Skip to content

chore(deps): bump transitive mermaid to 11.16.1 - #4553

Merged
nicktrn merged 1 commit into
mainfrom
chore/bump-mermaid-transitive
Aug 10, 2026
Merged

chore(deps): bump transitive mermaid to 11.16.1#4553
nicktrn merged 1 commit into
mainfrom
chore/bump-mermaid-transitive

Conversation

@nicktrn

@nicktrnnicktrn commented Aug 10, 2026•
edited
Loading

Copy link
Copy Markdown
Collaborator

Summary

Bumps the transitive mermaid in the lockfile from 11.14.0 to 11.16.1.

mermaid has no direct dependents here. It arrives through streamdown,
which declares it as a hard dependency even though diagram rendering is gated
behind the optional @streamdown/mermaid plugin, which we don't install.
streamdown@2.5.0 is its latest release, and its declared range (^11.12.2)
already permits 11.16.1, so this was a stale lockfile pin rather than a
range conflict.

Done as a scoped override rather than a bare lockfile refresh, so the floor
survives a lockfile regenerated from an older base:

"mermaid@>=11 <11.16.1": "^11.16.1"

Net effect is 96 fewer lockfile lines, contained to mermaid's own subtree.
11.16.1 swapped out its parser, so the langium / chevrotain@12 /
vscode-languageserver-* chain drops in favour of a single
@chevrotain/types, and lodash-es and uuid@11 are no longer pulled at
all.

The override goes away once streamdown makes mermaid an optional peer of
its diagram plugin instead of a hard dependency.

@nicktrn
chore(deps): bump transitive mermaid to 11.16.1
75bb11e
streamdown declares mermaid as a hard dependency, so it lands in the
lockfile even though diagram rendering is gated behind the optional
@streamdown/mermaid plugin, which is not installed here. Its declared
range (^11.12.2) already permits 11.16.1, so this was a stale lockfile
pin rather than a range conflict.
Use a scoped override so the floor is re-forced on every install; a
plain lockfile refresh would silently revert.
@nicktrnnicktrn self-assigned this Aug 10, 2026
@changeset-bot

changeset-botBot commented Aug 10, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 75bb11e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@nicktrn
nicktrn enabled auto-merge (squash) August 10, 2026 11:16
@coderabbitai

coderabbitaiBot commented Aug 10, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 3dc845af-86aa-43be-9648-6fc769118e00

📥 Commits

Reviewing files that changed from the base of the PR and between 90e8bd5 and 75bb11e.

⛔ Files ignored due to path filters (1)
  • pnpm-lock.yaml is excluded by !**/pnpm-lock.yaml
📒 Files selected for processing (1)
  • package.json
📜 Recent review details
⏰ Context from checks skipped due to timeout. (15)
  • GitHub Check: packages / 📊 Merge Reports
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (7, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (3, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (2, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (11, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (9, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (8, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (5, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (12, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (10, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (1, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (4, 12)
  • GitHub Check: webapp / 🧪 Unit Tests: Webapp (6, 12)
  • GitHub Check: internal / 🧪 Unit Tests: Internal
  • GitHub Check: e2e-webapp / 🧪 E2E Tests: Webapp
🧰 Additional context used
📓 Path-based instructions (1)
**/package.json

📄 CodeRabbit inference engine (AGENTS.md)

When adding Zod, use the exact repository-wide pinned version 3.25.76, never a different version or range.

Files:

  • package.json
🔇 Additional comments (1)
package.json (1)

143-143: 🎯 Functional Correctness

No change needed for the Mermaid override location.

The repository declares pnpm@10.x, and pnpm.overrides is included in the root package.json pnpm settings read by that version.

Walkthrough

Added a pnpm override that resolves Mermaid versions from 11.0.0 through 11.16.0 to ^11.16.1.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check nameStatusExplanationResolution
Description check⚠️ WarningThe description explains the dependency update well but omits the required issue reference, checklist, testing, changelog, and screenshots sections.Add the required template sections and complete the checklist, testing details, changelog entry, screenshots section, and issue reference.
✅ Passed checks (4 passed)
Check nameStatusExplanation
Title check✅ PassedThe title clearly identifies the dependency update and the target Mermaid version.
Docstring Coverage✅ PassedNo functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check✅ PassedCheck skipped because no linked issues were found for this pull request.
Out of Scope Changes check✅ PassedCheck skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/bump-mermaid-transitive

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

devin-ai-integration[bot]
devin-ai-integrationBot reviewed Aug 10, 2026
View reviewed changes

@devin-ai-integrationdevin-ai-integrationBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

Open in Devin Review

Comment threadpackage.json
@nicktrn
nicktrn merged commit 6e00aaf into mainAug 10, 2026
57 checks passed
@nicktrn
nicktrn deleted the chore/bump-mermaid-transitive branch August 10, 2026 11:52
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@devin-ai-integrationdevin-ai-integration[bot]devin-ai-integration[bot] left review comments
@D-K-PD-K-PD-K-P approved these changes

Assignees

@nicktrnnicktrn

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@nicktrn@D-K-P