0.8.0-alpha.2 - 2026-06-23
Pre-release
Pre-release
Release Notes
This alpha focuses on Mermaid 11.15 parity, safer host integrations, and packaging readiness across CLI, Web/WASM, Typst, and native bindings.
Breaking Changes
- The C ABI is now version 2 so native hosts can provide text-measurement callbacks; C, Android JNI, Apple Swift, and Flutter/Dart integrations should rebuild against the updated headers and wrapper APIs.
- Diagram-level CSS-sensitive config is filtered more strictly by default; move trusted
themeCSS, font-family, and related theme overrides into trusted site config or the documented compatibility path when you intentionally need those overrides.
Added
- Added source-backed ELK layout support for Flowchart and Class diagrams, including Mermaid-reachable ELK options such as
mergeEdgesandnodePlacementStrategy. - Added
look: handDrawnrendering support for Flowchart and Class diagrams, including deterministic seeding and fixes for rough edges, clusters, and decision shapes. - Added browser/WASM host text-measurement APIs for
@mermanjs/web, includingrenderSvgWithTextMeasurer,layoutJsonWithTextMeasurer, andcreateBrowserTextMeasurer. - Added host text-measurement callbacks to the native binding surfaces for C, Android JNI, Apple Swift, and Flutter/Dart.
- Added Typst package improvements for document-context-aware diagrams, figure/layout controls, hardened document APIs, typography handling, and Typst 0.15 smoke coverage.
- Added
merman-cli completion <shell>for shell completion generation while keepingmerman-clias the installed command name rather than adding anmmdcalias. - Added repeatable WASM size reporting and budgets for browser and Typst presets, plus an opt-in
cytoscape-layoutfeature for size-sensitive Architecture and Mindmap builds. - Added Homebrew install guidance for
merman-clion macOS and Linux. Thanks @colindean for the contribution in #4.
Changed
- Improved Flowchart ELK parity across compound subgraphs, cross-hierarchy edges, external ports, labels, self-loops, and source-backed layout defaults.
- Improved CLI ergonomics and functional
mmdcworkflow coverage by grouping help, separating top-level export flags from developerrenderoptions, and documenting command-name compatibility boundaries. - Improved the playground and Web/WASM package so browser text measurement and Mermaid ELK layouts load on demand instead of forcing heavier default startup paths.
- Unified SVG-to-raster export through the same renderer-owned operation pipeline used by library and CLI callers, so sanitization, sizing, and encoding follow one path.
- Improved performance for layered layout and hot render paths, including Architecture and XYChart output, without changing public rendering APIs.
- Improved benchmark and parity tooling so release checks can cover source-backed ELK, hand-drawn output, WASM sizes, and Mermaid JS comparisons more repeatably.
Fixed
- Fixed Journey raster rendering in the resvg pipeline. Thanks @vlasky for the contribution in #6.
- Fixed Flowchart hand-drawn decision-node silhouettes and other rough node shapes so
layout: elk,look: handDrawn, and dark themes render more consistently. - Fixed sanitized Flowchart click links, fallback text entity decoding, and several browser/host text-measurement edge cases that could affect exported SVG readability.
- Fixed Gantt
excludeshandling so diagrams that exclude every weekday, or otherwise produce a long run of excluded dates, fail with a parse error instead of looping during task date adjustment. - Fixed WASM size-budget builds after dependency updates and made the size tooling respect
CARGO_TARGET_DIRwhen locating build artifacts. - Refreshed Kanban and Timeline layout snapshots to restore CI.
Security
- Hardened
resvg_safeSVG cleanup for raw SVG and rendered icon fragments by stripping active SVG elements, event-handler attributes, unsafe URL attributes, and unsafe style/presentationurl(...)values while preserving local paint/reference URLs and raster data images. - Hardened diagram config and Mermaid style parsing against CSS injection while preserving trusted site-level compatibility options.
- Added raster security regressions for default PNG/JPG pixmap budgets, custom raster size limits, and oversized intrinsic SVG rejection before PDF conversion.
- Added a
Security AuditGitHub Actions workflow for Rust dependency changes and weekly scheduled audit runs.
Install merman-cli 0.8.0-alpha.2
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/Latias94/merman/releases/download/v0.8.0-alpha.2/merman-cli-installer.sh | shInstall prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/Latias94/merman/releases/download/v0.8.0-alpha.2/merman-cli-installer.ps1 | iex"Download merman-cli 0.8.0-alpha.2
| File | Platform | Checksum |
|---|---|---|
| merman-cli-aarch64-apple-darwin.tar.xz | Apple Silicon macOS | checksum |
| merman-cli-x86_64-apple-darwin.tar.xz | Intel macOS | checksum |
| merman-cli-x86_64-pc-windows-msvc.zip | x64 Windows | checksum |
| merman-cli-x86_64-unknown-linux-gnu.tar.xz | x64 Linux | checksum |