Skip to content

fix: bump mermaid from 11.17.2 to 12.2.0 - #590

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mermaid-12.2.0
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/mermaid-12.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 26, 2026 •

Copy link
Copy Markdown
Contributor

Bumps mermaid from 11.17.2 to 12.2.0.

Release notes

Sourced from mermaid's releases.

mermaid@12.2.0

Minor Changes

  • #8394 6ac38cb Thanks @​jackroberts236! - feat: Add opt-in mindmap coloring by hierarchy depth using mindmap.colorBy: depth and the existing theme palette.

Patch Changes

  • #8409 419ee68 Thanks @​ashishjain0512! - fix: size circle and double-circle nodes from their label instead of minNodeWidth, and trim neo circle padding

  • #8395 2fb3ff1 Thanks @​ashishjain0512! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label

  • #8394 cbf89ab Thanks @​jackroberts236! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds

  • #8390 430ac9b Thanks @​ashishjain0512! - fix: Centre mindmap node labels when htmlLabels is false

  • #8161 d7532ed Thanks @​filipsajdak! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide

  • #8270 ad8d61a Thanks @​filipsajdak! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one

  • #8383 9d41c0f Thanks @​filipsajdak! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge

  • #8384 6c67397 Thanks @​filipsajdak! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border

  • #8366 40124c3 Thanks @​SwastikTripathi! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID

mermaid@12.1.0

Minor Changes

  • #8303 9140716 Thanks @​filipsajdak! - feat: add the elk.orientFeedbackEdges option, enabled by default. With the ELK layout, an edge from a node that a subgraph feeds back into that subgraph is now routed downstream instead of around the subgraph. This changes the layout of existing ELK diagrams that contain such edges; set elk.orientFeedbackEdges: false to keep the previous routing.

  • #8250 fd4f5f2 Thanks @​kartben! - feat: add a bitOrder option to packet diagrams. It defaults to ascending, which is the current behaviour, and descending mirrors every row so it reads from that row's highest bit down to its lowest. Fields are still declared lowest bit first and keep their width, so switching a diagram between the two conventions only means changing bitOrder.

Patch Changes

  • #8330 50c9e55 Thanks @​ashishjain0512! - fix: upgrade chevrotain to 13 so mermaid no longer pulls in vulnerable lodash-es@4.17.23

  • #8259 4c90f5c Thanks @​afonsojanu! - fix(sequence): allow whitespace between an actor name and its @{ ... } config object

    participant Bob@{ "type" : "database" } parsed fine, but adding a single space before the config object (participant Bob @{ "type" : "database" }) failed with a confusing parse error, even though the plain form without a config object tolerates trailing whitespace just fine.

  • #8339 c7fa1a5 Thanks @​ashishjain0512! - fix: keep ELK class-diagram cardinalities off namespace frames

  • #8334 d67331d Thanks @​ashishjain0512! - fix(class): place cardinality labels beside their relation ends on dagre's sides with ELK, centre dagre's end labels, and stop clipping their text

  • #8344 99a050b Thanks @​pbrolin47! - fix: with the ELK layout, an edge label could sit up to 16px beside its edge instead of centred on it, when the edge's terminal jog was straightened after the label's position was computed. The label is now re-projected onto the straightened route

... (truncated)

Commits
  • 1fb7869 Merge pull request #8432 from mermaid-js/changeset-release/master
  • 34772ca Version Packages
  • 42292ea Merge pull request #8428 from mermaid-js/release/12.2.0
  • e6c8059 Wrong version set previously
  • 6c55f56 Set mermaid version when Coloring by depth supported in Mindmap
  • 5a0d8cf Fix missing parallel uploads
  • 788f396 Update according to discussion with core-team members
  • 33d0a49 Merge pull request #8411 from mermaid-js/renovate/npm-katex-vulnerability
  • 6538fde Update dependency katex to ^0.18.0 [SECURITY]
  • ba3022d Merge pull request #8398 from mermaid-js/pebr/12.1.0-tmp
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 26, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ⚠️ Failed 2026-10-26T09:00:40.494434Z
We couldn’t complete this review. Comment @codex review to try again.
455db9b New commits
🔒 Security Review ⚠️ Failed 2026-10-26T09:07:55.609583Z
We couldn’t complete this review. Comment @codex security review to try again.
455db9b New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b4c521d1ed

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

"katex": "^0.19.0",
"lucide-react": "1.58.0",
"mermaid": "^11.12.0",
"mermaid": "^12.2.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Preserve the previous Mermaid layout for existing diagrams

Mermaid 12 changes the default layout engine from Dagre to ELK, so every existing flowchart, state, class, ER, requirement, and use-case diagram that does not specify a layout will render with a different structure after this dependency bump. RichContent.tsx initializes Mermaid without a layout override, and the application renders arbitrary stored/AI-generated diagrams, so this causes a visible regression in previously rendered content; set layout: "dagre" (and the prior theme/look where needed) or explicitly accept and test the new layout. See the Mermaid 12 release notes.

Useful? React with 👍 / 👎.

Bumps [mermaid](https://github.com/mermaid-js/mermaid) from 11.17.2 to 12.2.0.
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.2...mermaid@12.2.0)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/mermaid-12.2.0 branch from b4c521d to 455db9b Compare October 26, 2026 08:58
@gansx

gansx commented Oct 26, 2026

Copy link
Copy Markdown
Collaborator

@dependabot ignore this major version

@dependabot dependabot Bot closed this Oct 26, 2026
@gansx

gansx commented Oct 26, 2026

Copy link
Copy Markdown
Collaborator

留在 mermaid 11:mermaid 12 引入 elkjs(EPL-2.0),当前许可证策略不允许。如后续需要 mermaid 12,先单独评审 elkjs 的许可证例外再升。

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/mermaid-12.2.0 branch October 26, 2026 15:39
@dependabot @github

dependabot Bot commented on behalf of github Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you about version 12.x.x again, unless you re-open this PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant