0.32.0

This new version improves the robustness of bpmn-visualization.

Thanks to all the contributors of this release 🌈: @tbouffard

See milestone 0.32.0 to get the list of issues covered by this release.

Highlights

CVE fix in fast-xml-parser

bpmn-visualization uses fast-xml-parser to parse the BPMN diagrams in XML format. Unfortunately, a vulnerability in fast-xml-parser has recently been disclosed. See SNYK-JS-FASTXMLPARSER-3325616 for more details.

A fix is now available and bpmn-visualization uses a version of fast-xml-parser that includes the fix.

However, the vulnerability exists in all versions of fast-xml-parser prior to version 4.1.2. Since earlier versions of bpmn-visualization depend on older versions of fast-xml-parser, we strongly recommend that all users update their application to bpmn-visualization 0.32.0 immediately.
Users can also manually update the version of fast-xml-parser in their application. Note that there is no guarantee that it will work fully with the older version of bpmn-visualization.

ℹ️ See #2548 for more information.

Breaking Changes

StyleUtils may have been used in rare cases to redefine the way the shapes are rendered. It wasn't used in the bpmn-visualization examples.

StyleUtils was marked as experimental and was subject to change as part of the BPMN Theme refactoring. So users already knew that it might be removed.

ℹ️ See #2550 for more information.

What's Changed

Full Changelog: v0.31.0...v0.32.0

📝 Documentation

• docs: fix license header in files of the root directory (#2557) @tbouffard
• docs(contributor): add missing link to mxGeometry source (#2540) @tbouffard
• docs: switch header license from JSDoc to regular block comments (#2525) @tbouffard

📦 Dependency updates

• chore(deps): bump fast-xml-parser from 4.1.2 to 4.1.3 (#2552) @dependabot
• chore(deps): bump fast-xml-parser from 4.1.1 to 4.1.2 (#2548) @dependabot

👻 Maintenance

• refactor: rework label position setting in StyleComputer (#2551) @tbouffard
• test: add test for gateway label position in visual tests (#2553) @tbouffard
• test: improve the layout of the integration test BPMN Diagram (#2554) @tbouffard
• refactor: remove StyleUtils (#2550) @tbouffard
• test: remove duplication in font value computation (#2549) @tbouffard
• refactor: introduce batchUpdate for model transaction (#2538) @tbouffard
• chore: ensure that the PR title follows "Conventional Commits" (#2529) @tbouffard