[Snyk] Upgrade mermaid from 11.15.0 to 11.17.0

[peterj]

Snyk has created this PR to upgrade mermaid from 11.15.0 to 11.17.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released 21 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improperly Controlled Sequential Memory Allocation SNYK-JS-MERMAID-18592327	300	No Known Exploit
	Prototype Pollution SNYK-JS-MERMAID-18592329	300	No Known Exploit
	Arbitrary Code Injection SNYK-JS-MERMAID-18592305	300	No Known Exploit
	Use of Blocking Code in Single-threaded, Non-blocking Context SNYK-JS-MERMAID-18592314	300	No Known Exploit
	Prototype Pollution SNYK-JS-MERMAID-18592324	300	No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: mermaid

• 11.17.0 - 2026-08-19
  

  Minor Changes

  • #7842 3670b4e Thanks @ filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

  • #7812 cdfc0ea Thanks @ knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

    Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

  • #7785 c45cde9 Thanks @ knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

  • #7828 8eb3afc Thanks @ knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

  • #7803 74e44eb Thanks @ knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

  • #7792 ea55b31 Thanks @ RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

  • #7970 a2c0fb6 Thanks @ filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

  • #7842 ae3e115 Thanks @ filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

  • #7724 0fd7a9f Thanks @ xdumaine! - feat(xyChart): add legends for named line and bar series

  Patch Changes

  • #7847 215fe89 Thanks @ filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

  • #7871 8d874c4 Thanks @ knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

  • #8071 b3d1f63 Thanks @ pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

  • #7870 71b8843 Thanks @ knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

  • #7924 9cbef5d Thanks @ nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

  • #7850 a34cbf0 Thanks @ aloisklink! - fix(block): allow classdefs to update text color

  • #7937 f9cbe1e Thanks @ filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

  • #8005 90eeece Thanks @ pbrolin47! - fix(flowchart): reverts the behavior change from #7672 (fix/4648-directions), since arrows between subgraphs are broken

  • #7951 afa2f80 Thanks @ aloisklink! - perf: use fastdom to batch DOM measurements (up to 25% speedup)

  • Updated dependencies [e848423]:

    • @ mermaid-js/parser@1.2.1
• 11.16.1 - 2026-08-04
• 11.16.0 - 2026-06-25
• 11.15.0 - 2026-05-11

from mermaid GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[peterj]

This minor version upgrade introduces new features and bug fixes. While there are no mandatory API changes, there are behavioral changes that warrant a medium risk assessment.

Key Changes:

• Class Diagrams: A new default renderer has been introduced for class diagrams. To revert to the legacy renderer, you can set the configuration class: { defaultRenderer: 'dagre-d3' }. You should verify the rendering of your existing class diagrams.
• C4 Diagrams: A bug was introduced in version 11.17.0 that causes long element labels to no longer wrap, potentially breaking diagram layouts. This was fixed in 11.17.1.
• New Features: Support for subgraphs has been added to Entity Relationship (ER) diagrams and flowcharts.

Recommendation:
Verify the visual output of your C4 and Class diagrams after the upgrade to ensure they render as expected. If you use C4 diagrams extensively, consider upgrading to 11.17.1 or later to avoid the text wrapping bug.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.