v0.139.4

This release contains a security fix. See this Security Advisory for details. Note that this is only relevant if you don't trust your content (e.g. Markdown) files.

What's Changed

• tpl/tplimpl: Escape Markdown attributes in render hooks and shortcodes 54398f8 @jmooring
• deps: Upgrade github.com/bep/godartsass/v2 v2.3.1 => v2.3.2 b8c15f2 @bep
• common/maps: Simplify TestScratchSetInMap/DeleteInMap d0dc518 @alexandear
• markup/tableofcontents: Cast Fragments.ToHTML args to int b529859 @jmooring #13107