Skip to content

Bump the browser-runtime group with 2 updates - #3198

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/browser-runtime-b37d1685d0
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/browser-runtime-b37d1685d0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the browser-runtime group with 2 updates: mermaid and react-inlinesvg.

Updates mermaid from 12.2.0 to 12.3.0

Release notes

Sourced from mermaid's releases.

mermaid@12.3.0

Minor Changes

  • #8164 592d0e4 Thanks @​filipsajdak! - feat: add the open-arrow and hollow-circle edge markers, so a notation can tell two kinds of flow apart by whether the head is filled

  • #8165 5c8aa5d Thanks @​filipsajdak! - feat: add the BPMN element shapes - events, gateways, activities, data objects, data stores and text annotations - each reporting where a line meets what is drawn

  • #8470 692d22a Thanks @​openmindednewby! - feat: flowchart edges accept a step number (e1@{ step: 1 }); a dot travels the edges in step order and loops, hidden under prefers-reduced-motion

  • #8478 56aa105 Thanks @​openmindednewby! - feat: add flowchart.stepDuration to set how many seconds each step of the flowchart step animation lasts

  • #8479 800f7ef Thanks @​openmindednewby! - feat: highlight the flowchart edge whose step is playing, in sync with the step animation dot

  • #8480 50d6294 Thanks @​openmindednewby! - feat: add flowchart.stepNumbers to show each step edge's number in a badge

Patch Changes

  • #8443 2ff8286 Thanks @​knsv-bot! - fix: agentflow renders the a[/…/] short form as an input instead of falling back to a task with a SHAPE_UNSUPPORTED warning

  • #8661 b200b27 Thanks @​pbrolin47! - fix: Bump DOMPurify to 3.4.17 to address GHSA-55q2-fjhq-7xh7 and GHSA-6688-9rhm-gjv2

  • #8633 686f350 Thanks @​sidharthv96! - chore: Remove the uuid dependency and the unused legacy ER diagram renderer

  • #8661 7eec083 Thanks @​pbrolin47! - fix: Stop an edge from a node inside a subgraph from crossing an edge from the subgraph itself to the same node with ELK 0.10+ (e.g. outer --> a with da --> a, or three --> two with two --> c2)

  • #8532 42d3760 Thanks @​Devehab! - fix: upgrade bundled elkjs from 0.9.3 to 0.12.0, which is licensed EPL-2.0 OR GPL-3.0-or-later, so GPL-3.0 projects can ship mermaid with ELK

  • #8162 d5ca27a Thanks @​filipsajdak! - fix(swimlanes): size a lane that holds a nested subgraph (TB drew it as an empty 0x0 box, and likewise an outer group holding lanes), and grow LR and RL lanes by the nested group's padding

  • #8405 b4299f2 Thanks @​filipsajdak! - fix: do not draw a stray empty swimlane when a node is listed in two lanes, and warn about it and about a subgraph nested in a lane

  • #8385 37d0ace Thanks @​filipsajdak! - fix(swimlanes): keep two arrowheads that land on one face of a node apart when a sibling edge is straightened

  • #8385 38e810a Thanks @​filipsajdak! - fix(swimlanes): an edge routed round the outside of a diamond now arrives at one of its vertices instead of ending in empty space beside it

  • #8385 25d7e31 Thanks @​filipsajdak! - fix(swimlanes): a second edge leaving a diamond on the same level as its target now leaves from a free vertex instead of running beside the first

  • #8171 a4750b4 Thanks @​filipsajdak! - fix: dock a swimlane edge on the shape it points at, so a line reaches an event's ring instead of stopping at the room its caption reserves

  • #8385 67315b9 Thanks @​filipsajdak! - fix: an edge label no longer pushes the nodes it joins a rank apart

  • #8385 21a1f5c Thanks @​filipsajdak! - fix(swimlanes): stop the crossing cleanup from joining two routes at a corner so they read as one line

  • #8385 e14bc3a Thanks @​filipsajdak! - fix(swimlanes): an edge no longer arrives at the vertex of a hexagon that another edge leaves from

  • #8459 edd162f Thanks @​Yun-seoung! - fix: Allow flowchart edge IDs regardless of whitespace after the node shape

    Edge IDs may no longer contain [ ] ( ) { } |.

  • #8402 4f2bade Thanks @​pcp-cmd! - fix: Render use case include and extend relationship labels with UML guillemets.

Commits
  • 2086904 Merge pull request #8671 from mermaid-js/changeset-release/master
  • 41781cb Version Packages
  • 30b486a Merge pull request #8661 from mermaid-js/release/12.3.0
  • 86340ba docs: set the release version for the flowchart step animation options
  • bc18724 Additional fix since one flowchart diagram failed with crossing edges
  • 7eec083 fix(elk): keep an edge reversed into a subgraph from crossing the edges into it
  • 370c4af Merge pull request #8633 from mermaid-js/chore/remove-uuid
  • 74e5ee8 Merge branch 'develop' into chore/remove-uuid
  • 6e588f8 Merge pull request #8642 from mermaid-js/chore/e2e-speedup
  • b6933f0 ci(e2e): speed up Playwright runs
  • Additional commits viewable in compare view

Updates react-inlinesvg from 4.5.0 to 4.6.0

Release notes

Sourced from react-inlinesvg's releases.

4.6.0

  • Generate the unique hash lazily so renders stay deterministic: 27212326c4e3892cb1156c7adef297a8e161f8a4
  • Add an opt-in cache for the converted elements: #256
  • Fix element cache edge cases: 1903b31805ca8e4c954d184b60e4b5b215862e49
  • Upgrade dependencies and actions: 63eb8b3964f8b3c339a245e6c472728e1231230d

Credits

Huge thanks to @​fastfrwrd, and @​pedrosousa13 for helping!

Commits
  • f0666cd 4.6.0
  • 63eb8b3 Upgrade dependencies and actions
  • 1903b31 Fix element cache edge cases
  • 3e073cd Add an opt-in cache for the converted elements (#256)
  • 2721232 Generate the unique hash lazily so renders stay deterministic
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Bumps mermaid from 12.2.0 to 12.3.0 and react-inlinesvg from 4.5.0 to 4.6.0 in the browser-runtime group.

Notable changes

  • mermaid 12.3.0 adds flowchart step animations, open-arrow and hollow-circle edge markers, and BPMN shapes, and fixes several swimlane routing and sizing issues.
  • mermaid now ships dompurify 3.4.17 (fixes GHSA-55q2-fjhq-7xh7 and GHSA-6688-9rhm-gjv2) and upgrades elkjs to 0.12.0; flowchart edge IDs may no longer contain [ ] ( ) { } |.
  • react-inlinesvg 4.6.0 makes renders deterministic and adds an opt-in cache for converted SVG elements.

Written for commit 7804c2d. Summary will update on new commits.

View guided diff Turn on auto-fix

Bumps the browser-runtime group with 2 updates: [mermaid](https://github.com/mermaid-js/mermaid) and [react-inlinesvg](https://github.com/gilbarbara/react-inlinesvg).


Updates `mermaid` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.2.0...mermaid@12.3.0)

Updates `react-inlinesvg` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/gilbarbara/react-inlinesvg/releases)
- [Commits](gilbarbara/react-inlinesvg@v4.5.0...v4.6.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: browser-runtime
- dependency-name: react-inlinesvg
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: browser-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner November 10, 2026 08:45
@dependabot
dependabot Bot requested review from mtblz and witalisoft November 10, 2026 08:45
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 10, 2026
@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@coderabbitai

coderabbitai Bot commented Nov 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 156d41e7-1cbd-4990-b6ff-18fe39c8b576

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@netlify

netlify Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for netdata-docusaurus ready!

Name Link
🔨 Latest commit 7804c2d
🔍 Latest deploy log https://app.netlify.com/projects/netdata-docusaurus/deploys/6af2d9c45d24ce53dd0ca3df
😎 Deploy Preview https://deploy-preview-3198--netdata-docusaurus.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant