Skip to content

build(deps): bump the production-dependencies group across 1 directory with 11 updates - #493

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-7aa2c97353
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/production-dependencies-7aa2c97353

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 11 updates in the / directory:

Package From To
@ant-design/icons 6.3.2 6.3.4
@inquirer/ansi 2.0.7 2.0.9
@inquirer/core 12.0.1 12.0.4
@inquirer/figures 2.0.8 2.0.9
@inquirer/prompts 8.7.0 8.7.3
@inquirer/type 4.1.0 4.2.0
antd 6.6.2 6.6.6
dompurify 3.4.16 3.4.17
marked 18.0.11 18.1.1
mermaid 11.17.2 12.2.0
yaml 2.9.0 2.9.1

Updates @ant-design/icons from 6.3.2 to 6.3.4

Commits

Updates @inquirer/ansi from 2.0.7 to 2.0.9

Release notes

Sourced from @​inquirer/ansi's releases.

@​inquirer/i18n@​1.3.0

What's new

  • Added the toggleMask help tip for the new password reveal shortcut (ctrl+t).
  • yesLabel/noLabel now pass straight through as keywords for localized confirm parsing (replacing the hintYes/hintNo locale fields).

What's fixed

  • Localized yes/no answers are now matched per-locale (e.g. Spanish s, French o, Chinese 是/否) instead of only English y/n.

Dependencies

  • @inquirer/core bumped to ^12.0.1
  • @inquirer/type bumped to ^4.1.0

@​inquirer/i18n@​1.2.0

Dependencies

  • @inquirer/core bumped to ^12.0.0
  • @inquirer/prompts bumped to ^8.6.0

No source changes.

@​inquirer/figures@​2.0.8

No source changes. Bumped to keep in lockstep with the @inquirer/* release train.

@​inquirer/i18n@​1.0.0

New package - first release!

Drop-in replacement for @inquirer/prompts with localized text.

Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​inquirer/ansi since your current version.


Updates @inquirer/core from 12.0.1 to 12.0.4

Release notes

Sourced from @​inquirer/core's releases.

@​inquirer/core@​12.0.4

What's new

  • The internal deferred-promise polyfill now uses withResolver from @inquirer/type instead of a core-local PromisePolyfill class (#2291).

Dependencies

  • @inquirer/type bumped to ^4.2.0 — new withResolver export (#2291)

@​inquirer/core@​12.0.3

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach useKeypress handlers after the prompt was done, cancelled, or aborted. Hook effects are now cleared in the synchronous settlement path (#2255, closes #1816).
  • Prompts created with an already-aborted signal now run the terminal cleanup (restore the cursor, close the readline interface, end the output stream) instead of leaking them (#2255).
Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view

Updates @inquirer/figures from 2.0.8 to 2.0.9

Commits
  • 5748bd9 chore: Publish new release
  • 269ae73 fix: pin @​inquirer/type exactly in published manifests
  • 927d6dd fix(@​inquirer/testing): keep keypress simulation working under TERM=dumb
  • 2d813b1 chore(deps): Bump @​humanfs/node from 0.16.6 to 0.16.8 (#2245)
  • 7affbc9 chore(deps-dev): Bump turbo from 2.10.9 to 2.10.11 in the build group (#2243)
  • 56db989 chore(deps-dev): Bump oxfmt in the formatting group (#2242)
  • 8e6bc3c chore(deps-dev): Bump the linting group with 2 updates (#2241)
  • 427b7a1 chore(deps-dev): Bump the testing group with 3 updates (#2240)
  • 51ac389 chore: Publish new release
  • 0f1718e feat(@​inquirer/password): add ctrl+t toggle to reveal password
  • Additional commits viewable in compare view

Updates @inquirer/prompts from 8.7.0 to 8.7.3

Release notes

Sourced from @​inquirer/prompts's releases.

@​inquirer/prompts@​8.7.3

What's new

  • search() no longer submits a stale choice when Enter is pressed while an async search is still loading — the prompt waits for the fresh results, the query is preserved, and repeated Enter presses during validation no longer run the async validator more than once (@inquirer/search, #2291, closes #2290).
  • confirm() now always accepts the single keystrokes y/n even with localized keywords, and unrecognized input no longer silently falls back on the default answer (@inquirer/confirm, #2281, closes #2279).
  • expand() and rawlist() now ignore surrounding whitespace in answers (@inquirer/expand, @inquirer/rawlist, #2280).
  • All package READMEs now document the Deno install command (deno add npm:@inquirer/prompts) alongside the npm/yarn/pnpm/bun ones (#2269).

Included

  • @inquirer/checkbox@^5.2.6
  • @inquirer/confirm@^6.3.3
  • @inquirer/editor@^5.3.4
  • @inquirer/expand@^5.1.6
  • @inquirer/input@^5.1.7
  • @inquirer/number@^4.2.4
  • @inquirer/password@^5.2.3
  • @inquirer/rawlist@^5.3.6
  • @inquirer/search@^4.3.4
  • @inquirer/select@^5.2.6

@​inquirer/prompts@​8.7.2

What's new

  • Fixed a race where keystrokes batched in the same tick as the key that settled a prompt could still reach keypress handlers after the prompt was done, cancelled, or aborted (@inquirer/core, #2255, closes #1816).
  • confirm() now trims surrounding whitespace from answers before matching yes/no keywords (@inquirer/confirm, #2254).

Included

  • @inquirer/checkbox@^5.2.5
  • @inquirer/confirm@^6.3.2
  • @inquirer/editor@^5.3.3
  • @inquirer/expand@^5.1.5
  • @inquirer/input@^5.1.6
  • @inquirer/number@^4.2.3
  • @inquirer/password@^5.2.2
  • @inquirer/rawlist@^5.3.5
  • @inquirer/search@^4.3.3
  • @inquirer/select@^5.2.5

@​inquirer/prompts@​8.7.1

What's new

  • All bundled prompts now pin @inquirer/type to an exact version in their published manifests. Since these type definitions leak into consumers' tsc runs, a semver range on the types-only dependency could break downstream TypeScript builds without any change to Inquirer.js itself (#2247, fixes #2244).

Included

... (truncated)

Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view

Updates @inquirer/type from 4.1.0 to 4.2.0

Release notes

Sourced from @​inquirer/type's releases.

@​inquirer/type@​4.2.0

What's new

  • New withResolver<T>() export: creates a promise together with its resolve/reject functions, replacing the manual let resolve boilerplate. Available until Promise.withResolvers (Node 22+) becomes the minimum supported version (#2291).
Commits
  • a9436bd chore(release): bump @​inquirer/type range to ^4.2.0
  • 61be5df chore: Publish new release
  • 7dc77e2 fix(search): prevent submissions while the prompt is loading
  • 73b5eab docs: document Deno installation (#2269)
  • 79a092a ci: add Deno compatibility test suite (#2271)
  • 148a96a chore: enable vitest fsModuleCache to persist transforms across runs
  • e928543 chore: bump yarn to 4.18.1 via corepack
  • 2348c7b fix(external-editor): use BSD/GNU-compatible truncate flag in test
  • 3c1fdb3 fix(confirm): always accept y/n and reject unrecognized input (#2281)
  • eae8b3e fix(expand, rawlist): ignore surrounding whitespace in answers (#2280)
  • Additional commits viewable in compare view

Updates antd from 6.6.2 to 6.6.6

Release notes

Sourced from antd's releases.

6.6.6

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts

  • Table
    • 🐞 修复 Table 树形数据使用「全选所有」时漏选子孙行的问题。#59342 @​QDyanbing
    • 🐞 修复 Table 开启 preserveSelectedRowKeys 时 rowSelection 的 onSelect 对已保留 key 返回 undefined 的问题。#59449 @​Chaoqi31
    • 🐞 修复 Table column.filterDropdownProps.popupRender 不生效的问题。#59393 @​ramen2020
    • 🐞 修复 Table 仅在 ConfigProvider 中配置 scroll 时,翻页或筛选后不会滚动到首行的问题。#59394 @​ramen2020
    • 🐞 修复 Table 在 v6 逻辑方向属性迁移后,固定列场景下选择列 z-index 不生效的问题。#58609 @​leshalv
  • Transfer
    • 🐞 修复 Transfer 的 selectAllLabels 设置为数值 0 时回退为默认数量文案的问题。#59487 @​QDyanbing
    • 🐞 修复单向 Transfer 移除条目后,受控选中状态仍保持勾选的问题。#59428 @​yunfeizhu
    • 🐞 修复 Transfer 使用 Shift 连选时选中搜索隐藏项,以及搜索结果变化后连选范围错误的问题。#59348 @​QDyanbing
  • Tree
    • 🐞 修复 Tree.DirectoryTree 使用数字 key 和 defaultExpandAll 时 Shift 范围选择失效的问题。#59375 @​QDyanbing
    • 🐞 修复 Tree.DirectoryTree 按住 Shift 连选时会选中 selectable: false 或 disabled: true 节点的问题。#59341 @​QDyanbing

... (truncated)

Changelog

Sourced from antd's changelog.

6.6.6

2026-10-12

  • Table
    • 🐞 Fix Table selection menu's "Select all data" option missing descendant rows in tree data. #59342 @​QDyanbing
    • 🐞 Fix Table rowSelection onSelect returning undefined for preserved keys when preserveSelectedRowKeys is enabled. #59449 @​Chaoqi31
    • 🐞 Fix Table column.filterDropdownProps.popupRender not working. #59393 @​ramen2020
    • 🐞 Fix Table not scrolling to the first row when scroll is configured only in ConfigProvider. #59394 @​ramen2020
    • 🐞 Fix Table selection column z-index not applying with fixed columns after the v6 logical property migration. #58609 @​leshalv
  • Transfer
    • 🐞 Fix Transfer selectAllLabels falling back to default counts when set to numeric 0. #59487 @​QDyanbing
    • 🐞 Fix controlled Transfer selection remaining checked after one-way removal. #59428 @​yunfeizhu
    • 🐞 Fix Transfer Shift selection affecting filtered-out items and selecting incorrect ranges after search results change. #59348 @​QDyanbing
  • Tree
    • 🐞 Fix Tree.DirectoryTree Shift range selection with numeric keys and defaultExpandAll. #59375 @​QDyanbing
    • 🐞 Fix Tree.DirectoryTree incorrectly selecting nodes with selectable: false or disabled: true during Shift range selection. #59341 @​QDyanbing
  • Carousel
    • 🐞 Fix Carousel reversing vertical slide order in RTL when dotPlacement makes the carousel vertical. #59436 @​Chaoqi31
    • 🤖 Fix Carousel types exposing the ignored verticalSwiping prop. #59366 @​QDyanbing
  • 🐞 Fix numeric 0 content rendering across List, Divider, and Drawer. #59118 #59517 #59437 @​nrps9909 @​Ye-YiChen @​Chaoqi31
  • 🐞 Fix Notification timers not resuming after closing hovered notices. #59435 @​zombieJ
  • 🐞 Fix DatePicker and TimePicker RangePicker not applying ConfigProvider locale.DatePicker. #59356 @​QDyanbing
  • 🐞 Fix TreeSelect and Mentions calling renderEmpty with Select instead of their component names. #59364 @​QDyanbing
  • 🐞 Fix AutoComplete incorrectly inheriting allowClear from ConfigProvider select. #59358 @​QDyanbing
  • 🐞 Fix Upload ignoring linkProps.onClick when clicking a file name link. #59324 @​QDyanbing
  • 🐞 Fix Input.OTP focus landing on the wrong cell after paste. #59479 @​dogledogle
  • 🐞 Fix Typography text editing not working when onClick is provided. #59325 @​QDyanbing
  • 🐞 Fix Alert close button remaining clickable when closable.disabled is true. #59432 @​QDyanbing
  • 🐞 Fix Card ignoring tabProps.defaultActiveKey when selecting the initial tab. #59414 @​QDyanbing
  • 🐞 Fix Breadcrumb dropdown menu links starting with undefined when the parent item has no href or path. #59423 @​QDyanbing
  • 🐞 Fix Avatar falling back to its default size when a larger breakpoint matches without a configured size. #59446 @​QDyanbing
  • 🐞 Fix Badge truncating fractional horizontal offset values. #59314 @​QDyanbing
  • 🐞 Fix Button custom loading icons appearing before the loading delay ends. #59353 @​QDyanbing
  • 🐞 Fix Tour nextButtonProps.onClick and prevButtonProps.onClick not receiving mouse events. #59332 @​QDyanbing
  • 🤖 Fix Form.Item, Rate, and QRCode TypeScript definitions to exclude unsupported props. #59373 #59379 #59408 @​QDyanbing
  • 🤖 Fix Upload custom request types to expose abort handles. #59382 @​QDyanbing
  • 🌐 Add missing DatePicker placeholders and Carousel arrow labels in remaining locales. #59351 @​shoutoutuoadi325
  • 🌐 Improve Romanian (ro_RO) locale translations. #59528 @​vicuts

6.6.5

2026-09-20

... (truncated)

Commits
  • c1a538b docs: changelog for 6.6.6 (#59539)
  • f755d90 fix(Table): include tree descendants when selecting all data (#59342)
  • df35daf fix(Avatar): preserve responsive size at larger breakpoints (#59446)
  • 255cb18 docs: correct Cascader tagRender signature and doc typos (#59523)
  • d069448 docs: fix Descriptions column type and description (#59533)
  • 9a5f4e1 fix(locale): improve ro_RO translations (#59528)
  • 5bc7ff7 chore(deps): update actions/setup-node digest to 949feb2 (#59530)
  • 2b939f4 chore(deps): update actions/download-artifact digest to 9000827 (#59529)
  • e1b172d chore(deps): update dependency @​types/adm-zip to ^0.6.0 (#59531)
  • 4db00b4 chore(deps): update dependency node-notifier to v11 (#59532)
  • Additional commits viewable in compare view

Updates dompurify from 3.4.16 to 3.4.17

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.17

  • Fixed an issue with IN_PLACE, SAFE_FOR_TEMPLATES and shadow roots, thanks @​manus-pi
  • Fixed IN_PLACE handling of nodes that hooks or custom elements tough during sanitization, thanks @​uttej-badwane
  • Fixed the SMIL attributeName guard in XHTML mode, thanks @​Koukyosyumei
  • Hardened several smaller edge cases (namespaces, literal-text elements, isValidAttribute()), thanks @​artiphishell
  • Added a purify-edge test runner as a compatibility check, thanks @​anzal1
  • Clarified the IN_PLACE documentation in the README about possible risks
  • Updated several dependencies
Commits

Updates marked from 18.0.11 to 18.1.1

Release notes

Sourced from marked's releases.

v18.1.1

18.1.1 (2026-10-12)

Bug Fixes

  • cli: honor an explicitly empty string input (#4113) (ec3a4e5)
  • end blockquote before a lazy line after a heading, hr or html block (#4115) (9e64a6a)
  • keep a backslash in a code span from hiding emphasis (#4117) (6a57018)
  • keep a decoded character reference from forming a new one (#4111) (6bbac0c), closes #38 #112
  • let indented and type 3-5 html blocks interrupt a paragraph (#4124) (eaa1fff)
  • make walkTokens linear by appending values in place (#4121) (627d9ae), closes #4120
  • match pre, script, style and textarea as whole tag names (#4114) (0db74cb)
  • preserve enclosing link state after parsing images (#4123) (cc07bb9)
  • respect tab stops in list continuation indentation (#4119) (4bd2528)

Performance Improvements

  • avoid repeated raw string copies in nested lists (#4082) (7e8754d)

v18.1.0

18.1.0 (2026-10-05)

Bug Fixes

  • avoid cubic backtracking on unicode whitespace in a link destination (#4106) (0d20220)
  • load CLI configs with top-level await (#4100) (c61543e)
  • reject unbalanced parentheses in link destinations (#4107) (3363c99)

Features

  • add linkParenPossible to lexer state to fail fast for link token generation (#4070) (4ee44f7)

v18.0.14

18.0.14 (2026-09-22)

Bug Fixes

v18.0.13

... (truncated)

Commits
  • cdbdc01 chore(release): 18.1.1 [skip ci]
  • 2134976 docs: add AGENTS.md (#4125)
  • 699a969 chore(deps-dev): bump handlebars from 4.7.9 to 4.7.10 (#4133)
  • 6a57018 fix: keep a backslash in a code span from hiding emphasis (#4117)
  • eaa1fff fix: let indented and type 3-5 html blocks interrupt a paragraph (#4124)
  • 7e8754d perf: avoid repeated raw string copies in nested lists (#4082)
  • cc07bb9 fix: preserve enclosing link state after parsing images (#4123)
  • 627d9ae fix: make walkTokens linear by appending values in place (#4121)
  • 4bd2528 fix: respect tab stops in list continuation indentation (#4119)
  • 9e64a6a fix: end blockquote before a lazy line after a heading, hr or html block (#4115)
  • Additional commits viewable in compare view

Updates mermaid from 11.17.2 to 12.2.0

Release notes

Sourced from mermaid's releases.

mermaid@12.2.0

Minor Changes

  • #8394 6ac38cb Thanks @​jackroberts236! - feat: Add opt-in mindmap coloring by hierarchy depth using mindmap.colorBy: depth and the existing theme palette.

Patch Changes

  • #8409 419ee68 Thanks @​ashishjain0512! - fix: size circle and double-circle nodes from their label instead of minNodeWidth, and trim neo circle padding

  • #8395 2fb3ff1 Thanks @​ashishjain0512! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label

  • #8394 cbf89ab Thanks @​jackroberts236! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds

  • #8390 430ac9b Thanks @​ashishjain0512! - fix: Centre mindmap node labels when htmlLabels is false

  • #8161 d7532ed Thanks @​filipsajdak! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide

  • #8270 ad8d61a Thanks @​filipsajdak! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one

  • #8383 9d41c0f Thanks @​filipsajdak! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge

  • #8384 6c67397 Thanks @​filipsajdak! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border

  • #8366 40124c3 Thanks @​SwastikTripathi! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID

mermaid@12.1.0

Minor Changes

  • #8303 9140716 Thanks @​filipsajdak! - feat: add the elk.orientFeedbackEdges option, enabled by default. With the ELK layout, an edge from a node that a subgraph feeds back into that subgraph is now routed downstream instead of around the subgraph. This changes the layout of existing ELK diagrams that contain such edges; set elk.orientFeedbackEdges: false to keep the previous routing.

  • #8250 fd4f5f2 Thanks @​kartben! - feat: add a bitOrder option to packet diagrams. It defaults to ascending, which is the current behaviour, and descending mirrors every row so it reads from that row's highest bit down to its lowest. Fields are still declared lowest bit first and keep their width, so switching a diagram between the two conventions only means changing bitOrder.

Patch Changes

  • #8330 50c9e55 Thanks @​ashishjain0512! - fix: upgrade chevrotain to 13 so mermaid no longer pulls in vulnerable lodash-es@4.17.23

  • #8259 4c90f5c Thanks @​afonsojanu! - fix(sequence): allow whitespace between an actor name and its @{ ... } config object

    participant Bob@{ "type" : "database" } parsed fine, but adding a single space before the config object (participant Bob @{ "type" : "database" }) failed with a confusing parse error, even though the plain form without a config object tolerates trailing whitespace just fine.

  • #8339 c7fa1a5 Thanks @​ashishjain0512! - fix: keep ELK class-diagram cardinalities off namespace frames

  • #8334 d67331d Thanks @​ashishjain0512! - fix(class): place cardinality labels beside their relation ends on dagre's sides with ELK, centre dagre's end labels, and stop clipping their text

  • #8344 99a050b Thanks @​pbrolin47! - fix: with the ELK layout, an edge label could sit up to 16px beside its edge instead of centred on it, when the edge's terminal...

    Description has been truncated

…y with 11 updates

Bumps the production-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@ant-design/icons](https://github.com/ant-design/ant-design-icons) | `6.3.2` | `6.3.4` |
| [@inquirer/ansi](https://github.com/SBoudrias/Inquirer.js) | `2.0.7` | `2.0.9` |
| [@inquirer/core](https://github.com/SBoudrias/Inquirer.js) | `12.0.1` | `12.0.4` |
| [@inquirer/figures](https://github.com/SBoudrias/Inquirer.js) | `2.0.8` | `2.0.9` |
| [@inquirer/prompts](https://github.com/SBoudrias/Inquirer.js) | `8.7.0` | `8.7.3` |
| [@inquirer/type](https://github.com/SBoudrias/Inquirer.js) | `4.1.0` | `4.2.0` |
| [antd](https://github.com/ant-design/ant-design) | `6.6.2` | `6.6.6` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.16` | `3.4.17` |
| [marked](https://github.com/markedjs/marked) | `18.0.11` | `18.1.1` |
| [mermaid](https://github.com/mermaid-js/mermaid) | `11.17.2` | `12.2.0` |
| [yaml](https://github.com/eemeli/yaml) | `2.9.0` | `2.9.1` |



Updates `@ant-design/icons` from 6.3.2 to 6.3.4
- [Commits](https://github.com/ant-design/ant-design-icons/commits)

Updates `@inquirer/ansi` from 2.0.7 to 2.0.9
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/ansi@2.0.7...@inquirer/ansi@2.0.9)

Updates `@inquirer/core` from 12.0.1 to 12.0.4
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/core@12.0.1...@inquirer/core@12.0.4)

Updates `@inquirer/figures` from 2.0.8 to 2.0.9
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/figures@2.0.8...@inquirer/figures@2.0.9)

Updates `@inquirer/prompts` from 8.7.0 to 8.7.3
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/prompts@8.7.0...@inquirer/prompts@8.7.3)

Updates `@inquirer/type` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/SBoudrias/Inquirer.js/releases)
- [Commits](https://github.com/SBoudrias/Inquirer.js/compare/@inquirer/type@4.1.0...@inquirer/type@4.2.0)

Updates `antd` from 6.6.2 to 6.6.6
- [Release notes](https://github.com/ant-design/ant-design/releases)
- [Changelog](https://github.com/ant-design/ant-design/blob/master/CHANGELOG.en-US.md)
- [Commits](ant-design/ant-design@6.6.2...6.6.6)

Updates `dompurify` from 3.4.16 to 3.4.17
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.16...3.4.17)

Updates `marked` from 18.0.11 to 18.1.1
- [Release notes](https://github.com/markedjs/marked/releases)
- [Commits](markedjs/marked@v18.0.11...v18.1.1)

Updates `mermaid` from 11.17.2 to 12.2.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.17.2...mermaid@12.2.0)

Updates `yaml` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/eemeli/yaml/releases)
- [Commits](eemeli/yaml@v2.9.0...v2.9.1)

---
updated-dependencies:
- dependency-name: "@ant-design/icons"
  dependency-version: 6.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/ansi"
  dependency-version: 2.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/core"
  dependency-version: 12.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/figures"
  dependency-version: 2.0.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/prompts"
  dependency-version: 8.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@inquirer/type"
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: antd
  dependency-version: 6.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: marked
  dependency-version: 18.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: mermaid
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: yaml
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 0c109122-2db8-497c-8822-e9e376038fa2

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown

PR template needs attention

Please update this PR to match the current .github/PULL_REQUEST_TEMPLATE.md:

  • Missing template section: ## ✨ Summary
  • Missing template section: ## 🎯 Scope
  • Missing template section: ## 🧪 Testing
  • Missing template section: ## ✅ Checklist
  • Missing template section: ## 👀 Notes for Reviewers
  • Missing template item: CLI commands (init, status, doctor, update)
  • Missing template item: Core installer / platform detection
  • Missing template item: Comet skills (assets/skills/, assets/skills-zh/)
  • Missing template item: Comet shell scripts (assets/skills/comet/scripts/)
  • Missing template item: Tests / CI
  • Missing template item: Documentation / changelog
  • Missing template item: Other:
  • Missing template item: pnpm build
  • Missing template item: pnpm lint
  • Missing template item: pnpm run lint:architecture
  • Missing template item: pnpm format:check
  • Missing template item: pnpm test
  • Missing template item: pnpm test -- test/domains/comet-classic/comet-scripts.test.ts
  • Missing template item: Not run:
  • Missing template item: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Missing template item: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Missing template item: CHANGELOG.md is updated when behavior changes
  • Missing template item: Skill changes were made in Chinese first when applicable, then synced to English
  • Missing template item: New scripts are included in assets/manifest.json and relevant tests
  • Missing template item: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Missing template item: No unrelated generated files or local artifacts are included
  • Checklist item is not checked: PR title follows Conventional Commits, for example fix: handle project-scope init
  • Checklist item is not checked: User-facing behavior is documented in README.md, README-zh.md, or CONTRIBUTING.md
  • Checklist item is not checked: CHANGELOG.md is updated when behavior changes
  • Checklist item is not checked: Skill changes were made in Chinese first when applicable, then synced to English
  • Checklist item is not checked: New scripts are included in assets/manifest.json and relevant tests
  • Checklist item is not checked: Shell scripts remain portable across macOS, Linux, and Windows Git Bash
  • Checklist item is not checked: No unrelated generated files or local artifacts are included

@github-actions

Copy link
Copy Markdown

👋 Thanks for opening your first PR to Comet, @dependabot[bot].

Before review, please make sure the PR title follows Conventional Commits, for example fix: handle project-scope init, and that the checklist in the PR template is up to date.

🧪 The most useful local checks are:

pnpm build
pnpm lint
pnpm format:check
pnpm test

🧰 If your change touches assets/skills/comet/scripts/, please also check script portability across macOS, Linux, and Windows Git Bash. Avoid sed -i, support both sha256sum and shasum -a 256, and guard optional grep pipelines with || true.

✨ We appreciate the contribution and will take a look as soon as we can.

@dependabot @github

dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 22, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-7aa2c97353 branch October 22, 2026 23:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants