fix(deps): update dependency mermaid to ^10.9.3
This MR contains the following updates:
Package | Type | Update | Change |
---|---|---|---|
mermaid | dependencies | patch | ^10.9.2 -> ^10.9.3 |
MR created with the help of gitlab-org/frontend/renovate-gitlab-bot
Release Notes
mermaid-js/mermaid (mermaid)
v10.9.3
Updates the bundled version of dependencies in the following files:
dist/mermaid.min.js
dist/mermaid.js
dist/mermaid.esm.mjs
dist/mermaid.esm.min.mjs
If you are not using these files (e.g. you are using the default NPM export of mermaid
, e.g. import mermaid from 'mermaid'
, or you are using dist/mermaid.core.mjs
), this release is identical to v10.9.2.
This is to avoid potential security issues in KaTeX and DOMPurify, see:
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-mmhx-hmjr-r674
- https://github.com/advisories/GHSA-64fm-8hw2-v72w
- https://github.com/advisories/GHSA-cvr6-37gx-v8wc
- https://github.com/advisories/GHSA-f98w-7cxr-ff2h
- https://github.com/advisories/GHSA-3wc5-fcw2-2329
These dependencies have already been updated in v11.0.0.
Changelog
Chore
- Updates the bundled version of KaTeX to 0.16.11 (
2bedd0e
) - Updates the bundled version of DOMPurify to 3.1.6 (
92a07ff
)
Full Changelog: https://github.com/mermaid-js/mermaid/compare/v10.9.2...v10.9.3
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot.