deps: bump the production group across 1 directory with 15 updates

[dependabot]

Bumps the production group with 14 updates in the / directory:

Package	From	To
@aws-sdk/client-bedrock-runtime	3.1116.0	3.1121.0
@xyflow/react	12.11.3	12.11.5
axios	1.19.0	1.20.0
fumadocs-core	16.15.0	16.15.4
fumadocs-ui	16.15.0	16.15.4
js-yaml	5.3.0	5.4.1
marked	18.0.10	18.0.11
material-symbols	0.46.0	0.47.0
mermaid	11.17.0	11.17.2
next	16.3.2	16.3.3
next-intl	4.13.7	4.14.1
zod	4.4.3	4.5.2
onnxruntime-node	1.24.3	1.29.0
wreq-js	3.1.0	3.2.0

Updates @aws-sdk/client-bedrock-runtime from 3.1116.0 to 3.1121.0

Release notes

Sourced from @​aws-sdk/client-bedrock-runtime's releases.

v3.1121.0

3.1121.0(2026-08-28)

New Features

• client-ecs: Amazon Elastic Container Service - This release adds support for early success criteria on ECS rolling deployments, letting deployment complete once a configurable percentage of tasks are healthy, with configurable BLOCKING (required) or DEFERRED (asynchronous) cleanup of previous service revisions. (ef22d750)
• client-healthlake: New HealthLake API, RestoreFHIRDatastore, providing the capability to restore active datastores to a point in time within the last 30 days or recover a deleted datastore from the delete snapshot. (62491742)
• client-bedrock-agentcore: AgentCore Memory now supports direct ingestion into long-term memory via IngestData API (20d652de)
• client-partnercentral-selling: Releasing PARC, new APN Program that lets sellers add solftware revenue details to aws opportunity summary (2b6350f0)
• client-cognito-identity-provider: Adds two new operations - GetClientToken which allows M2M auth through the SDK, and DescribeTermsByClient to find which Terms are associated with a user-pool client without knowing the Terms resource id. (86dffd28)
• client-bedrock-agent: Adds an optional syncSchedule field to CreateDataSource and UpdateDataSource for Managed Knowledge Bases data source connectors, so a data source can sync automatically on a daily, weekly, or monthly schedule. (a8d3714a)

---

For list of updated packages, view updated-packages.md in assets-3.1121.0.zip

v3.1120.0

3.1120.0(2026-08-27)

Documentation Changes

• client-opensearch: Updating SDK and CLI documentation for AttachDataSource API. (d696fe76)

New Features

• client-lambda-microvms: Added InsufficientCapacityException to RunMicrovm for capacity-related failures. Added lifecycle status field (AVAILABLE, DEPRECATED) to ListManagedMicrovmImageVersions. Added ConflictException to CreateMicrovmAuthToken and CreateMicrovmShellAuthToken for unregistered MicroVMs. (72a8ff80)
• client-codedeploy: Added a deploymentMode parameter to CreateDeployment. Set it to RESTART to restart an EC2 and on-premises fleet, using the last successful revision, honoring Deployment Configuration. (78d4f964)
• client-cloudwatch-logs: Added resultCount to QueryStatistics in GetQueryResults. This field returns the total number of output rows in the final result set, helping customers programmatically determine whether a query produced results after all operations including post-aggregation filters. (0e4d242b)
• client-datazone: Add cascadeDelete to DeleteDomain. When specified, DataZone recursively deletes all projects, environments, subscriptions, and their underlying AWS resources before removing the domain. Deletion progress is reported via deleteProgress and resource failures via failureReasons on GetDomain. (3a74dc4b)
• client-rds: Adding support for the full snapshot size, in bytes, of DB instance snapshots. (ab2f66f5)
• client-ec2: EC2 allows AMI owners to define compatible instance types on their AMIs, blocking RunInstances calls automatically for launches on non-permitted instance types. (311b3b26)
• client-cognito-identity-provider: Adds the AdminDeleteSoftwareToken API operation, enabling administrators to remove a user's registered TOTP (software token) MFA configuration from a user pool. (f661bebc)

---

For list of updated packages, view updated-packages.md in assets-3.1120.0.zip

v3.1119.0

3.1119.0(2026-08-26)

Chores

• codegen: smithy-aws-typescript-codegen 0.53.0 (#8276) (dffb383b)

New Features

• client-sagemaker: Amazon SageMaker AI now supports ml.g7 instances for model optimization. You can now run model optimization jobs on ml.g7 instances, in supported AWS Regions. (6d5e1066)
• client-devops-agent: AWS DevOps Agent now supports trigger filter groups for Release Readiness Review, letting you control when the capability auto-triggers based on webhook events and target branches. (bc3d53d5)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-bedrock-runtime's changelog.

3.1121.0 (2026-08-28)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1120.0 (2026-08-27)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1119.0 (2026-08-26)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1118.0 (2026-08-25)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

3.1117.0 (2026-08-24)

Note: Version bump only for package @​aws-sdk/client-bedrock-runtime

Commits

• e53a25a Publish v3.1121.0
• d6be6f8 Publish v3.1120.0
• ba4e449 Publish v3.1119.0
• c65dd65 Publish v3.1118.0
• 78b069a Publish v3.1117.0
• See full diff in compare view

Updates @xyflow/react from 12.11.3 to 12.11.5

Release notes

Sourced from @​xyflow/react's releases.

@​xyflow/react@​12.11.5

Patch Changes

• Updated dependencies [22e0be2]:
  • @​xyflow/system@​0.0.81

@​xyflow/react@​12.11.4

Patch Changes

• #5974 8c42922 - Minimap still works after ReactFlow remounts

• #5962 cbf40b9 - Show log if user hides attribution in development

• #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

• #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

Changelog

Sourced from @​xyflow/react's changelog.

12.11.5

Patch Changes

• Updated dependencies [22e0be2]:
  • @​xyflow/system@​0.0.81

12.11.4

Patch Changes

• #5974 8c42922 - Minimap still works after ReactFlow remounts

• #5962 cbf40b9 - Show log if user hides attribution in development

• #5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

• #5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

Commits

• 8f0a5d6 chore(packages): bump
• 286816c chore(packages): bump
• 3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
• b7186f3 fix(react): minimap still works after reactflow remounts #5971
• d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
• 59b1a60 Simplify node click handling in MiniMap component
• 25869f2 chore(system): add attr warning handler
• b04e9d1 chore(system): rename utils isDomNodeVisible
• 31535ef chore(system): add isDomNodeVisible
• bce7475 chore(proOptions): add comments
• Additional commits viewable in compare view

Updates axios from 1.19.0 to 1.20.0

Release notes

Sourced from axios's releases.

v1.20.0 — August 19, 2026

This release hardens runtime option handling, adds RFC 9110 status-code aliases, fixes Node.js and XHR reliability issues, and refreshes project tooling and documentation.

⚠️ Breaking Changes & Deprecations

• HTTP Status Naming: Added ContentTooLarge (413) and UnprocessableContent (422), while retaining PayloadTooLarge and UnprocessableEntity as backward-compatible deprecated aliases. (#11082)

🔒 Security Fixes

• Runtime Option Handling: Hardened behavioral configuration reads against shared and foreign prototype pollution and normalized unsafe interceptor replacement objects. This also clarifies Fetch redirect and custom implementation behavior, HTTP/2 DNS and proxy handling, CIDR-based NO_PROXY matching, and malformed data URI rejection; see the PR for documented compatibility effects. (#11141)

🐛 Bug Fixes

• Interceptor Lifecycle: Prevented unbounded handler-array growth by trimming trailing ejected interceptors without changing iteration semantics, and kept interceptor operations safe when the public handlers field is nullish. (#11087, #11118)
• Request Error Preservation: Prevented custom Error.prepareStackTrace implementations that return non-string values from replacing the original request failure with an unrelated TypeError. (#11109)
• XHR Reliability: Navigation-canceled requests now reject with ECONNABORTED instead of resolving with status 0, while successful downloads flush their final progress callback during the live loadend dispatch. (#11094, #11121)
• Node.js Socket Memory: Removed request-context retention from per-socket error listeners, preventing completed response data from being pinned for the lifetime of pooled keep-alive sockets. (#11091)
• Core Methods and HTTP Errors: Prevented structural method-header buckets from leaking into outgoing headers, standardized invalid DNS lookup and httpVersion failures as AxiosError.ERR_BAD_OPTION_VALUE, and corrected the timeoutErrorMessage merge strategy. (#11096)

🔧 Maintenance & Chores

• Dependencies: Updated fast-uri, postcss, js-yaml, mocha, development-tooling groups, and GitHub Actions dependencies. (#11092, #11098, #11099, #11106, #11107, #11122, #11123, #11126, #11127, #11133, #11140, #11143, #11144)
• Documentation: Applied the v1.19.0 documentation updates, added the missing fs import to the README stream example, introduced localized global search, and repaired the interceptor test link. (#11101, #11113, #11097, #11119)
• Sponsorship: Updated sponsorship links and data and added ScrapingBee as a sponsor. (#11124, #11136, #11137)
• CI and Release: Switched ESM smoke tests to locked dependencies and synchronized package and runtime version metadata for v1.20.0. (#11128, #11152)

🌟 New Contributors

We are thrilled to welcome our new contributors. Thank you for helping improve axios:

• @​yens1 (#11109)
• @​Sasireddy001 (#11113)
• @​ari-token-security (#11094)
• @​timothyokooboh (#11097)
• @​gi9439041-png (#11119)
• @​Hashim1999164 (#11082)
• @​v-dev-cl (#11091)
• @​r0h1tb (#11118)
• @​ostapondo (#11121)

Full Changelog (axios/axios@v1.19.0...v1.20.0)

Changelog

Sourced from axios's changelog.

Changelog

Commits

• 84a9f3b chore(release): prepare release 1.20.0 (#11152)
• e6824ee fix: core methodList, HTTP adapter errors, and add tests (#11096)
• d8a919f fix(xhr): flush final progress during the live loadend dispatch (#11121)
• 2d2a21a fix(interceptors): tolerate nullish handlers in syncHandlerEntries (#11118)
• d19040b fix: harden runtime option handling (#11141)
• e0a02dd chore(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.2 in the github-...
• d10cb3a chore(deps-dev): bump the development_dependencies group with 4 updates (#11143)
• 2c94646 chore(deps): bump js-yaml and mocha in /tests/smoke/cjs (#11133)
• 76c12bc chore(deps-dev): bump js-yaml from 4.3.0 to 4.3.1 (#11140)
• ba98559 docs: add ScrapingBee sponsor (#11137)
• Additional commits viewable in compare view

Updates fumadocs-core from 16.15.0 to 16.15.4

Release notes

Sourced from fumadocs-core's releases.

fumadocs@16.15.4

• @​fumadocs/base-ui@​16.15.4
• fumadocs-core@16.15.4
• fumadocs-ui@16.15.4

Fix Next.js <Link> not scrolling to top under docs layouts

The page container rendered <main style="display: contents">, which Next.js' scroll handler treats as a hidden element: display: contents generates no box, so its getBoundingClientRect() is all-zero, indistinguishable from display: none. The handler skips it (and the sticky TOC siblings) without ever descending into children, dropping the scroll-to-top on navigation entirely.

The <main> element in Docs, Notebook and Flux page containers is now a real grid item (display: grid; grid-area: main) wrapping the unchanged #nd-page article, which centers via the grid instead of mx-auto. Rendering is identical, but if your custom CSS has element rules on main that were previously inert, they now apply.

fumadocs@16.15.3

• @​fumadocs/base-ui@​16.15.3
• fumadocs-core@16.15.3
• fumadocs-ui@16.15.3

Fix duplicated search result for pages whose description repeats in the content

Pages generated by Fumadocs OpenAPI emit the operation description as both the page description and a content section, so every endpoint page listed the same line twice in the search dialog. Search indexing now skips the page description when an identical content record exists, keeping the record with the heading anchor.

Fix #3509

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},

Render it with renderToMarkdown from fumadocs-core/server. Elements resolve from props.components: a component can call asMarkdown() to output its own Markdown form, other components (including missing ones) are serialized as JSX syntax.

import { renderToMarkdown } from 'fumadocs-core/server';
const { _markdown: Content } = await page.data.load();
const text = await renderToMarkdown(<Content components={getMDXComponents()} />);

getText('processed') keeps working: it renders the component for you, with an optional components map:

const text = await page.data.getText('processed', { components: getMDXComponents() });

Supported in bundler collections with both compilers, and in dynamic: true collections & @fumadocs/satteri/local-md with the Sätteri compiler.

... (truncated)

Commits

• 7d6fb97 Merge pull request #3516 from fuma-nama/tegami/version-packages
• 2d4706f chore: bump deps
• e616cb3 fix(ui): improve solar theme on new \<main> container
• 19442a3 feat(openapi): support 3.2 tag group
• a9054b3 fix(openapi): also upgrade the external documents
• dbf0f12 fix(ui): Next.js auto-scroll bug
• 5cd7b69 Merge pull request #3510 from fuma-nama/tegami/version-packages
• 814559b docs: introduce React Markdown Components
• b4d689d refactor(core(: rename options
• eefd3e0 feat(satteri): show the type table as a table in markdown form
• Additional commits viewable in compare view

Updates fumadocs-ui from 16.15.0 to 16.15.4

Release notes

Sourced from fumadocs-ui's releases.

fumadocs@16.15.4

• @​fumadocs/base-ui@​16.15.4
• fumadocs-core@16.15.4
• fumadocs-ui@16.15.4

Fix Next.js <Link> not scrolling to top under docs layouts

The page container rendered <main style="display: contents">, which Next.js' scroll handler treats as a hidden element: display: contents generates no box, so its getBoundingClientRect() is all-zero, indistinguishable from display: none. The handler skips it (and the sticky TOC siblings) without ever descending into children, dropping the scroll-to-top on navigation entirely.

The <main> element in Docs, Notebook and Flux page containers is now a real grid item (display: grid; grid-area: main) wrapping the unchanged #nd-page article, which centers via the grid instead of mx-auto. Rendering is identical, but if your custom CSS has element rules on main that were previously inert, they now apply.

fumadocs@16.15.3

• @​fumadocs/base-ui@​16.15.3
• fumadocs-core@16.15.3
• fumadocs-ui@16.15.3

Fix duplicated search result for pages whose description repeats in the content

Pages generated by Fumadocs OpenAPI emit the operation description as both the page description and a content section, so every endpoint page listed the same line twice in the search dialog. Search indexing now skips the page description when an identical content record exists, keeping the record with the heading anchor.

Fix #3509

Remark LLMs: export a component with output: "function"

With output: "function", _markdown becomes a component instead of a string: Markdown content is still stringified at compile time, while JSX elements stay as JSX, receiving their original props.

// fumadocs-mdx collection config
postprocess: {
  includeProcessedMarkdown: { output: 'function' },
},

Render it with renderToMarkdown from fumadocs-core/server. Elements resolve from props.components: a component can call asMarkdown() to output its own Markdown form, other components (including missing ones) are serialized as JSX syntax.

import { renderToMarkdown } from 'fumadocs-core/server';
const { _markdown: Content } = await page.data.load();
const text = await renderToMarkdown(<Content components={getMDXComponents()} />);

getText('processed') keeps working: it renders the component for you, with an optional components map:

const text = await page.data.getText('processed', { components: getMDXComponents() });

Supported in bundler collections with both compilers, and in dynamic: true collections & @fumadocs/satteri/local-md with the Sätteri compiler.

... (truncated)

Commits

• 7d6fb97 Merge pull request #3516 from fuma-nama/tegami/version-packages
• 2d4706f chore: bump deps
• e616cb3 fix(ui): improve solar theme on new \<main> container
• 19442a3 feat(openapi): support 3.2 tag group
• a9054b3 fix(openapi): also upgrade the external documents
• dbf0f12 fix(ui): Next.js auto-scroll bug
• 5cd7b69 Merge pull request #3510 from fuma-nama/tegami/version-packages
• 814559b docs: introduce React Markdown Components
• b4d689d refactor(core(: rename options
• eefd3e0 feat(satteri): show the type table as a table in markdown form
• Additional commits viewable in compare view

Updates js-yaml from 5.3.0 to 5.4.1

Changelog

Sourced from js-yaml's changelog.

[5.4.1] - 2026-08-26

Changed

• Hard-limit merge sequence size to 100.

Security

• Count empty mappings in merge sequences toward maxTotalMergeKeys to limit CPU usage, #797.

[5.4.0] - 2026-08-25

Added

• Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
• Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

Commits

• e5a3ba0 5.4.1 released
• e54dea3 Hard-limit merge sequence size to 100
• dfd3a29 Cleanup 6a8e05f, #797
• 6a8e05f fix: count empty merge sources against maxTotalMergeKeys (#797)
• 6b4ff5e 5.4.0 released
• 3b3625e Update changelog
• 4f25a74 Fix file name
• 3bd003b Expose new scalar styling API
• fbb3e9d Remove regex lookbehind for ES2015 compatibility
• d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
• Additional commits viewable in compare view

Updates lucide-react from 1.33.0 to 1.37.0

Release notes

Sourced from lucide-react's releases.

Version 1.37.0

What's Changed

• feat(icons): added 'robot-vacuum' icon by @​benhaube in lucide-icons/lucide#4599
• feat(icons): made face-angry even more angry by @​karsa-mistmere in lucide-icons/lucide#4708
• fix(icons): changed swords icon by @​jguddas in lucide-icons/lucide#4707
• fix(icons): changed shopping-cart icon by @​jguddas in lucide-icons/lucide#2909
• docs(icon-description): added old and empty tags/use case for ghost by @​TFJ5183 in lucide-icons/lucide#4762
• feat(icons): add playing-card, playing-cards, and playing-cards-fan by @​Barakudum in lucide-icons/lucide#4258
• fix(icons): changed beef icon by @​jguddas in lucide-icons/lucide#3457
• chore(tags): added music disc related tags to circle-dot by @​jguddas in lucide-icons/lucide#3909
• fix(icons): changed panda icon by @​jguddas in lucide-icons/lucide#3187
• fix(icons): rotate blend icon by @​jguddas in lucide-icons/lucide#3105
• fix(icons): rotate key icon by @​jguddas in lucide-icons/lucide#3111
• fix(icons): changed square-split-vertical icon by @​jguddas in lucide-icons/lucide#3939
• fix(icons): changed asterisk icon by @​jguddas in lucide-icons/lucide#3906
• fix(icons): unify check, cross and plus sizes across icons by @​karsa-mistmere in lucide-icons/lucide#3875
• feat(icons): added message-circle-dashed-check icon by @​aliyasirnac in lucide-icons/lucide#3678
• fix(icons): changed piano icon by @​karsa-mistmere in lucide-icons/lucide#4766
• feat(icons): added credit-card-x & credit-card-check icon by @​karsa-mistmere in lucide-icons/lucide#4763
• feat(icons): added credit-card-minus icon by @​ameniti-mx in lucide-icons/lucide#4440
• feat(icons): added credit-card-plus icon by @​ameniti-mx in lucide-icons/lucide#4441

New Contributors

• @​benhaube made their first contribution in lucide-icons/lucide#4599
• @​TFJ5183 made their first contribution in lucide-icons/lucide#4762
• @​aliyasirnac made their first contribution in lucide-icons/lucide#3678
• @​ameniti-mx made their first contribution in lucide-icons/lucide#4440

Full Changelog: lucide-icons/lucide@1.35.0...1.37.0

Version 1.36.0

What's Changed

• feat(icons): added 'robot-vacuum' icon by @​benhaube in lucide-icons/lucide#4599
• feat(icons): made face-angry even more angry by @​karsa-mistmere in lucide-icons/lucide#4708
• fix(icons): changed swords icon by @​jguddas in lucide-icons/lucide#4707
• fix(icons): changed shopping-cart icon by @​jguddas in lucide-icons/lucide#2909
• docs(icon-description): added old and empty tags/use case for ghost by @​TFJ5183 in lucide-icons/lucide#4762
• feat(icons): add playing-card, playing-cards, and playing-cards-fan by @​Barakudum in lucide-icons/lucide#4258
• fix(icons): changed beef icon by @​jguddas in lucide-icons/lucide#3457
• chore(tags): added music disc related tags to circle-dot by @​jguddas in lucide-icons/lucide#3909
• fix(icons): changed panda icon by @​jguddas in lucide-icons/lucide#3187
• fix(icons): rotate blend icon by @​jguddas in lucide-icons/lucide#3105
• fix(icons): rotate key icon by @​jguddas in lucide-icons/lucide#3111
• fix(icons): changed square-split-vertical icon by @​jguddas in lucide-icons/lucide#3939
• fix(icons): changed asterisk icon by @​jguddas in lucide-icons/lucide#3906
• fix(icons): unify check, cross and plus sizes across icons by @​karsa-mistmere in lucide-icons/lucide#3875
• feat(icons): added message-circle-dashed-check icon by @​aliyasirnac in lucide-icons/lucide#3678
• fix(icons): changed piano icon by @​karsa-mistmere in lucide-icons/lucide#4766
• feat(icons): added credit-card-x & credit-card-check icon by @​karsa-mistmere in lucide-icons/lucide#4763
• feat(icons): added credit-card-minus icon by @​ameniti-mx in lucide-icons/lucide#4440

... (truncated)

Commits

• See full diff in compare view

Updates marked from 18.0.10 to 18.0.11

Release notes

Sourced from marked's releases.

v18.0.11

18.0.11 (2026-08-24)

Bug Fixes

• do not nest a link inside a link (#4051) (e250e31)
• inlineTokens rebuilds the reflink-mask preamble per call (#4040) (0653c24)
• keep emphasis in the text of a rejected reference link (#4059) (b699db3)

Commits

• 53cb13f chore(release): 18.0.11 [skip ci]
• 0c6b2a6 docs: add adaptable bullet point (#4058)
• c430a64 chore(deps-dev): bump eslint from 10.8.1 to 10.9.0 (#4069)
• b699db3 fix: keep emphasis in the text of a rejected reference link (#4059)
• 0653c24 fix: inlineTokens rebuilds the reflink-mask preamble per call (#4040)
• e250e31 fix: do not nest a link inside a link (#4051)
• See full diff in compare view

Updates material-symbols from 0.46.0 to 0.47.0

Commits

• 7ca39ca 0.47.0
• 885bdee Auto Update
• See full diff in compare view

Updates mermaid from 11.17.0 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

• #8125 178d7c7 Thanks @​knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

• #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

  C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

• #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

• #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

Commits

• dcb694d Version Packages (#8130)
• 178d7c7 fix: restore edgePaths class on the edge group (#8125)
• 569f46e Version Packages (#8114)
• 3054836 Version Packages
• 5b17e0a Merge pull request #8092 from mermaid-js/hotfix/11.17.1
• 655211a Reverted change of wrap-options
• 8a23480 Updated doc from feedback
• 412c80a Update doc and consistent handlig in c4 as for seq diags
• b433a9a Updated changeset to describe specifik diagram affected
• 6bae15e Updated tests to Playwright API
• Additional commits viewable in compare view

Updates next from 16.3.2 to 16.3.3

Release notes

Sourced from next's releases.

v16.3.3

This release contains security fixes for the following advisories:

Critical:

• Unauthenticated Remote Code Execution on windows-hosted servers
• Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used

Commits

• a9a1cb7 v16.3.3
• 968b9fc [16.3.x] Fix ISR misses with backslashes in segments when deployed on Windows
• 3a15b4a [16.3.x] [next/image]: disable avif image optimization
• 7378b51 Backport/docs fixes 16.3 (#97649)
• 528c1cd [16.3.x] Stop generating error codes (#97780)
• See full diff in compare view

Updates next-intl from 4.13.7 to 4.14.1

Release notes

Sourced from next-intl's releases.

v4.14.1

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

v4.14.0

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

⚠️ If you're using useExtracted and the po format, this requires an update to your messages.

Please see amannn/next-intl#2393 for details and an upgrade prompt.

Changelog

Sourced from next-intl's changelog.

4.14.1 (2026-08-28)

Bug Fixes

• Unbreak experimental.messages without a messages.sourceLocale (#2395) (67fca94) – by @​amannn

4.14.0 (2026-08-27)

Features

• useExtracted improvements (#2346) (4ccf3b8) – by @​amannn

Commits

• 58b9222 v4.14.1
• 67fca94 fix: Unbreak experimental.messages without a messages.sourceLocale (#2395)
• 38845ed v4.14.0
• 4ccf3b8 feat: useExtracted improvements (#2346)
• 2e3ddfc docs: Update eloqnt links after the rename to eloqnt/cli (

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[diegosouzapw]

@dependabot recreate

[dependabot]

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.