v1.11.2

Security Fixes

• Bump urllib3 Python dependency to 2.7.0 to address CVE-2026-44431 and CVE-2026-44432
• Bump Jinja2 Python dependency to 3.1.6 to address CVE-2025-27516

v1.11.1

Fixes

• \ref{} now works with LaTeX/MathJax \\(...\\) instead of requiring doubled backslashes in the argument to \ref{}

v1.11.0

Changes

• Introduced thm-ref processor that provides the \ref{} Markdown syntax, which functions much like \ref{} in LaTeX: it dynamically generates theorem/equation counters etc. based on a "name" (like label{}), automatically reflecting future changes without manual intervention.

v1.10.3

Security Fixes

• Bump pytest Python dependency to 9.0.3 to address CVE-2025-71176
• Bump uv Python dependency to 9.0.3 to address GHSA-pjjw-68hj-v9mw

v1.10.2

Security Fixes

• Bump cryptography Python dependency to 46.0.7 to address CVE-2026-39892

v1.10.1

Security Fixes

• Bump requests Python dependency to 2.33.0 to address CVE-2026-25645
• Bump Pygments Python dependency to 2.20.0 to address CVE-2026-4539
• Bump cryptography Python dependency to 46.0.6 to address CVE-2026-34073

v1.10.0

Changes

• \begin{} and \end{} in Markdown source must now be on their own lines (to fix the bug below)
• En dashes and em dashes in theorem names/hidden names are now converted to hyphens in the HTML id attribute instead of being removed

Fixes

• Theorem names/hidden names are no longer parsed incorrectly when they contain curly brackets (e.g. from LaTeX)

v1.9.8

Security Fixes

• Bump Markdown Python dependency to 3.8.1 to address CVE-2025-69534
• Bump cryptography Python dependency to 46.0.5 to address CVE-2026-26007

v1.9.7

Security Fixes

• Bump filelock Python dependency to 3.20.3 to address CVE-2026-22701
• Bump jaraco.context Python dependency to 6.1.0 to address GHSA-58pv-8j8x-9vj2

v1.9.6

Security Fixes

• Bump urllib3 Python dependency to 2.6.3 to address CVE-2026-21441
• Bump filelock Python dependency to 3.20.1 to address CVE-2025-68146