chore(deps): bump transitive mermaid to 11.16.1 - #4553
Conversation
streamdown declares mermaid as a hard dependency, so it lands in the lockfile even though diagram rendering is gated behind the optional @streamdown/mermaid plugin, which is not installed here. Its declared range (^11.12.2) already permits 11.16.1, so this was a stale lockfile pin rather than a range conflict. Use a scoped override so the floor is re-forced on every install; a plain lockfile refresh would silently revert.
|
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository UI Review profile: CHILL Plan: Pro Plus Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
📜 Recent review details⏰ Context from checks skipped due to timeout. (15)
🧰 Additional context used📓 Path-based instructions (1)**/package.json📄 CodeRabbit inference engine (AGENTS.md)
Files:
🔇 Additional comments (1)
WalkthroughAdded a pnpm override that resolves Mermaid versions from 11.0.0 through 11.16.0 to 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
2 participants
Summary
Bumps the transitive
mermaidin the lockfile from11.14.0to11.16.1.mermaidhas no direct dependents here. It arrives throughstreamdown,which declares it as a hard dependency even though diagram rendering is gated
behind the optional
@streamdown/mermaidplugin, which we don't install.streamdown@2.5.0is its latest release, and its declared range (^11.12.2)already permits
11.16.1, so this was a stale lockfile pin rather than arange conflict.
Done as a scoped override rather than a bare lockfile refresh, so the floor
survives a lockfile regenerated from an older base:
Net effect is 96 fewer lockfile lines, contained to mermaid's own subtree.
11.16.1swapped out its parser, so thelangium/chevrotain@12/vscode-languageserver-*chain drops in favour of a single@chevrotain/types, andlodash-esanduuid@11are no longer pulled atall.
The override goes away once
streamdownmakesmermaidan optional peer ofits diagram plugin instead of a hard dependency.