feat: bundle mermaid and elk directly into DS#732
Conversation
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| "mermaid@npm:11.4.1": | ||
| version: 11.4.1 | ||
| resolution: "mermaid@npm:11.4.1" | ||
| dependencies: | ||
| "@braintree/sanitize-url": ^7.0.1 | ||
| "@iconify/utils": ^2.1.32 | ||
| "@mermaid-js/parser": ^0.3.0 | ||
| "@types/d3": ^7.4.3 | ||
| cytoscape: ^3.29.2 | ||
| cytoscape-cose-bilkent: ^4.1.0 | ||
| cytoscape-fcose: ^2.2.0 | ||
| d3: ^7.9.0 | ||
| d3-sankey: ^0.12.3 | ||
| dagre-d3-es: 7.0.11 | ||
| dayjs: ^1.11.10 | ||
| dompurify: ^3.2.1 | ||
| katex: ^0.16.9 | ||
| khroma: ^2.1.0 | ||
| lodash-es: ^4.17.21 | ||
| marked: ^13.0.2 | ||
| roughjs: ^4.6.6 | ||
| stylis: ^4.3.1 | ||
| ts-dedent: ^2.2.0 | ||
| uuid: ^9.0.1 | ||
| checksum: ede145a0638264936a70800adead21b6538cccad8ad82ff200fa640ce6c70c666e6154c74fc87b293fb968c591b355ad5666f2be7994758d72877be88c5f1059 | ||
| languageName: node | ||
| linkType: hard |
Check warning
Code scanning / Trivy
Mermaid does not properly sanitize architecture diagram iconText leading to XSS Medium
| "mermaid@npm:11.4.1": | ||
| version: 11.4.1 | ||
| resolution: "mermaid@npm:11.4.1" | ||
| dependencies: | ||
| "@braintree/sanitize-url": ^7.0.1 | ||
| "@iconify/utils": ^2.1.32 | ||
| "@mermaid-js/parser": ^0.3.0 | ||
| "@types/d3": ^7.4.3 | ||
| cytoscape: ^3.29.2 | ||
| cytoscape-cose-bilkent: ^4.1.0 | ||
| cytoscape-fcose: ^2.2.0 | ||
| d3: ^7.9.0 | ||
| d3-sankey: ^0.12.3 | ||
| dagre-d3-es: 7.0.11 | ||
| dayjs: ^1.11.10 | ||
| dompurify: ^3.2.1 | ||
| katex: ^0.16.9 | ||
| khroma: ^2.1.0 | ||
| lodash-es: ^4.17.21 | ||
| marked: ^13.0.2 | ||
| roughjs: ^4.6.6 | ||
| stylis: ^4.3.1 | ||
| ts-dedent: ^2.2.0 | ||
| uuid: ^9.0.1 | ||
| checksum: ede145a0638264936a70800adead21b6538cccad8ad82ff200fa640ce6c70c666e6154c74fc87b293fb968c591b355ad5666f2be7994758d72877be88c5f1059 | ||
| languageName: node | ||
| linkType: hard |
Check warning
Code scanning / Trivy
Mermaid improperly sanitizes sequence diagram labels leading to XSS Medium
jsladerman
force-pushed
the
jake/bundle-mermaid
branch
from
2bc6a37 to
4f30402
Compare
|
Visit the preview URL for this PR (updated for commit 4f30402): https://pluralsh-design--pr732-jake-bundle-mermaid-au5pt4ut.web.app (expires Fri, 14 Nov 2025 00:23:19 GMT) 🔥 via Firebase Hosting GitHub Action 🌎 Sign: 784914c934330f8d0a9fd65c68898b3988262b7d |
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
|
🎉 This PR is included in version 5.31.0 🎉 The release is available on: Your semantic-release bot 📦🚀 |
3 participants
No description provided.