Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Bumps the patch-versions group in /docs with 1 update: mermaid.

Updates mermaid from 11.12.0 to 11.12.1

Release notes

Sourced from mermaid's releases.

mermaid@11.12.1

Patch Changes

Commits
  • 762b44c Merge pull request #7108 from mermaid-js/changeset-release/master
  • 02c0091 Version Packages
  • 16359ad Merge pull request #7107 from mermaid-js/patch/dagre-d3-es-7.0.13
  • 061632c Update .changeset/slick-wasps-bathe.md
  • cbf8946 fix: update dagre-d3-es to version 7.0.13
  • ad82448 Merge pull request #7053 from mermaid-js/changeset-release/master
  • 9498619 Version Packages
  • 7a8557a Merge pull request #7036 from mermaid-js/knsv-patch-1
  • 74863c9 Merge pull request #7051 from mermaid-js/patch-parser-release
  • 63df702 chore: added changeset file
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated mermaid dependency to the latest patch version.

Bumps the patch-versions group in /docs with 1 update: [mermaid](https://github.com/mermaid-js/mermaid).


Updates `mermaid` from 11.12.0 to 11.12.1
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.0...mermaid@11.12.1)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 11.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-versions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 27, 2025 19:43
@dependabot dependabot bot requested review from elmattic and hanabi1224 and removed request for a team October 27, 2025 19:43
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 27, 2025
@coderabbitai
Copy link
Contributor

coderabbitai bot commented Oct 27, 2025

Walkthrough

Updated mermaid dependency in docs/package.json from ^11.12.0 to ^11.12.1, a patch-level version bump. No other configuration, script, or functionality changes included.

Changes

Cohort / File(s) Change Summary
Dependency Updates
docs/package.json
Bumped mermaid version from ^11.12.0 to ^11.12.1 (patch release)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

Suggested reviewers

  • elmattic
  • hanabi1224

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. You can run @coderabbitai generate docstrings to improve docstring coverage.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check ✅ Passed The pull request title "chore(deps): bump mermaid from 11.12.0 to 11.12.1 in /docs in the patch-versions group" directly and accurately describes the main change in the changeset, which is updating the mermaid dependency version in docs/package.json. The title follows conventional commit format and includes specific details (package name, version numbers, location) that make it clear and unambiguous. A developer reviewing the repository history would immediately understand that this is a patch version bump for a specific dependency in a specific directory, with no vague or misleading language present.
✨ Finishing touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/npm_and_yarn/docs/patch-versions-26a5be0b8d

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 5b60a60 and 29738d5.

⛔ Files ignored due to path filters (1)
  • docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
📒 Files selected for processing (1)
  • docs/package.json (1 hunks)
🔇 Additional comments (1)
docs/package.json (1)

29-29: ✓ Security patch approved.

The mermaid dependency bump from ^11.12.0 to ^11.12.1 is a patch-level update that addresses the security vulnerability GHSA-cc8p-78qf-8p7q through an updated dagre-d3-es transitive dependency. The change is minimal, backward-compatible, and follows semver conventions with the caret constraint.


Comment @coderabbitai help to get the list of available commands and usage tips.

@LesnyRumcajs LesnyRumcajs added this pull request to the merge queue Oct 28, 2025
Merged via the queue into main with commit c03c716 Oct 28, 2025
17 checks passed
@LesnyRumcajs LesnyRumcajs deleted the dependabot/npm_and_yarn/docs/patch-versions-26a5be0b8d branch October 28, 2025 01:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants