Skip to content

fix(deps): bump nanoid, dompurify, mermaid, js-yaml on default branch - #9769

Merged
diegosouzapw merged 1 commit into
release/v3.8.50from
fix/deps-release-0808
Aug 8, 2026
Merged

diegosouzapw merged 1 commit into
release/v3.8.50from
fix/deps-release-0808

Conversation

@diegosouzapw

Copy link
Copy Markdown
Owner

Closes 9 Dependabot alerts (#182-#190) on the default branch.

npm audit → 0 vulnerabilities

Bumps:

  • nanoid ^3.3.17 (transitive via postcss, 3.3.16→3.3.18)
  • dompurify ^3.4.13 (direct dep bump + monaco-editor scoped override)
  • mermaid → 11.16.1
  • js-yaml v4 nested copies → 4.3.1 (scoped overrides for yarnpkg/apidevtools/eslintrc/lockfile-lint/xmlbuilder2)

Only package.json + package-lock.json changes.

Closes 9 Dependabot alerts (#182-#190) on the default branch
(release/v3.8.50):
- nanoid ^3.3.17 (3.3.16→3.3.18)
- dompurify ^3.4.13 (direct dep bump + monaco-editor scoped override)
- mermaid → 11.16.1
- js-yaml v4 nested copies → 4.3.1 (scoped overrides)

npm audit → 0 vulnerabilities.
@diegosouzapw
diegosouzapw merged commit d7a7302 into release/v3.8.50 Aug 8, 2026
11 checks passed
@diegosouzapw
diegosouzapw deleted the fix/deps-release-0808 branch August 8, 2026 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant