch probability. config.h has been
    removed from the code base as it is no longer needed.
  • Remove /TP usage on MSVC and replace CMARK_INLINE with inline.
    These were workarounds for pre-VS2015 compilers, which are no longer
    supported.
  • Hoist the C visibility settings to top level
  • Clean up C4267 warnings on MSVC builds.
  • Remove some compiler compatibility checks that are no longer
    needed because VS 2013 is no longer supported (#498).
  • Adjust the policy to silence warnings on MSVC builds
    CMake 3.15+ remove /W3 from the language flags under MSVC with
    CMP0092. Set the policy to new to avoid the D9025 warning.
  • Reflow some text to match CMake documentation style
  • Use generator expression for path computation.
  • Use CMake to propagate CMARK_STATIC_DEFINE.
  • Clean up an obsoleted variable (NFC).
  • Hoist the policy settings. Policy settings may impact how
    project functions. They should be set immediately after
    cmake_minimum_required (which implicitly sets policies).
    Use the POLICY check to see if a policy is defined rather
    than using a version check.
  • Replace CMARK_TESTS with CMake sanctioned BUILD_TESTING.
  • Correct typo and adjust command invocation. Use the proper
    generator expression for the python interpreter and adjust
    a typo in the component name.
  • Add an upgrade path for newer CMake.
    CMake 3.12 deprecated FindPythonInterp, and with CMake 3.27, were
    obsoleted with CMP0148. Add a version check and switch to the new
    behaviour to allow building with newer releases.

• Fix regex syntax warnings in pathological_tests.py (Nick Wellnhofer).

• test/cmark.py: avoid star imports (Jakub Wilk).

• spec_tests.py: Add option to generate fuzz corpus (Nick Wellnhofer).
  Add an option --fuzz-corpus that writes the test cases to separate
  files including the options header, so they can be used as seed corpus
  for fuzz testing.

• Fix some cmark.3 man rendering issues so we can do a clean regen
  (John Ericson).

• Update Windows compilation instructions (Pomax, #525).

cmark 0.30.3

• Fix quadratic complexity bug with repeated ![[]().
  Resolves CVE-2023-22486. Add new pathological test. (John MacFarlane)

• Allow declarations with no space, as per spec (#456, John MacFarlane).

• Set enumi* counter correctly in LaTeX output (#451, John MacFarlane).

• Allow <!DOCTYPE to be case-insensitive. (This conforms to the
  existing spec.) (John MacFarlane)

• Fixed HTML comment scanning. Need to handle this case: <!--> and -->.
  Since the scanner finds the longest match, we had to
  move some of the logic outside of the scanner. (John MacFarlane)

• Fix quadratic parsing issue with repeated <!-- (this was not
  introduced by the previous fix, and not in a released version of cmark).
  Resolves CVE-2023-22484. Add new pathological test. (John MacFarlane)

• Update HTML comment scanner to accord with commonmark/commonmark-spec#713
  (John MacFarlane).

• Pathological tests: half the number of repetitions, and the timeout.
  This reduces the time needed for the pathological tests.
  (John MacFarlane)

• Shrink struct cmark_node (#446). The internal_offset member is
  only used for headings and can be moved to struct cmark_heading.
  This reduces the size of struct cmark_node from 112 to 104 bytes on
  64-bit systems. (Nick Wellnhofer)

• Add -Wstrict-prototypes and fix offending functions. (Nick
  Wellnhofer, Dan Cîrnaț)

• Fix quadratic behavior involving get_containing_block (#431).
  Instead of searching for the containing block, update the tight list
  status when entering a child of a list item or exiting a list.
  (Nick Wellnhofer)

• Fix pathological_tests.py (Nick Wellnhofer):

  • Use a multiprocessing.Queue to actually get results from spawned
    tests processes.
  • Fix the allowed_failures test.
  • Truncate actual output when printed.
  • Prepare for testing pathological behavior of the Commonmark renderer.

• Fix source position bug with backticks (kyle).

cmark 0.30.2

• Fix parsing of emphasis before links (#424, Nick Wellnhofer).
  Fixes a regression introduced with commit ed0a4bf.

• Update to Unicode 14.0 (data-man).

• Add ~ to safe href character set (#394, frogtile).

• Update CMakeLists.txt (Saleem Abdulrasool). Bump the minimum required
  CMake to 3.7. Imperatively define output name for static library.

• Fix install paths in libcmark.pc (Sebastián Mancilla).
  CMAKE_INSTALL_<dir> can be relative or absolute path, so it is wrong to
  prefix CMAKE_INSTALL_PREFIX because if CMAKE_INSTALL_<dir> is set to an
  absolute path it will result in a malformed path with two absolute paths
  joined together. Instead, use CMAKE_INSTALL_FULL_<dir> from
  GNUInstallDirs.

cmark 0.30.1

• Properly indent block-level contents of list items in man (#258).
  This handles nested lists as well as items with multiple paragraphs.
  The change requires addition of a new field block_number_in_list_item
  to cmark_renderer, but this does not change the public API.
• Fix quadratic behavior when parsing emphasis (#389, Nick
  Wellnhofer). Delimiters can be deleted, so store delimiter positions
  instead of pointers in openers_bottom. Besides causing undefined
  behavior when reading a dangling pointer, this could also result
  in quadratic behavior when parsing emphasis.
• Fix quadratic behavior when parsing smart quotes (#388, Nick Wellnhofer).
  Remove matching smart quote delimiters. Otherwise, the same opener
  could be found over and over, preventing the openers_bottom
  optimization from kicking in and leading to quadratic behavior when
  processing lots of quotes.
• Modify CMake configuration so that the project can be built with
  older versions of CMake (#384, Saleem Abdulrasool). (In 0.30.0,
  some features were used that require CMake >= 3.3.) The cost of this
  backwards compatibility is that developers must now explicitly invoke
  cmark_add_compile_options when a new compilation target is added.
• Remove a comma at the end of an enumerator list, which was flagged
  by clang as a C++11 extension.
• make_man_page.py: use absolute path with CDLL. This avoids the error
  "file system relative paths not allowed in hardened programs."
• Include cmark version in cmark(3) man page (instead of LOCAL).

cmark 0.30.0

• Use official 0.30 spec.txt.
• Add cmark_get_default_mem_allocator() (#330). API change: this
  adds a new exported function in cmark.h.
• Fix #383. An optimization we used for emphasis parsing was
  too aggressive, causing us to miss some emphasis that was legal
  according to the spec. We fix this by indexing the openers_bottom
  table not just by the type of delimiter and the length of the
  closing delimiter mod 3, but by whether the closing delimiter
  can also be an opener. (The algorithm for determining emphasis
  matching depends on all these factors.) Add regression test.
• Fix quadratic behavior with inline HTML (#299, Nick Wellnhofer).
  Repeated starting sequences like <?, <!DECL or <![CDATA[ could
  lead to quadratic behavior if no matching ending sequence was found.
  Separate the inline HTML scanners. Remember if scanning the whole input
  for a specific ending sequence failed and skip subsequent scans.
• Speed up hierarchy check in tree manipulation API (Nick Wellnhofer).
  Skip hierarchy check in the common case that the inserted child has
  no children.
• Fix quadratic behavior when parsing inlines (#373, Nick Wellnhofer).
  The inline parsing code would call cmark_node_append_child to append
  nodes. This public function has a sanity check which is linear in the
  depth of the tree. Repeated calls could show quadratic behavior in
  degenerate trees. Use a special function to append nodes without this
  check. (Issue found by OSS-Fuzz.)
• Replace invalid characters in XML output (#365, Nick wellnhofer).
  Control characters, U+FFFE and U+FFFF aren't allowed in XML 1.0, so
  replace them with U+FFFD (replacement character). This doesn't solve
  the problem how to roundtrip these characters, but at least we don't
  produce invalid XML.
• Avoid quadratic output growth with reference links (#354, Nick Wellnhofer).
  Keep track of the number bytes added through expansion of reference
  links and limit the total to the size of the input document. Always
  allow a minimum of 100KB. Unfortunately, cmark has no error handling,
  so all we can do is to stop expanding reference links without returning
  an error. This should never be an issue in practice though. The 100KB
  minimum alone should cover all real-world cases.
• Fix issue with type-7 HTML blocks interrupting paragraphs
  (see commonmark/commonmark.js#213).
• Treat textarea like script, style, pre (type 1 HTML block),
  in accordance with spec change.
• Define whitespace per spec (Asherah Conor).
• Add MAX_INDENT for xml (#355). Otherwise we can get quadratic
  increase in size with deeply nested structures.
• Fix handling of empty strings when creating XML/HTML output
  (Steffen Kieß).
• Commonmark renderer: always use fences for code (#317).
  This solves problems with adjacent code blocks being merged.
• Improve rendering of commonmark code spans with spaces (#316).
• Cleaner approach to max digits for numeric entities.
  This modifies unescaping in houdini_html_u.c rather than
  the entity handling in inlines.c. Unlike the other,
  this approach works also in e.g. link titles.
• Fix entity parser (and api test) to respect length limit on
  numeric entities.
• Don't allow link destinations with unbalanced unescaped parentheses.
  See commonmark/commonmark.js#177.
• print_usage(): Minor grammar fix, swap two words (#305, Øyvind A. Holm).
• Don't call memcpy with NULL as first parameter.
  This is illegal according to the C standard, sec. 7.1.4.
  See https://www.imperialviolet.org/2016/06/26/nonnull.html.
• Add needed include in blocks.c.
• Fix unnecessary variable assignment.
• Skip UTF-8 BOM if present at beginning of buffer (#334).
• Fix URL check in is_autolink (Nick Wellnhofer). In a recent commit,
  the check was changed to strcmp, but we really have to use strncmp.
• Fix null pointer deref in is_autolink (Nick Wellnhofer).
  Introduced by a recent commit. Found by OSS-Fuzz.
• Rearrange struct cmark_node (Nick Wellnhofer). Introduce multi-purpose
  data/len members in struct cmark_node. This is mainly used to store
  literal text for inlines, code and HTML blocks.
  Move the content strbuf for blocks from cmark_node to cmark_parser.
  When finalizing nodes that allow inlines (paragraphs and headings),
  detach the strbuf and store the block content in the node's data/len
  members. Free the block content after processing inlines.
  Reduces size of struct cmark_node by 8 bytes.
• Improve packing of struct cmark_list (Nick Wellnhofer).
• Use C string instead of chunk in a number of contexts (Nick Wellnhofer,
  #309). The node struct never references memory of other nodes now.
  Node accessors don't have to check for delayed creation of C strings,
  so parsing and iterating all literals using the public API should
  actually be faster than before. These changes also reduce the size
  of struct cmark_node.
• Add casts for MSVC10 (from kivikakk in cmark-cfm).
• commonmark renderer: better escaping in smart mode. When
  CMARK_OPT_SMART is enabled, we escape literal -, ., and quote
  characters when needed to avoid their being "smartified."
• Add options field to cmark_renderer.
• commonmark.c - use size_t instead of int.
• Include string.h in cmark-fuzz.c.
• Fix #220 (hash collisions for references) (Vicent Marti via cmark-gfm).
  Reimplemented reference storage as follows:
  1. New references are always inserted at the end of a linked list. This
     is an O(1) operation, and does not check whether an existing (duplicate)
     reference with the same label already exists in the document.
  2. Upon the first call to cmark_reference_lookup (when it is expected
     that no further references will be added to the reference map), the
     linked list of references is written into a fixed-size array.
  3. The fixed size array can then be efficiently sorted in-place in O(n
     log n). This operation only happens once. We perform this sort in a
     stable manner to ensure that the earliest link reference in the
     document always has preference, as the spec dictates. To accomplish
     this, every reference is tagged with a generation number when initially
     inserted in the linked list.
  4. The sorted array is then compacted in O(n). Since it was sorted in a
     stable way, the first reference for each label is preserved and the
     duplicates are removed, matching the spec.
  5. We can now simply perform a binary search for the current
     cmark_reference_lookup query in O(log n). Any further lookup calls
     will also be O(log n), since the sorted references table only needs to
     be generated once.
     The resulting implementation is notably simple (as it uses standard
     library builtins qsort and bsearch), whilst performing better than
     the fixed size hash table in documents that have a high number of
     references and never becoming pathological regardless of the input.
• Comment out unused function cmark_strbuf_cstr in buffer.h.
• Re-add --safe command-line option as a no-op (#344), for backwards
  compatibility.
• Update to Unicode 13.0
• Generate and install cmake-config file (Reinhold Gschweicher).
  Add full cmake support. The project can either be used with
  add_subdirectory or be installed into the system (or some other
  directory) and be found with find_package(cmark). In both cases the
  cmake target cmark::cmark and/or cmark::cmark_static is all that
  is needed to be linked. Previously the cmarkConfig.cmake file
  was generated, but not installed. As additional bonus of generation
  by cmake we get a generated cmake-config-version.cmake file for
  find_package() to search for the same major version.
  The generated config file is position independent, allowing the
  installed directory to be copied or moved and still work.
  The following four files are generated and installed:
  lib/cmake/cmark/cmark-config.cmake,
  lib/cmake/cmark/cmark-config-version.cmake,
  lib/cmake/cmark/cmark-targets.cmake,
  lib/cmake/cmark/cmark-targets-release.cmake.
• Adjust the MinGW paths for MinGW64 (Daniil Baturin).
• Fix CMake generator expression checking for MSVC (Nick Wellnhofer).
• Fix -Wconst-qual warning (Saleem Abdulrasool). This enables building
  with /Zc:strictString with MSVC as well.
• Improve and modernize cmake build (Saleem Abdulrasool).
  • Build: add exports targets for build tree usage (#307).
  • Uuse target properties for include paths.
  • Remove the unnecessary execute permission on CMakeLists.txt.
  • Reduce property computation in CMake.
  • Use CMAKE_INCLUDE_CURRENT_DIRECTORY.
  • Improve man page installation.
  • Only include GNUInstallDirs once.
  • Replace add_compile_definitions with add_compile_options
    since the former was introduced in 3.12 (#321).
  • Cleanup CMake (#319).
  • Inline a variable.
  • Use LINKER_LANGUAGE property for C++ runtime.
  • Use CMake to control C standard.
  • Use the correct variable.
  • Loosen the compiler check
  • Hoist shared flags to top-level CMakeLists
  • Remove duplicated flags.
  • Use add_compile_options rather than modify CMAKE_C_FLAGS.
  • Hoist sanitizer flags to global state.
  • Hoist -fvisibilty flags to top-level.
  • Hoist the debug flag handling.
  • Hoist the profile flag handling.
  • Remove incorrect variable handling.
  • Remove unused CMake includes.
• Remove "-rdynamic" flag for static builds (#300, Eric Pruitt).
• Fixed installation on other than Ubunt...

cmark 0.29.0

[0.29.0]

• Update spec to 0.29.
• Make rendering safe by default (#239, #273). Adds CMARK_OPT_UNSAFE and make CMARK_OPT_SAFE a no-op (for API compatibility). The new default behavior is to suppress raw HTML and potentially dangerous links. The CMARK_OPT_UNSAFE option has to be set explicitly to prevent this. NOTE: This change will require modifications in bindings for cmark and in most libraries and programs that use cmark. Borrows heavily from @kivikakk's patch in github#123.
• Add sourcepos info for inlines (Yuki Izumi).
• Disallow more than 32 nested balanced parens in a link (Yuki Izumi).
• Resolve link references before creating setext header. A setext header line after a link reference should not create a header, according to the spec.
• commonmark renderer: improve escaping. URL-escape special characters when escape mode is URL, and not otherwise. Entity-escape control characters (< 0x20) in non-literal escape modes.
• render: only emit actual newline when escape mode is LITERAL. For markdown content, e.g., in other contexts we want some kind of escaping, not a literal newline.
• Update code span normalization to conform with spec change.
• Allow empty <> link destination in reference link.
• Remove leftover includes of memory.h (#290).
• A link destination can't start with < unless it is an angle-bracket link that also ends with > (#289). (If your URL really starts with <, URL-escape it.)
• Allow internal delimiter runs to match if both have lengths that are multiples of 3. See commonmark/commonmark-spec#528.
• Include references.h in parser.h (#287).
• Fix [link](<foo\>).
• Use hand-rolled scanner for thematic break (see #284). Keep track of the last position where a thematic break failed to match on a line, to avoid rescanning unnecessarily.
• Rename ends_with_blank_line with S_ prefix.
• Add CMARK_NODE__LAST_LINE_CHECKED flag (#284). Use this to avoid unnecessary recursion in ends_with_blank_line.
• In ends_with_blank_line, call S_set_last_line_blank to avoid unnecessary repetition (#284). Once we settle whether a list item ends in a blank line, we don't need to revisit this in considering parent list items.
• Disallow unescaped ( in parenthesized link title.
• Copy line/col info straight from opener/closer (Ashe Connor). We can't rely on anything in subj since it's been modified while parsing the subject and could represent line info from a future line. This is simple and works.
• render.c: reset last_breakable after cr. Fixes jgm/pandoc#5033.
• Fix a typo in houdini_href_e.c (Felix Yan).
• commonmark writer: use ~~~ fences if info string contains backtick. This is needed for round-trip tests.
• Update scanners for new info string rules.
• Add XSLT stylesheet to convert cmark XML back to Commonmark (Nick Wellnhofer, #264). Initial version of an XSLT stylesheet that converts the XML format produced by cmark -t xml back to Commonmark.
• Check for whitespace before reference title (#263).
• Bump CMake to version 3 (Jonathan Müller).
• Build: Remove deprecated call to add_compiler_export_flags() (Jonathan Müller). It is deprecated in CMake 3.0, the replacement is to set the CXX_VISIBILITY_PRESET (or in our case C_VISIBILITY_PRESET) and VISIBILITY_INLINES_HIDDEN properties of the target. We're already setting them by setting the CMake variables anyway, so the call can be removed.
• Build: only attempt to install MSVC system libraries on Windows (Saleem Abdulrasool). Newer versions of CMake attempt to query the system for information about the VS 2017 installation. Unfortunately, this query fails on non-Windows systems when cross-compiling: cmake_host_system_information does not recognize <key> VS_15_DIR. CMake will not find these system libraries on non-Windows hosts anyways, and we were silencing the warnings, so simply omit the installation when cross-compiling to Windows.
• Simplify code normalization, in line with spec change.
• Implement code span spec changes. These affect both parsing and writing commonmark.
• Add link parsing corner cases to regressions (Ashe Connor).
• Add xml:space="preserve" in XML output when appropriate (Nguyễn Thái Ngọc Duy). (For text, code, code_block, html_inline and html_block tags.)
• Removed meta from list of block tags. Added regression test. See commonmark/commonmark-spec#527.
• entity_tests.py - omit noisy success output.
• pathological_tests.py: make tests run faster. Commented out the (already ignored) "many references" test, which times out. Reduced the iterations for a couple other tests.
• pathological_tests.py: added test for deeply nested lists.
• Optimize S_find_first_nonspace. We were needlessly redoing things we'd already done. Now we skip the work if the first nonspace is greater than the current offset. This fixes pathological slowdown with deeply nested lists (#255). For N = 3000, the time goes from over 17s to about 0.7s. Thanks to Martin Mitas for diagnosing the problem.
• Allow spaces in link destination delimited with pointy brackets.
• Adjust max length of decimal/numeric entities. See commonmark/commonmark-spec#487.
• Fix inline raw HTML parsing. This fixes a recently added failing spec test case. Previously spaces were being allowed in unquoted attribute values; no we forbid them.
• Don't allow list markers to be indented >= 4 spaces. See commonmark/commonmark-spec#497.
• Check for empty buffer when rendering (Phil Turnbull). For empty documents, ->size is zero so renderer.buffer->ptr[renderer.buffer->size - 1] will cause an out-of-bounds read. Empty buffers always point to the global cmark_strbuf__initbuf buffer so we read cmark_strbuf__initbuf[-1].
• Also run API tests with CMARK_SHARED=OFF (Nick Wellnhofer).
• Rename roundtrip and entity tests (Nick Wellnhofer). Rename the tests to reflect that they use the library, not the executable.
• Generate export header for static-only build (#247, Nick Wellnhofer).
• Fuzz width parameter too (Phil Turnbull). Allow the width parameter to be generated too so we get better fuzz-coverage.
• Don't discard empty fuzz test-cases (Phil Turnbull). We currently discard fuzz test-cases that are empty but empty inputs are valid markdown. This improves the fuzzing coverage slightly.
• Fixed exit code for pathological tests.
• Add allowed failures to pathological_tests.py. This allows us to include tests that we don't yet know how to pass.
• Add timeout to pathological_tests.py. Tests must complete in 8 seconds or are errors.
• Add more pathological tests (Martin Mitas). These tests target the issues #214, #218, #220.
• Use pledge(2) on OpenBSD (Ashe Connor).
• Update the Racket wrapper (Eli Barzilay).
• Makefile: For afl target, don't build tests.

cmark 0.28.3

• Include GNUInstallDirs in src/CMakeLists.txt (Nick Wellnhofer, #240).
  This fixes build problems on some cmake versions (#241).

cmark 0.28.2

• Fixed regression in install dest for static library (#238).
  Due to a mistake, 0.28.1 installed libcmark.a into include/.

cmark 0.28.1

• --smart: open quote can never occur right after ] or ) (#227).
• Fix quadratic behavior in finalize (Vicent Marti).
• Don't use CMAKE_INSTALL_LIBDIR to create libcmark.pc (#236). This wasn't getting set in processing libcmark.pc.in, and we were getting the wrong entry in libcmark.pc. The new approach sets an internal libdir variable to lib${LIB_SUFFIX}. This variable is used both to set the install destination and in the libcmark.pc.in template.
• Update README.md, replace make astyle with make format (Nguyễn Thái Ngọc Duy).