Bump plotly.js from 3.4.0 to 4.0.0

[dependabot]

Bumps plotly.js from 3.4.0 to 4.0.0.

Release notes

Sourced from plotly.js's releases.

v4.0.0

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
• When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

• Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
  • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
• Breaking: Drop support for MathJax v2 [#7898]
  • MathJax v3 and v4 are now supported in plotly.js
• Remove config attributes showLink, linkText, sendData, showSources, and showEditInChartStudio, as well as trace attribute stream, since all of these were associated with Chart Studio and are no longer needed [#7812]
• Remove all *src attributes, as well as layout.hidesources attribute, from the schema [#7829]
• Remove internal trace._fullInput property and other dead code related to the removed transforms feature. No user-facing changes expected [#7834]

Changed

• Breaking: Switch color processing library from TinyColor to culori [#7536], #7962]
  • rgb()/rgba() strings with decimal 0–1 fractions are no longer interpreted as percentage values (relative to 255)
  • hsv() color strings are no longer permitted
  • New color formats are now supported: #ff0000aa, #f00a, rgb(255 0 0), rgba(255 0 0 / 0.5), hsl(0 100% 50% / 0.5), hsla(0, 100%, 50%, 0.5), lab(), lch(), oklab(), oklch(), color(), hsl(0.5turn 60% 40%), hsl(none 60% 40%)
  • rgb() now accepts an optional alpha, so rgb(255, 0, 0, 0.5) is no longer opaque (rgb and rgba are aliases per spec)
  • Color strings that are not valid CSS are now rejected, such as hsl(120, 50% 50%)
  • Contrasting text and border colors are picked by WCAG contrast ratio, so labels on saturated mid-tone fills may switch from dark to white
• Breaking: Set default layout.axis.tickmode to 'sync' when axis is overlaying [#7684]
• Breaking: Change splom.axis.matches default from false to true [#7843]
• Breaking: Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]
  • The vast majority of country names are handled exactly the same with the new library; a small number of legacy entries have been removed
• Breaking: Update minimum required Node version to 22 [#7861]
• Breaking: Change layout.geo.fitbounds default from false to 'locations' [#7895]
  • geo subplots will now auto-fit the initial view to the trace data
  • Set fitbounds: false explicitly to opt out
• Breaking: Return actual data values (rather than calcdata values) for xvals / yvals in hoveranywhere and clickanywhere events. Date and category axes will now return strings rather than numeric values. Linear and log axis values remain unchanged. [#7964]
• Enable scattermap icons to render in color, upgrade Maki icons version to 8.2, and standardize scattermap legend icons to circles [#7825]
• Use plot title as default filename for "Download plot" button [#7828]
• Change signature of plots.graphJson() function to remove mode argument [#7829]
• Upgrade plotly/d3-sankey to 0.12.3. [#7830], with thanks to @​adamreeve for the contribution!
• Update plot_config to show the "Upload to Cloud" button by default, and set the default server URL to cloud.plotly.com via [#7909]
• Update "Share chart" dialog with more informative wording [#7928]

Fixed

• Fix histogram autobin size for single-point traces in overlay mode on data updates via Plotly.react [#7507], with thanks to @​Lexachoc for the contribution!
• Format tick labels correctly for small numbers in exponential notation [#7768], with thanks to @​Hasnaathussain for the contribution!

... (truncated)

Changelog

Sourced from plotly.js's changelog.

[4.0.0] -- 2026-08-24

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
• When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

• Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
  • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
• Breaking: Drop support for MathJax v2 [#7898]
  • MathJax v3 and v4 are now supported in plotly.js
• Remove config attributes showLink, linkText, sendData, showSources, and showEditInChartStudio, as well as trace attribute stream, since all of these were associated with Chart Studio and are no longer needed [#7812]
• Remove all *src attributes, as well as layout.hidesources attribute, from the schema [#7829]
• Remove internal trace._fullInput property and other dead code related to the removed transforms feature. No user-facing changes expected [#7834]

Changed

• Breaking: Switch color processing library from TinyColor to culori [#7536], #7962]
  • rgb()/rgba() strings with decimal 0–1 fractions are no longer interpreted as percentage values (relative to 255)
  • hsv() color strings are no longer permitted
  • New color formats are now supported: #ff0000aa, #f00a, rgb(255 0 0), rgba(255 0 0 / 0.5), hsl(0 100% 50% / 0.5), hsla(0, 100%, 50%, 0.5), lab(), lch(), oklab(), oklch(), color(), hsl(0.5turn 60% 40%), hsl(none 60% 40%)
  • rgb() now accepts an optional alpha, so rgb(255, 0, 0, 0.5) is no longer opaque (rgb and rgba are aliases per spec)
  • Color strings that are not valid CSS are now rejected, such as hsl(120, 50% 50%)
  • Contrasting text and border colors are picked by WCAG contrast ratio, so labels on saturated mid-tone fills may switch from dark to white
• Breaking: Set default layout.axis.tickmode to 'sync' when axis is overlaying [#7684]
• Breaking: Change splom.axis.matches default from false to true [#7843]
• Breaking: Replace country-regex with country-iso-search to search for country names in choropleth, scattergeo traces [#7856]
  • The vast majority of country names are handled exactly the same with the new library; a small number of legacy entries have been removed
• Breaking: Update minimum required Node version to 22 [#7861]
• Breaking: Change layout.geo.fitbounds default from false to 'locations' [#7895]
  • geo subplots will now auto-fit the initial view to the trace data
  • Set fitbounds: false explicitly to opt out
• Breaking: Return actual data values (rather than calcdata values) for xvals / yvals in hoveranywhere and clickanywhere events. Date and category axes will now return strings rather than numeric values. Linear and log axis values remain unchanged. [#7964]
• Enable scattermap icons to render in color, upgrade Maki icons version to 8.2, and standardize scattermap legend icons to circles [#7825]
• Use plot title as default filename for "Download plot" button [#7828]
• Change signature of plots.graphJson() function to remove mode argument [#7829]
• Upgrade plotly/d3-sankey to 0.12.3. [#7830], with thanks to @​adamreeve for the contribution!
• Update plot_config to show the "Upload to Cloud" button by default, and set the default server URL to cloud.plotly.com via [#7909]
• Update "Share chart" dialog with more informative wording [#7928]

Fixed

• Fix histogram autobin size for single-point traces in overlay mode on data updates via Plotly.react [#7507], with thanks to @​Lexachoc for the contribution!

... (truncated)

Commits

• e020cc0 4.0.0
• b9e8135 Updates for release v4.0.0
• b7516d7 Merge pull request #7988 from plotly/cam/add-regl-alias
• d7ea88d build: Add alias for regl in esbuild config
• 8bc6ee5 Merge pull request #7984 from plotly/v4.0
• 01a6cc4 Merge pull request #7945 from plotly/update-quiver-api
• 58f2a0b Merge remote-tracking branch 'origin/master' into v4.0
• c061695 Merge pull request #7815 from keilogic/fix-scrollzoom-automargin-jitter
• 614cb6f add draftlog
• 74a7200 cleanup
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)