Skip to content

chore(deps): update dependency mermaid to v11.14.0#1070

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/mermaid-11.x
Open

chore(deps): update dependency mermaid to v11.14.0#1070
renovate[bot] wants to merge 1 commit intomainfrom
renovate/mermaid-11.x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Feb 18, 2026

This PR contains the following updates:

Package Type Update Change OpenSSF
mermaid dependencies minor 11.12.211.14.0 OpenSSF Scorecard

Release Notes

mermaid-js/mermaid (mermaid)

v11.14.0

Compare Source

Thanks to our awesome mermaid community that contributed to this release: @​ashishjain0512, @​tractorjuice, @​autofix-ci[bot], @​aloisklink, @​knsv, @​kibanana, @​chandershekhar22, @​khalil, @​ytatsuno, @​sidharthv96, @​github-actions[bot], @​dripcoding, @​knsv-bot, @​jeroensmink98, @​Alex9583, @​GhassenS, @​omkarht, @​darshanr0107, @​leentaylor, @​lee-treehouse, @​veeceey, @​turntrout, @​Mermaid-Chart, @​BambioGaming, Claude

Releases

@​mermaid-js/examples@​1.2.0

Minor Changes

mermaid@​11.14.0

Minor Changes
  • #​7526 efe218a - Add Wardley Maps diagram type (beta)

    Adds Wardley Maps as a new diagram type to Mermaid (available as wardley-beta). Wardley Maps are visual representations of business strategy that help map value chains and component evolution.

    Features:

    • Component positioning with [visibility, evolution] coordinates (OWM format)
    • Anchors for users/customers
    • Multiple link types: dependencies, flows, labeled links
    • Evolution arrows and trend indicators
    • Custom evolution stages with optional dual labels
    • Custom stage widths using @​boundary notation
    • Pipeline components with visibility inheritance
    • Annotations, notes, and visual elements
    • Source strategy markers: build, buy, outsource, market
    • Inertia indicators
    • Theme integration

    Implementation includes parser, D3.js renderer, unit tests, E2E tests, and comprehensive documentation.

  • #​7526 efe218a - feat: implement neo look styling for state diagrams

  • #​7526 efe218a - feat: implement neo look support for sequence diagrams with drop shadows, and enhanced styling

  • #​7526 efe218a - feat: add randomize config option for architecture diagrams, defaulting to false for deterministic layout

  • #​7526 efe218a - feat: Add option to change timeline direction

  • #​7526 efe218a - Fix duplicate SVG element IDs when rendering multiple diagrams on the same page. Internal element IDs (nodes, edges, markers, clusters) are now prefixed with the diagram's SVG element ID across all diagram types. Custom CSS or JS using exact ID selectors like #arrowhead should use attribute-ending selectors like [id$="-arrowhead"] instead.

  • #​7526 efe218a - feat: implement neo look styling for ER diagrams

  • #​7526 efe218a - feat: implement neo look styling for requirement diagrams

  • #​7526 efe218a - feat: add theme support for data label colour in xy chart

  • #​7526 efe218a - feat: implement neo look styling for mindmap diagrams

  • #​7526 efe218a - feat: implement neo look for mermaid flowchart diagrams

  • #​7526 efe218a - feat: implement neo look and themes for class diagram

  • #​7526 efe218a - feat: add showDataLabelOutsideBar option for xy chart

  • #​7526 efe218a - feat: implement neo look support for timeline diagram with drop shadows, additoinal redux themes and enhanced styling

  • #​7526 efe218a - feat: implement neo look and themes for gitGraph diagram

  • #​7526 efe218a - add new TreeView diagram

Patch Changes
  • #​7526 efe218a - add link to ishikawa diagram on mermaid.js.org

  • #​7526 efe218a - docs: document valid duration token formats in gantt.md

  • #​7526 efe218a - fix: ER diagram parsing when using "1" as entity identifier on right side

    The parser was incorrectly tokenizing the second "1" in patterns like a many to 1 1: because the lookahead rule only checked for alphabetic characters after whitespace, not digits. Added a new lookahead pattern "1"(?=\s+[0-9]) to correctly identify the cardinality alias before a numeric entity name.

    Fixes #​7472

  • #​7526 efe218a - fix: scope cytoscape label style mapping to edges with labels to prevent console warnings

  • #​7526 efe218a - fix: support inline annotation syntax in class diagrams (class Shape <>)

  • #​7526 efe218a - fix: Align branch label background with text for multi-line labels in LR GitGraph layout

  • #​7526 efe218a - fix: preserve cause hierarchy when ishikawa effect is indented more than causes

  • #​7526 efe218a - refactor: remove unused createGraphWithElements function and add regression test for open edge arrowheads

  • #​7526 efe218a - fix: Prevent long pie chart titles from being clipped by expanding the viewBox

  • #​7526 efe218a - fix: prevent sequence diagram hang when "as" is used without a trailing space in participant declarations

  • #​7526 efe218a - fix: warn when style statement targets a non-existent node in flowcharts

  • #​7526 efe218a - fix: group state diagram SVG children under single root element

  • #​7526 efe218a - fix: Allow :::className syntax inside composite state blocks

  • #​7526 efe218a Thanks @​aloisklink, @​BambioGaming! - fix: prevent escaping < and & when htmlLabels: false

  • #​7526 efe218a - fix: treemap title and labels use theme-aware colors for dark backgrounds

  • Updated dependencies [efe218a]:

@​mermaid-js/parser@​1.1.0

Minor Changes

@​mermaid-js/tiny@​11.14.0

Minor Changes
  • #​7526 efe218a - Add Wardley Maps diagram type (beta)

    Adds Wardley Maps as a new diagram type to Mermaid (available as wardley-beta). Wardley Maps are visual representations of business strategy that help map value chains and component evolution.

    Features:

    • Component positioning with [visibility, evolution] coordinates (OWM format)
    • Anchors for users/customers
    • Multiple link types: dependencies, flows, labeled links
    • Evolution arrows and trend indicators
    • Custom evolution stages with optional dual labels
    • Custom stage widths using @​boundary notation
    • Pipeline components with visibility inheritance
    • Annotations, notes, and visual elements
    • Source strategy markers: build, buy, outsource, market
    • Inertia indicators
    • Theme integration

    Implementation includes parser, D3.js renderer, unit tests, E2E tests, and comprehensive documentation.

  • #​7526 efe218a - feat: implement neo look styling for state diagrams

  • #​7526 efe218a - feat: implement neo look support for sequence diagrams with drop shadows, and enhanced styling

  • #​7526 efe218a - feat: add randomize config option for architecture diagrams, defaulting to false for deterministic layout

  • #​7526 efe218a - feat: Add option to change timeline direction

  • #​7526 efe218a - Fix duplicate SVG element IDs when rendering multiple diagrams on the same page. Internal element IDs (nodes, edges, markers, clusters) are now prefixed with the diagram's SVG element ID across all diagram types. Custom CSS or JS using exact ID selectors like #arrowhead should use attribute-ending selectors like [id$="-arrowhead"] instead.

  • #​7526 efe218a - feat: implement neo look styling for ER diagrams

  • #​7526 efe218a - feat: implement neo look styling for requirement diagrams

  • #​7526 efe218a - feat: add theme support for data label colour in xy chart

  • #​7526 efe218a - feat: implement neo look styling for mindmap diagrams

  • #​7526 efe218a - feat: implement neo look for mermaid flowchart diagrams

  • #​7526 efe218a - feat: implement neo look and themes for class diagram

  • #​7526 efe218a - feat: add showDataLabelOutsideBar option for xy chart

  • #​7526 efe218a - feat: implement neo look support for timeline diagram with drop shadows, additoinal redux themes and enhanced styling

  • #​7526 efe218a - feat: implement neo look and themes for gitGraph diagram

  • #​7526 efe218a - add new TreeView diagram

Patch Changes
  • #​7526 efe218a - add link to ishikawa diagram on mermaid.js.org

  • #​7526 efe218a - docs: document valid duration token formats in gantt.md

  • #​7526 efe218a - fix: ER diagram parsing when using "1" as entity identifier on right side

    The parser was incorrectly tokenizing the second "1" in patterns like a many to 1 1: because the lookahead rule only checked for alphabetic characters after whitespace, not digits. Added a new lookahead pattern "1"(?=\s+[0-9]) to correctly identify the cardinality alias before a numeric entity name.

    Fixes #​7472

  • #​7526 efe218a - fix: scope cytoscape label style mapping to edges with labels to prevent console warnings

  • #​7526 efe218a - fix: support inline annotation syntax in class diagrams (class Shape <>)

  • #​7526 efe218a - fix: Align branch label background with text for multi-line labels in LR GitGraph layout

  • #​7526 efe218a - fix: preserve cause hierarchy when ishikawa effect is indented more than causes

  • #​7526 efe218a - refactor: remove unused createGraphWithElements function and add regression test for open edge arrowheads

  • #​7526 efe218a - fix: Prevent long pie chart titles from being clipped by expanding the viewBox

  • #​7526 efe218a - fix: prevent sequence diagram hang when "as" is used without a trailing space in participant declarations

  • #​7526 efe218a - fix: warn when style statement targets a non-existent node in flowcharts

  • #​7526 efe218a - fix: group state diagram SVG children under single root element

  • #​7526 efe218a - fix: Allow :::className syntax inside composite state blocks

  • #​7526 efe218a Thanks @​aloisklink, @​BambioGaming! - fix: prevent escaping < and & when htmlLabels: false

  • #​7526 efe218a - fix: treemap title and labels use theme-aware colors for dark backgrounds

  • Updated dependencies [efe218a]:

v11.13.0

Compare Source

Minor Changes
Patch Changes
  • #​7075 96a766d Thanks @​darshanr0107! - fix: Prevent HTML tags from being escaped in sandbox label rendering

  • #​6843 32723b2 Thanks @​saurabhg772244! - fix: Support edge animation in hand drawn look

  • #​7453 a60e615 Thanks @​darshanr0107! - fix: ER diagram edge label positioning

  • #​6989 1a9d45a Thanks @​darshanr0107! - fix: Resolved parsing error where direction TD was not recognized within subgraphs

  • #​7178 96ca7c0 Thanks @​omkarht! - fix(treemap): Fixed treemap classDef style application to properly apply user-defined styles

  • #​7076 60f6331 Thanks @​darshanr0107! - fix: Correct viewBox casing and make SVGs responsive

  • #​7055 fa15ce8 Thanks @​darshanr0107! - fix: Improve participant parsing and prevent recursive loops on invalid syntax

  • #​7276 33c7c72 Thanks @​darshanr0107! - fix: respect markdownAutoWrap: false to prevent text auto-wrapping in flowchart markdown labels with htmlLabels enabled.

    Markdown labels with markdownAutoWrap: false, htmlLabels: false set doesn't work
    correctly.

  • #​7416 3c069b5 Thanks @​Crafter-Y! - fix: architecture diagram lines should now have the correct length

  • #​6995 9745f32 Thanks @​darshanr0107! - fix: Support the htmlLabels Mermaid config value whenever possible

  • #​7293 a408b55 Thanks @​darshanr0107! - fix: Prevent browser hang when using multiline accDescr in XY charts

  • #​6119 712c1ec Thanks @​NealGooch! - fix: correct block positioning when nested blocks span multiple columns

  • #​7424 981a62e Thanks @​knsv! - fix: correct BT orientation arc sweep flags in gitGraph drawArrow()

    Swapped SVG arc sweep-flag values in the BT (bottom-to-top) orientation branches of drawArrow() so curves bend in the correct direction. Affects both rerouting and non-rerouting code paths for merge and non-merge arrows.

    Resolves #​6593

  • #​7430 a4bb0b5 Thanks @​knsv! - fix: allow colons in stateDiagram-v2 transition and state description text

  • #​7432 b0f9d5b Thanks @​knsv! - fix: derive taskTextDarkColor from doneTaskBkgColor in dark theme for readable done-task text

  • #​7456 981fbb8 Thanks @​knsv-bot! - fix(gantt): restore readable outside-text color for done tasks in dark mode

  • #​7139 93aa657 Thanks @​omkarht! - revert: restore original hexagon and roundedRect implementations

  • #​7136 6bc6617 Thanks @​omkarht! - feat: add alias support for new participant syntax of sequence diagrams

  • #​7375 9d0669a Thanks @​kaigritun! - fix(er): recognize '1' cardinality alias before relationship operators

  • #​7275 7eed6a1 Thanks @​darshanr0107! - fix: change createLabel to call createText

    This adds support for KaTeX and FontAwesome icons loaded via iconpacks in some
    older labels. There are some small changes in formatting due to standardizing this code.

  • #​7265 2000680 Thanks @​omkarht! - fix: prevent unintended opacity on SVG aws icons containing rect elements

  • #​7139 b7c66a2 Thanks @​omkarht! - chore: restore original hexagon and roundedRect implementations

  • #​7425 f16bfbb Thanks @​knsv! - fix: use rounded right-angle edges for ELK layout

    ELK layout edges now default to rounded curve (right-angle segments with rounded corners) instead of inheriting the global basis default. This fixes ELK edges that were curving instead of routing at right angles (#​7213). Non-ELK layouts are unaffected and keep their existing basis default.

  • #​7296 aac86f7 Thanks @​darshanr0107! - fix: Ensure correct edge label rendering for ER and requirement diagrams when flowchart htmlLabels are false

  • #​7019 ace0367 Thanks @​darshanr0107! - fix: Mindmap breaking in ELK layout

  • #​6984 09b74f1 Thanks @​omkarht! - fix(er-diagram): prevent syntax error when using 'u', numbers, and decimals in node names

  • #​7276 33c7c72 Thanks @​darshanr0107! - fix: Restore proper rendering of plain text flowchart labels without auto line-wrapping

    This fix restores backwards compatibility with Mermaid v10 by ensuring that plain text labels in flowcharts are rendered correctly. In Mermaid v11, all labels were incorrectly being treated as markdown by default, which caused issues with text wrapping, multiline breaks, and backwards compatibility.

    What changed:

    • Plain text labels in flowcharts (without markdown syntax) now render as regular text
      • For node labels and edge labels, these will line-wrap automatically. Although this isn't backwards compatible with v10, we think this is a minor change and it's worth keeping to avoid too many changes from diagrams created from v11 onwards.
      • Plain text labels in other diagrams will continue to not line wrap.
    • Plain text labels with \n characters now correctly create line breaks
    • Plain text that looks like markdown (e.g., "1.", "- x") is no longer misinterpreted

    If you want markdown formatting:
    You can still use markdown in your flowchart labels by using the proper markdown syntax. Wrap your markdown text with double quotes and backticks:
    node["`_markdown_ **text**`"]

    Example:

    ```mermaid
    flowchart TD
        plain["Plain text\nwith manual line break"]
        markdown["`This is a **markdown** _label_ that wraps and doesn't replace \n with newlines`"]
    ```
  • #​7080 835de00 Thanks @​darshanr0107! - fix: Support ComponentQueue_Ext to prevent parsing error

  • #​7310 a9e4c72 Thanks @​darshanr0107! - fix: Allow quoted string labels in architecture-beta diagrams

  • #​7052 ff15e51 Thanks @​darshanr0107! - fix: Correct tooltip placement to appear near hovered element

  • #​7197 8bfd477 Thanks @​omkarht! - fix: validate dates and tick interval to prevent UI freeze/crash in gantt diagramtype

  • #​7099 b136acd Thanks @​darshanr0107! - fix: Mindmap rendering issue when the number of Level 2 nodes exceeds 11

  • #​7217 e0317ac Thanks @​omkarht! - fix(gitgraph): pass gitGraphConfig to renderer functions for applying directives properly.

  • Updated dependencies [fd3fc50]:

v11.12.3

Compare Source

Patch Changes

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Dependency updates label Feb 18, 2026
@renovate renovate bot enabled auto-merge (squash) February 18, 2026 00:32
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No issues found across 2 files

@renovate renovate bot force-pushed the renovate/mermaid-11.x branch from 86173ff to 522aeba Compare March 9, 2026 16:04
@renovate renovate bot changed the title chore(deps): update dependency mermaid to v11.12.3 chore(deps): update dependency mermaid to v11.13.0 Mar 9, 2026
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/mermaid-11.x branch from 522aeba to 9790113 Compare April 1, 2026 11:07
@renovate renovate bot changed the title chore(deps): update dependency mermaid to v11.13.0 chore(deps): update dependency mermaid to v11.14.0 Apr 1, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedunist-util-visit@​5.0.010010010083100
Addedtailwindcss@​4.1.181001008498100
Addedtailwind-merge@​3.4.01001008695100
Addedtypescript@​5.9.31001009010090
Addedzod@​4.3.410010010093100
Updatedmermaid@​11.12.2 ⏵ 11.14.099 +5100100 +194 +1100

View full report

@socket-security
Copy link
Copy Markdown

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn High
License policy violation: npm typescript

License: LicenseRef-W3C-Community-Final-Specification-Agreement - the applicable license policy does not allow this license (4) (package/ThirdPartyNoticeText.txt)

From: package.jsonnpm/typescript@5.9.3

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/typescript@5.9.3. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
License policy violation: npm vscode-languageserver-textdocument under LGPL-2.1-or-later

License: LGPL-2.1-or-later - the applicable license policy does not allow this license (4) (package/thirdpartynotices.txt)

From: ?npm/mermaid@11.14.0npm/vscode-languageserver-textdocument@1.0.12

ℹ Read more on: This package | This alert | What is a license policy violation?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Find a package that does not violate your license policy or adjust your policy to allow this package's license.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/vscode-languageserver-textdocument@1.0.12. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants