Skip to content

Bump katex and mermaid - #2013

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-640ad9a0db
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-640ad9a0db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps katex to 0.18.10 and updates ancestor dependency mermaid. These dependencies need to be updated together.

Updates katex from 0.16.47 to 0.18.10

Release notes

Sourced from katex's releases.

v0.18.10

0.18.10 (2026-09-30)

Features

  • make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

v0.18.9

0.18.9 (2026-09-23)

Features

v0.18.8

0.18.8 (2026-09-23)

Bug Fixes

v0.18.7

0.18.7 (2026-09-06)

Features

v0.18.6

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

v0.18.5

0.18.5 (2026-08-31)

Bug Fixes

v0.18.4

0.18.4 (2026-08-10)

... (truncated)

Changelog

Sourced from katex's changelog.

0.18.10 (2026-09-30)

Features

  • make KaTeX fallback to browsr math font before Times New Roman (#4298) (a477b2e)

0.18.9 (2026-09-23)

Features

0.18.8 (2026-09-23)

Bug Fixes

0.18.7 (2026-09-06)

Features

0.18.6 (2026-09-05)

Bug Fixes

  • array: preserve tags on empty final rows (#4277) (02d552c)

0.18.5 (2026-08-31)

Bug Fixes

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

... (truncated)

Commits
  • 411da70 chore(release): 0.18.10 [ci skip]
  • a477b2e feat: make KaTeX fallback to browsr math font before Times New Roman (#4298)
  • 5a6a8f8 chore(deps): bump github/codeql-action from 4.38.1 to 4.38.2 (#4297)
  • 71a7bc0 chore(release): 0.18.9 [ci skip]
  • aafa187 feat(types): add contrib module declarations (#4250)
  • e749fd1 chore(release): 0.18.8 [ci skip]
  • ddfcc29 fix(array): preserve trailing rows in align (#4283)
  • 96e751c chore(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (#4292)
  • 726c2d4 chore(deps): bump github/codeql-action from 4.37.9 to 4.38.0 (#4287)
  • f71045d chore(deps): update dependency js-yaml to v4.3.2 [security] (#4286)
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates mermaid from 11.17.0 to 12.3.0

Release notes

Sourced from mermaid's releases.

mermaid@12.3.0

Minor Changes

  • #8164 592d0e4 Thanks @​filipsajdak! - feat: add the open-arrow and hollow-circle edge markers, so a notation can tell two kinds of flow apart by whether the head is filled

  • #8165 5c8aa5d Thanks @​filipsajdak! - feat: add the BPMN element shapes - events, gateways, activities, data objects, data stores and text annotations - each reporting where a line meets what is drawn

  • #8470 692d22a Thanks @​openmindednewby! - feat: flowchart edges accept a step number (e1@{ step: 1 }); a dot travels the edges in step order and loops, hidden under prefers-reduced-motion

  • #8478 56aa105 Thanks @​openmindednewby! - feat: add flowchart.stepDuration to set how many seconds each step of the flowchart step animation lasts

  • #8479 800f7ef Thanks @​openmindednewby! - feat: highlight the flowchart edge whose step is playing, in sync with the step animation dot

  • #8480 50d6294 Thanks @​openmindednewby! - feat: add flowchart.stepNumbers to show each step edge's number in a badge

Patch Changes

  • #8443 2ff8286 Thanks @​knsv-bot! - fix: agentflow renders the a[/…/] short form as an input instead of falling back to a task with a SHAPE_UNSUPPORTED warning

  • #8661 b200b27 Thanks @​pbrolin47! - fix: Bump DOMPurify to 3.4.17 to address GHSA-55q2-fjhq-7xh7 and GHSA-6688-9rhm-gjv2

  • #8633 686f350 Thanks @​sidharthv96! - chore: Remove the uuid dependency and the unused legacy ER diagram renderer

  • #8661 7eec083 Thanks @​pbrolin47! - fix: Stop an edge from a node inside a subgraph from crossing an edge from the subgraph itself to the same node with ELK 0.10+ (e.g. outer --> a with da --> a, or three --> two with two --> c2)

  • #8532 42d3760 Thanks @​Devehab! - fix: upgrade bundled elkjs from 0.9.3 to 0.12.0, which is licensed EPL-2.0 OR GPL-3.0-or-later, so GPL-3.0 projects can ship mermaid with ELK

  • #8162 d5ca27a Thanks @​filipsajdak! - fix(swimlanes): size a lane that holds a nested subgraph (TB drew it as an empty 0x0 box, and likewise an outer group holding lanes), and grow LR and RL lanes by the nested group's padding

  • #8405 b4299f2 Thanks @​filipsajdak! - fix: do not draw a stray empty swimlane when a node is listed in two lanes, and warn about it and about a subgraph nested in a lane

  • #8385 37d0ace Thanks @​filipsajdak! - fix(swimlanes): keep two arrowheads that land on one face of a node apart when a sibling edge is straightened

  • #8385 38e810a Thanks @​filipsajdak! - fix(swimlanes): an edge routed round the outside of a diamond now arrives at one of its vertices instead of ending in empty space beside it

  • #8385 25d7e31 Thanks @​filipsajdak! - fix(swimlanes): a second edge leaving a diamond on the same level as its target now leaves from a free vertex instead of running beside the first

  • #8171 a4750b4 Thanks @​filipsajdak! - fix: dock a swimlane edge on the shape it points at, so a line reaches an event's ring instead of stopping at the room its caption reserves

  • #8385 67315b9 Thanks @​filipsajdak! - fix: an edge label no longer pushes the nodes it joins a rank apart

  • #8385 21a1f5c Thanks @​filipsajdak! - fix(swimlanes): stop the crossing cleanup from joining two routes at a corner so they read as one line

  • #8385 e14bc3a Thanks @​filipsajdak! - fix(swimlanes): an edge no longer arrives at the vertex of a hexagon that another edge leaves from

  • #8459 edd162f Thanks @​Yun-seoung! - fix: Allow flowchart edge IDs regardless of whitespace after the node shape

    Edge IDs may no longer contain [ ] ( ) { } |.

  • #8402 4f2bade Thanks @​pcp-cmd! - fix: Render use case include and extend relationship labels with UML guillemets.

... (truncated)

Commits
  • 2086904 Merge pull request #8671 from mermaid-js/changeset-release/master
  • 41781cb Version Packages
  • 30b486a Merge pull request #8661 from mermaid-js/release/12.3.0
  • 86340ba docs: set the release version for the flowchart step animation options
  • bc18724 Additional fix since one flowchart diagram failed with crossing edges
  • 7eec083 fix(elk): keep an edge reversed into a subgraph from crossing the edges into it
  • 370c4af Merge pull request #8633 from mermaid-js/chore/remove-uuid
  • 74e5ee8 Merge branch 'develop' into chore/remove-uuid
  • 6e588f8 Merge pull request #8642 from mermaid-js/chore/e2e-speedup
  • b6933f0 ci(e2e): speed up Playwright runs
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team as a code owner November 4, 2026 14:54
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 4, 2026
Copilot AI balanced review requested due to automatic review settings November 4, 2026 14:54
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 4, 2026

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

The Mermaid 11→12 renderer upgrade for untrusted debug-plan diagrams requires browser-bundle compatibility and strict-mode validation, which cannot be performed here without dependencies and a VS Code webview runtime.

No open issues 🎉

What changed in this PR

Updates Mermaid and its KaTeX dependency together for diagram rendering in the Azure Resources extension’s Copilot on Rails webviews.

Changes:

  • Upgrades Mermaid from 11.17.0 to 12.3.0 and KaTeX from 0.16.47 to 0.18.10.
  • Refreshes transitive dependencies, adding Chevrotain and ELK packages and removing FastDOM and StrictDOM.
File Description
package.json Updates the Mermaid dependency range to ^12.3.0.
package-lock.json Locks the new Mermaid, KaTeX, and transitive dependency versions.

Review effort: Balanced

Bumps [katex](https://github.com/KaTeX/KaTeX) to 0.18.10 and updates ancestor dependency [mermaid](https://github.com/mermaid-js/mermaid). These dependencies need to be updated together.


Updates `katex` from 0.16.47 to 0.18.10
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.10)

Updates `mermaid` from 11.17.0 to 12.3.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.0...mermaid@12.3.0)

---
updated-dependencies:
- dependency-name: katex
  dependency-version: 0.18.10
  dependency-type: indirect
- dependency-name: mermaid
  dependency-version: 12.3.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-640ad9a0db branch from b7d5649 to 58c1045 Compare November 4, 2026 18:10

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 This update has not reached the required package age of 168 hours (7 full days).

Package Version Published (UTC) Eligible (UTC) Notes
mermaid 12.3.0 2026-11-03T13:18:31Z 2026-11-10T13:18:31Z direct dependency

The whole update becomes eligible at 2026-11-10T13:18:31Z.

Please wait until the eligibility time before approval.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants