Skip to content

Bump the browser-runtime group with 4 updates - #3153

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/browser-runtime-b436afb18e
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/browser-runtime-b436afb18e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 20, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the browser-runtime group with 4 updates: mermaid, react, react-dom and swagger-ui-dist.

Updates mermaid from 12.1.0 to 12.2.0

Release notes

Sourced from mermaid's releases.

mermaid@12.2.0

Minor Changes

  • #8394 6ac38cb Thanks @​jackroberts236! - feat: Add opt-in mindmap coloring by hierarchy depth using mindmap.colorBy: depth and the existing theme palette.

Patch Changes

  • #8409 419ee68 Thanks @​ashishjain0512! - fix: size circle and double-circle nodes from their label instead of minNodeWidth, and trim neo circle padding

  • #8395 2fb3ff1 Thanks @​ashishjain0512! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label

  • #8394 cbf89ab Thanks @​jackroberts236! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds

  • #8390 430ac9b Thanks @​ashishjain0512! - fix: Centre mindmap node labels when htmlLabels is false

  • #8161 d7532ed Thanks @​filipsajdak! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide

  • #8270 ad8d61a Thanks @​filipsajdak! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one

  • #8383 9d41c0f Thanks @​filipsajdak! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge

  • #8384 6c67397 Thanks @​filipsajdak! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border

  • #8366 40124c3 Thanks @​SwastikTripathi! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID

Commits
  • 1fb7869 Merge pull request #8432 from mermaid-js/changeset-release/master
  • 34772ca Version Packages
  • 42292ea Merge pull request #8428 from mermaid-js/release/12.2.0
  • e6c8059 Wrong version set previously
  • 6c55f56 Set mermaid version when Coloring by depth supported in Mindmap
  • 5a0d8cf Fix missing parallel uploads
  • 788f396 Update according to discussion with core-team members
  • 33d0a49 Merge pull request #8411 from mermaid-js/renovate/npm-katex-vulnerability
  • 6538fde Update dependency katex to ^0.18.0 [SECURITY]
  • ba3022d Merge pull request #8398 from mermaid-js/pebr/12.1.0-tmp
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates swagger-ui-dist from 5.33.1 to 5.33.3

Release notes

Sourced from swagger-ui-dist's releases.

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)
Commits
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • 5672801 chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 (#11086)
  • 2addfaf chore(deps): bump shell-quote from 1.10.0 to 1.12.0 (#11084)
  • 121c488 chore(deps): bump aquasecurity/trivy-action (#11079)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates the browser-runtime group: mermaid, react, react-dom, and swagger-ui-dist.

  • mermaid 12.1.0 → 12.2.0 adds opt-in mindmap coloring by hierarchy depth and fixes swimlane, node sizing, and edge label rendering.
  • react and react-dom 19.3.0 → 19.3.1 improve the React Server Components transport protocol.
  • swagger-ui-dist 5.33.1 → 5.33.3 bumps swagger-client, dompurify, and other transitive dependencies, and fixes a hooks-order issue in json-schema model rendering.

Written for commit 04a1617. Summary will update on new commits.

View guided diff Turn on auto-fix

Bumps the browser-runtime group with 4 updates: [mermaid](https://github.com/mermaid-js/mermaid), [react](https://github.com/react/react/tree/HEAD/packages/react), [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) and [swagger-ui-dist](https://github.com/swagger-api/swagger-ui).


Updates `mermaid` from 12.1.0 to 12.2.0
- [Release notes](https://github.com/mermaid-js/mermaid/releases)
- [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@12.1.0...mermaid@12.2.0)

Updates `react` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react)

Updates `react-dom` from 19.3.0 to 19.3.1
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.3.1/packages/react-dom)

Updates `swagger-ui-dist` from 5.33.1 to 5.33.3
- [Release notes](https://github.com/swagger-api/swagger-ui/releases)
- [Commits](swagger-api/swagger-ui@v5.33.1...v5.33.3)

---
updated-dependencies:
- dependency-name: mermaid
  dependency-version: 12.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: browser-runtime
- dependency-name: react
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: browser-runtime
- dependency-name: react-dom
  dependency-version: 19.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: browser-runtime
- dependency-name: swagger-ui-dist
  dependency-version: 5.33.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: browser-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner October 20, 2026 08:46
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 20, 2026
@dependabot
dependabot Bot requested a review from witalisoft October 20, 2026 08:46
@dependabot dependabot Bot added the javascript Pull requests that update Javascript code label Oct 20, 2026
@dependabot
dependabot Bot requested a review from mtblz October 20, 2026 08:46
@coderabbitai

coderabbitai Bot commented Oct 20, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: a9f6da3f-2a90-41b8-b921-9f7ffcd7b7c0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@netlify

netlify Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

✅ Deploy Preview for netdata-docusaurus ready!

Name Link
🔨 Latest commit 04a1617
🔍 Latest deploy log https://app.netlify.com/projects/netdata-docusaurus/deploys/6ad72a62224f352a93151632
😎 Deploy Preview https://deploy-preview-3153--netdata-docusaurus.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant