Skip to content

Bump the npm-minor-and-patch group across 1 directory with 4 updates - #183

Merged
Nexucis merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-b8e9ac2cc4
Nov 12, 2026
Merged

Bump the npm-minor-and-patch group across 1 directory with 4 updates#183
Nexucis merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-and-patch-b8e9ac2cc4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the npm-minor-and-patch group with 4 updates in the / directory: mermaid, oxlint, vite and vitest.

Updates mermaid from 12.2.0 to 12.3.0

Release notes

Sourced from mermaid's releases.

mermaid@12.3.0

Minor Changes

  • #8164 592d0e4 Thanks @​filipsajdak! - feat: add the open-arrow and hollow-circle edge markers, so a notation can tell two kinds of flow apart by whether the head is filled

  • #8165 5c8aa5d Thanks @​filipsajdak! - feat: add the BPMN element shapes - events, gateways, activities, data objects, data stores and text annotations - each reporting where a line meets what is drawn

  • #8470 692d22a Thanks @​openmindednewby! - feat: flowchart edges accept a step number (e1@{ step: 1 }); a dot travels the edges in step order and loops, hidden under prefers-reduced-motion

  • #8478 56aa105 Thanks @​openmindednewby! - feat: add flowchart.stepDuration to set how many seconds each step of the flowchart step animation lasts

  • #8479 800f7ef Thanks @​openmindednewby! - feat: highlight the flowchart edge whose step is playing, in sync with the step animation dot

  • #8480 50d6294 Thanks @​openmindednewby! - feat: add flowchart.stepNumbers to show each step edge's number in a badge

Patch Changes

  • #8443 2ff8286 Thanks @​knsv-bot! - fix: agentflow renders the a[/…/] short form as an input instead of falling back to a task with a SHAPE_UNSUPPORTED warning

  • #8661 b200b27 Thanks @​pbrolin47! - fix: Bump DOMPurify to 3.4.17 to address GHSA-55q2-fjhq-7xh7 and GHSA-6688-9rhm-gjv2

  • #8633 686f350 Thanks @​sidharthv96! - chore: Remove the uuid dependency and the unused legacy ER diagram renderer

  • #8661 7eec083 Thanks @​pbrolin47! - fix: Stop an edge from a node inside a subgraph from crossing an edge from the subgraph itself to the same node with ELK 0.10+ (e.g. outer --> a with da --> a, or three --> two with two --> c2)

  • #8532 42d3760 Thanks @​Devehab! - fix: upgrade bundled elkjs from 0.9.3 to 0.12.0, which is licensed EPL-2.0 OR GPL-3.0-or-later, so GPL-3.0 projects can ship mermaid with ELK

  • #8162 d5ca27a Thanks @​filipsajdak! - fix(swimlanes): size a lane that holds a nested subgraph (TB drew it as an empty 0x0 box, and likewise an outer group holding lanes), and grow LR and RL lanes by the nested group's padding

  • #8405 b4299f2 Thanks @​filipsajdak! - fix: do not draw a stray empty swimlane when a node is listed in two lanes, and warn about it and about a subgraph nested in a lane

  • #8385 37d0ace Thanks @​filipsajdak! - fix(swimlanes): keep two arrowheads that land on one face of a node apart when a sibling edge is straightened

  • #8385 38e810a Thanks @​filipsajdak! - fix(swimlanes): an edge routed round the outside of a diamond now arrives at one of its vertices instead of ending in empty space beside it

  • #8385 25d7e31 Thanks @​filipsajdak! - fix(swimlanes): a second edge leaving a diamond on the same level as its target now leaves from a free vertex instead of running beside the first

  • #8171 a4750b4 Thanks @​filipsajdak! - fix: dock a swimlane edge on the shape it points at, so a line reaches an event's ring instead of stopping at the room its caption reserves

  • #8385 67315b9 Thanks @​filipsajdak! - fix: an edge label no longer pushes the nodes it joins a rank apart

  • #8385 21a1f5c Thanks @​filipsajdak! - fix(swimlanes): stop the crossing cleanup from joining two routes at a corner so they read as one line

  • #8385 e14bc3a Thanks @​filipsajdak! - fix(swimlanes): an edge no longer arrives at the vertex of a hexagon that another edge leaves from

  • #8459 edd162f Thanks @​Yun-seoung! - fix: Allow flowchart edge IDs regardless of whitespace after the node shape

    Edge IDs may no longer contain [ ] ( ) { } |.

  • #8402 4f2bade Thanks @​pcp-cmd! - fix: Render use case include and extend relationship labels with UML guillemets.

Commits
  • 2086904 Merge pull request #8671 from mermaid-js/changeset-release/master
  • 41781cb Version Packages
  • 30b486a Merge pull request #8661 from mermaid-js/release/12.3.0
  • 86340ba docs: set the release version for the flowchart step animation options
  • bc18724 Additional fix since one flowchart diagram failed with crossing edges
  • 7eec083 fix(elk): keep an edge reversed into a subgraph from crossing the edges into it
  • 370c4af Merge pull request #8633 from mermaid-js/chore/remove-uuid
  • 74e5ee8 Merge branch 'develop' into chore/remove-uuid
  • 6e588f8 Merge pull request #8642 from mermaid-js/chore/e2e-speedup
  • b6933f0 ci(e2e): speed up Playwright runs
  • Additional commits viewable in compare view

Updates oxlint from 1.90.0 to 1.93.0

Release notes

Sourced from oxlint's releases.

oxlint v1.93.0

🚀 Features

  • 6195265 linter/promise/prefer-catch: Implement suggestion (#28919) (Mikhail Baev)

🐛 Bug Fixes

  • 866664e linter/unicorn/no-useless-undefined: Skip var initializers (#29007) (camc314)
  • 30603cb linter/react/exhaustive-deps: Preserve comments in dependency removals (#29047) (camc314)
  • 4630fe4 linter/unicorn/no-useless-undefined: Narrow return type exemptions (#29000) (camc314)
  • b63870a linter/vitest/expect-expect: Recognize benchmark fixtures (#29044) (camc314)
  • 9c62d2a linter/eslint/no-unreachable-loop: Ignore enclosing finalizers for continues (#29004) (camc314)
  • 6303df1 jsdoc: Preserve param tags after unmatched description delimiters (#28923) (Vishal Punjabi)
  • fe66fa7 linter/eslint/no-lone-blocks: Report redundant blocks in function bodies (#29043) (camc314)
  • e1694bd linter/unicorn/no-useless-undefined: Preserve shadowed bindings (#29046) (camc314)
  • 791b5f5 linter/unicorn/prefer-regexp-test: Restrict automatic argument swaps (#29045) (camc314)
  • e7654f6 linter/react/display-name: Ignore unrelated memo and forwardRef calls (#29005) (camc314)
  • 2487360 linter/unicorn/no-useless-undefined: Report guarded indexed access (#29014) (camc314)
  • a791a5b cfg: Resolve continues through stacked loop labels (#29016) (camc314)
  • 287ba19 linter/eslint/id-length: Ignore TypeScript qualified references (#29037) (camc314)
  • b71234f cfg: Skip labeled contexts for unlabeled jumps (#29001) (camc314)
  • bb21a3c linter/import/no-anonymous-default-export: Report parenthesized exports (#29002) (camc314)
  • f38f738 linter/eslint/prefer-destructuring: Skip fixes that remove comments (#29003) (camc314)
  • bf11006 linter/react/exhaustive-deps: Suggest dependency removals (#28925) (camc314)
  • 6bbb92a linter: Remove unused oxlint-disable directives with --fix (#27698) (Ryan Tsao)
  • 3b35cb6 linter/disable-directives: Preserve separators and disable spans (#28921) (camc314)
  • 1253445 linter/eslint/no-restricted-imports: Report re-exported imports once (#28920) (Ramy Akin Saidi)

⚡ Performance

  • da620e6 linter: Start tsgolint before the regular lint pass (#28824) (Max Schwenk)

oxlint v1.92.0

🚀 Features

  • 4a52ba2 oxlint: Discover tsrs for type-aware linting (#28751) (camc314)
  • b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option (#28816) (Cam McHenry)

🐛 Bug Fixes

  • fa66fde oxlint,oxfmt: Resolve Vite+ config root from the config file directory (#28801) (MK (fengmk2))
  • 2091564 linter/jsdoc/require-param: Ignore enclosing function JSDoc (#28866) (camc314)
  • c6ec50b linter/react/only-export-components: Classify JSX values as non-components (#28761) (camc314)
  • 3c051ab linter/vitest/prefer-called-exactly-once-with: Preserve neighboring code in autofix (#28864) (camc314)
  • 674b962 linter/eslint/no-misleading-character-class: Use lazy regex for combining marks (#28822) (Sysix)
  • 838d339 linter/vitest/prefer-called-exactly-once-with: Avoid panic on non-ASCII text (#28850) (YT)
  • 8d24c26 linter/jsx-a11y/aria-role: Allow role={undefined} (#28804) (Abhay Godavarthy)
  • a7143bf linter/eslint/no-restricted-imports: Respect allowTypeImports correctly for empty patterns (#28842) (Cam McHenry)
  • 3d3a6f4 react-compiler: Ignore callback-local reassignments (#28820) (camc314)
  • 0cc6515 linter/unicorn/prefer-type-error: Report throws in unbraced if branches (#28819) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.92.0] - 2026-11-06

🚀 Features

  • b7d2c75 linter/eslint/no-redeclare: Add ignoreDeclarationMerge option (#28816) (Cam McHenry)

[1.91.0] - 2026-11-02

🚀 Features

  • 419c1b0 linter: Add allow and allowPattern options to react/capitalized-calls (Christian Vuerings)
Commits
  • 7d8e1f4 release(apps): oxlint v1.93.0 && oxfmt v0.78.0 (#29090)
  • 29daf90 release(apps): oxlint v1.92.0 && oxfmt v0.77.0 (#28906)
  • b7d2c75 feat(linter/eslint/no-redeclare): add ignoreDeclarationMerge option (#28816)
  • f3fcdcc release(apps): oxlint v1.91.0 && oxfmt v0.76.0 (#28718)
  • 419c1b0 feat(linter): add allow and allowPattern options to react/capitalized-calls
  • See full diff in compare view

Updates vite from 8.3.5 to 8.3.7

Release notes

Sourced from vite's releases.

v8.3.7

Bug Fixes

Miscellaneous Chores

Tests

Build System

v8.3.6

Bug Fixes

  • await overlapping plugin container close calls (#23935) (175bbeb)
  • build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
  • build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
  • bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
  • bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
  • deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
  • deps: update all non-major dependencies (#23896) (46b91c5)
  • deps: update all non-major dependencies (#23966) (b3cb057)
  • deps: update rolldown-related dependencies (#23868) (a63eb87)
  • deps: update rolldown-related dependencies (#23967) (0105733)
  • dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
  • html: remove adjacent module tags on the first line (#23823) (eab1dc2)
  • ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
  • optimizer: detect cache dir precisely (#23912) (cc9bc21)
  • optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
  • respect build.sourcemap from environment (#23879) (82e7aa0)
  • server: escape HTML attributes (#23995) (a270391)
  • server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
  • ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
  • use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
  • wasm: reject .wasm outside server.fs (#23914) (64e2467)
  • watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
  • worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

Miscellaneous Chores

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.7 (2026-11-09)

Bug Fixes

Miscellaneous Chores

Tests

Build System

8.3.6 (2026-11-05)

Bug Fixes

  • await overlapping plugin container close calls (#23935) (175bbeb)
  • build: resolve dynamic imports with queries appended when collecting CSS dependencies (#23909) (df36558)
  • build: use stable module ids in chunk import map hash signatures (fix #23975) (#23976) (8069835)
  • bundled-dev: allow named imports from Node built-ins (#23858) (4260c75)
  • bundled-dev: reload when hmr cannot run an entry again (#23849) (a236886)
  • deps: update @rollup/plugin-alias to v6.0.1 (#23862) (67c965b)
  • deps: update all non-major dependencies (#23896) (46b91c5)
  • deps: update all non-major dependencies (#23966) (b3cb057)
  • deps: update rolldown-related dependencies (#23868) (a63eb87)
  • deps: update rolldown-related dependencies (#23967) (0105733)
  • dev: escape ANSI escape sequence for server.forwardConsole (#23933) (4f340fd)
  • html: remove adjacent module tags on the first line (#23823) (eab1dc2)
  • ignore pnpm's .modules.yaml as a Vite Task input (#23634) (95c2daf)
  • optimizer: detect cache dir precisely (#23912) (cc9bc21)
  • optimizer: resolve subpath imports (#) with Vite's resolver (#23959) (0fdd81e)
  • respect build.sourcemap from environment (#23879) (82e7aa0)
  • server: escape HTML attributes (#23995) (a270391)
  • server: preserve $ patterns in static alias replacements (#23703) (1b6ed05)
  • ssr: convert external require against built-in modules to import for ssr.target=webworker (#23759) (a711f1c)
  • use top-level input for SSR build when build.ssr: true (#23898) (90bc034)
  • wasm: reject .wasm outside server.fs (#23914) (64e2467)
  • watch files that have a query or hash referenced with new URL(..., import.meta.url) (#23780) (e954a9c)
  • worker: keep chunks conflicted with unused workers that are still used by a live worker (#23956) (7139ef3)

Performance Improvements

Miscellaneous Chores

... (truncated)

Commits

Updates vitest from 5.0.5 to 5.1.0

Release notes

Sourced from vitest's releases.

v5.1.0

   🚀 Features

   🐞 Bug Fixes

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Nov 12, 2026
@Nexucis

Nexucis commented Nov 12, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
Bump the npm-minor-and-patch group across 1 directory with 4 updates
36cdf2d 
Bumps the npm-minor-and-patch group with 4 updates in the / directory: [mermaid](https://github.com/mermaid-js/mermaid), [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint), [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `mermaid` from 12.2.0 to 12.3.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.2.0...mermaid@12.3.0)

Updates `oxlint` from 1.90.0 to 1.93.0
- [Release notes](https://github.com/oxc-project/oxc/releases)
- [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md)
- [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.93.0/npm/oxlint)

Updates `vite` from 8.3.5 to 8.3.7
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.3.7/packages/vite)

Updates `vitest` from 5.0.5 to 5.1.0
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v5.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 12.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: oxlint
  dependency-version: 1.93.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
- dependency-name: vite
  dependency-version: 8.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm-minor-and-patch
- dependency-name: vitest
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the npm-minor-and-patch group with 4 updates Bump the npm-minor-and-patch group across 1 directory with 4 updates Nov 12, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npm-minor-and-patch-b8e9ac2cc4 branch from a8c6ce1 to 36cdf2d Compare November 12, 2026 14:27
@Nexucis
Nexucis merged commit 5804c5d into main Nov 12, 2026
6 checks passed
@Nexucis
Nexucis deleted the dependabot/npm_and_yarn/npm-minor-and-patch-b8e9ac2cc4 branch November 12, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Nexucis Nexucis Nexucis approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Nexucis