From e527115820a4f982388c7c62698ad71f72a169b7 Mon Sep 17 00:00:00 2001 From: elkaix Date: Sun, 9 Aug 2026 16:54:47 -0400 Subject: [PATCH] chore(deps): bump mermaid to 11.16.1 Clears five Dependabot alerts against the docs site: prototype pollution through the configuration APIs and through architecture diagrams, CSS injection into sibling elements, and denial of service in radar and XY chart rendering. Refreshes the pnpmDeps hash, which the lockfile change invalidates. --- docs/package.json | 2 +- flake.nix | 2 +- pnpm-lock.yaml | 53 +++++++++++++++++++++++++++++++---------------- 3 files changed, 37 insertions(+), 20 deletions(-) diff --git a/docs/package.json b/docs/package.json index ef3d7150..412d2a04 100644 --- a/docs/package.json +++ b/docs/package.json @@ -12,7 +12,7 @@ "vitepress": "^1.6.4" }, "dependencies": { - "mermaid": "^11.16.0", + "mermaid": "^11.16.1", "vitepress-plugin-llms": "^1.13.4", "vitepress-plugin-mermaid": "^2.0.17" } diff --git a/flake.nix b/flake.nix index 674e910b..d06180fc 100644 --- a/flake.nix +++ b/flake.nix @@ -148,7 +148,7 @@ inherit (finalAttrs) pname version src pnpmWorkspaces; inherit pnpm; fetcherVersion = 3; - hash = "sha256-GKfwTPY1YSCXyTICa/T2SrkqitM1EL/7l3Ry0VfNtY0="; + hash = "sha256-iNpwl+jjkjkDHUs4BdU1VxUjz4rgYDDPNzJQWmjTkz0="; }; nativeBuildInputs = [ diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 1ba9391d..8bc4967d 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -279,7 +279,7 @@ importers: version: 6.0.0 markstream-vue: specifier: 1.0.1-beta.5 - version: 1.0.1-beta.5(katex@0.17.0)(mermaid@11.16.0)(stream-markdown@0.0.16(react@19.2.8)(shiki@4.4.1)(solid-js@1.9.12)(vue@3.5.40(typescript@6.0.3)))(vue-i18n@11.4.8(vue@3.5.40(typescript@6.0.3)))(vue@3.5.40(typescript@6.0.3)) + version: 1.0.1-beta.5(katex@0.17.0)(mermaid@11.16.1)(stream-markdown@0.0.16(react@19.2.8)(shiki@4.4.1)(solid-js@1.9.12)(vue@3.5.40(typescript@6.0.3)))(vue-i18n@11.4.8(vue@3.5.40(typescript@6.0.3)))(vue@3.5.40(typescript@6.0.3)) shiki: specifier: ^4.4.1 version: 4.4.1 @@ -477,23 +477,23 @@ importers: version: 3.5.2(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0)) vitest: specifier: 4.1.4 - version: 4.1.4(@types/node@22.20.1)(@vitest/coverage-v8@4.1.9)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.1)(typescript@6.0.3))(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0)) + version: 4.1.4(@types/node@22.20.1)(@vitest/coverage-v8@4.1.9(vitest@4.1.9))(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.1)(typescript@6.0.3))(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0)) docs: dependencies: mermaid: - specifier: ^11.16.0 - version: 11.16.0 + specifier: ^11.16.1 + version: 11.16.1 vitepress-plugin-llms: specifier: ^1.13.4 version: 1.13.4 vitepress-plugin-mermaid: specifier: ^2.0.17 - version: 2.0.17(mermaid@11.16.0)(vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.25)(search-insights@2.17.3)(typescript@6.0.3)) + version: 2.0.17(mermaid@11.16.1)(vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.26)(search-insights@2.17.3)(typescript@6.0.3)) devDependencies: vitepress: specifier: ^1.6.4 - version: 1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.25)(search-insights@2.17.3)(typescript@6.0.3) + version: 1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.26)(search-insights@2.17.3)(typescript@6.0.3) packages/acp-adapter: dependencies: @@ -7077,8 +7077,8 @@ packages: resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==} engines: {node: '>= 8'} - mermaid@11.16.0: - resolution: {integrity: sha512-Zvm3kbstgdpvIJPPItlL7fppIZ3kibvc1oZIGxdvk9t6UFz6flv+Jw7FtRGKwfcI8OckmH04LqG6LlS6X4B1pA==} + mermaid@11.16.1: + resolution: {integrity: sha512-TQsq6u22fAn3rek5VOubrhKPo1g5hwC3FXUN9hiyupTckcYiGuuKGkNQrKYwGJkXUxZdojwRG46gsSCFZMDp4g==} micromark-core-commonmark@2.0.3: resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==} @@ -7301,6 +7301,11 @@ packages: engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true + nanoid@3.3.18: + resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==} + engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} + hasBin: true + napi-build-utils@2.0.0: resolution: {integrity: sha512-GEbrYkbfF7MoNaoh2iGG84Mnf/WZfB0GdGEsM8wz7Expx/LlWf5U8t9nvJKXSp3qr5IsEbK04cBGhol/KwOsWA==} @@ -7749,6 +7754,10 @@ packages: resolution: {integrity: sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==} engines: {node: ^10 || ^12 || >=14} + postcss@8.5.26: + resolution: {integrity: sha512-u82N74LFzG8ca+dD8puPnplTXoGH4fTPpVGuIbt36G3qvNlkvfD0lEAZSxaly3KX8TS/L1A1gsCEmvKmBcVbkQ==} + engines: {node: ^10 || ^12 || >=14} + postject@1.0.0-alpha.6: resolution: {integrity: sha512-b9Eb8h2eVqNE8edvKdwqkrY6O7kAwmI8kcnBv1NScolYJbo59XUF0noFq+lxbC1yN20bmC0WBEbDC5H/7ASb0A==} engines: {node: '>=14.0.0'} @@ -16040,7 +16049,7 @@ snapshots: markstream-core@1.0.0: {} - markstream-vue@1.0.1-beta.5(katex@0.17.0)(mermaid@11.16.0)(stream-markdown@0.0.16(react@19.2.8)(shiki@4.4.1)(solid-js@1.9.12)(vue@3.5.40(typescript@6.0.3)))(vue-i18n@11.4.8(vue@3.5.40(typescript@6.0.3)))(vue@3.5.40(typescript@6.0.3)): + markstream-vue@1.0.1-beta.5(katex@0.17.0)(mermaid@11.16.1)(stream-markdown@0.0.16(react@19.2.8)(shiki@4.4.1)(solid-js@1.9.12)(vue@3.5.40(typescript@6.0.3)))(vue-i18n@11.4.8(vue@3.5.40(typescript@6.0.3)))(vue@3.5.40(typescript@6.0.3)): dependencies: '@chenglou/pretext': 0.0.5 '@floating-ui/dom': 1.8.0 @@ -16049,7 +16058,7 @@ snapshots: vue: 3.5.40(typescript@6.0.3) optionalDependencies: katex: 0.17.0 - mermaid: 11.16.0 + mermaid: 11.16.1 stream-markdown: 0.0.16(react@19.2.8)(shiki@4.4.1)(solid-js@1.9.12)(vue@3.5.40(typescript@6.0.3)) vue-i18n: 11.4.8(vue@3.5.40(typescript@6.0.3)) @@ -16245,7 +16254,7 @@ snapshots: merge2@1.4.1: {} - mermaid@11.16.0: + mermaid@11.16.1: dependencies: '@braintree/sanitize-url': 7.1.2 '@iconify/utils': 3.1.4 @@ -16642,6 +16651,8 @@ snapshots: nanoid@3.3.17: {} + nanoid@3.3.18: {} + napi-build-utils@2.0.0: optional: true @@ -17104,6 +17115,12 @@ snapshots: picocolors: 1.1.1 source-map-js: 1.2.1 + postcss@8.5.26: + dependencies: + nanoid: 3.3.18 + picocolors: 1.1.1 + source-map-js: 1.2.1 + postject@1.0.0-alpha.6: dependencies: commander: 9.5.0 @@ -18814,7 +18831,7 @@ snapshots: dependencies: lightningcss: 1.33.0 picomatch: 4.0.5 - postcss: 8.5.25 + postcss: 8.5.26 rolldown: 1.0.3 tinyglobby: 0.2.17 optionalDependencies: @@ -18848,14 +18865,14 @@ snapshots: transitivePeerDependencies: - supports-color - vitepress-plugin-mermaid@2.0.17(mermaid@11.16.0)(vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.25)(search-insights@2.17.3)(typescript@6.0.3)): + vitepress-plugin-mermaid@2.0.17(mermaid@11.16.1)(vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.26)(search-insights@2.17.3)(typescript@6.0.3)): dependencies: - mermaid: 11.16.0 - vitepress: 1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.25)(search-insights@2.17.3)(typescript@6.0.3) + mermaid: 11.16.1 + vitepress: 1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.26)(search-insights@2.17.3)(typescript@6.0.3) optionalDependencies: '@mermaid-js/mermaid-mindmap': 9.3.0 - vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.25)(search-insights@2.17.3)(typescript@6.0.3): + vitepress@1.6.4(@algolia/client-search@5.56.0)(@types/node@26.1.2)(fuse.js@7.5.0)(lightningcss@1.33.0)(postcss@8.5.26)(search-insights@2.17.3)(typescript@6.0.3): dependencies: '@docsearch/css': 3.8.2 '@docsearch/js': 3.8.2(@algolia/client-search@5.56.0)(search-insights@2.17.3) @@ -18876,7 +18893,7 @@ snapshots: vite: 5.4.21(@types/node@26.1.2)(lightningcss@1.33.0) vue: 3.5.40(typescript@6.0.3) optionalDependencies: - postcss: 8.5.25 + postcss: 8.5.26 transitivePeerDependencies: - '@algolia/client-search' - '@types/node' @@ -18905,7 +18922,7 @@ snapshots: - typescript - universal-cookie - vitest@4.1.4(@types/node@22.20.1)(@vitest/coverage-v8@4.1.9)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.1)(typescript@6.0.3))(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0)): + vitest@4.1.4(@types/node@22.20.1)(@vitest/coverage-v8@4.1.9(vitest@4.1.9))(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.1)(typescript@6.0.3))(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0)): dependencies: '@vitest/expect': 4.1.4 '@vitest/mocker': 4.1.4(msw@2.15.0(@types/node@22.20.1)(typescript@6.0.3))(vite@6.4.3(@types/node@22.20.1)(jiti@2.7.0)(lightningcss@1.33.0)(tsx@4.23.5)(yaml@2.9.0))