Bump the browser-runtime group with 4 updates

DE
15h ago
+31-26

Bumps the browser-runtime group with 4 updates: mermaid, react, react-dom and swagger-ui-dist.

Updates mermaid from 12.1.0 to 12.2.0

Release notes

Sourced from mermaid's releases.

mermaid@12.2.0

Minor Changes

  • #8394 6ac38cb Thanks @​jackroberts236! - feat: Add opt-in mindmap coloring by hierarchy depth using mindmap.colorBy: depth and the existing theme palette.

Patch Changes

  • #8409 419ee68 Thanks @​ashishjain0512! - fix: size circle and double-circle nodes from their label instead of minNodeWidth, and trim neo circle padding

  • #8395 2fb3ff1 Thanks @​ashishjain0512! - fix: ELK no longer straightens an edge terminal when that would put a label over another edge, or an edge through a label

  • #8394 cbf89ab Thanks @​jackroberts236! - fix: Keep mindmap HTML labels readable in the neo look on themes that repaint node backgrounds

  • #8390 430ac9b Thanks @​ashishjain0512! - fix: Centre mindmap node labels when htmlLabels is false

  • #8161 d7532ed Thanks @​filipsajdak! - fix: scope a swimlane cluster's DOM id like every other cluster, so two diagrams on one page do not collide

  • #8270 ad8d61a Thanks @​filipsajdak! - fix(rendering): clip an edge for the layout engine that drew it, so a diagram pinning its own engine (bpmn, swimlanes) still renders when the configured default is another one

  • #8383 9d41c0f Thanks @​filipsajdak! - fix(swimlanes): split shared terminal lanes again after crossing cleanup, so an edge that detours around another lane no longer ends on the same attachment point as a neighbouring edge

  • #8384 6c67397 Thanks @​filipsajdak! - fix(swimlanes): move a lane's title band clear of an edge that crosses it, in LR diagrams whose lanes carry no direction of their own and when the edge runs along the band's border

  • #8366 40124c3 Thanks @​SwastikTripathi! - fix: swimlane nodes with no edges keep their source order inside a lane instead of being sorted by ID

Commits
  • 1fb7869 Merge pull request #8432 from mermaid-js/changeset-release/master
  • 34772ca Version Packages
  • 42292ea Merge pull request #8428 from mermaid-js/release/12.2.0
  • e6c8059 Wrong version set previously
  • 6c55f56 Set mermaid version when Coloring by depth supported in Mindmap
  • 5a0d8cf Fix missing parallel uploads
  • 788f396 Update according to discussion with core-team members
  • 33d0a49 Merge pull request #8411 from mermaid-js/renovate/npm-katex-vulnerability
  • 6538fde Update dependency katex to ^0.18.0 [SECURITY]
  • ba3022d Merge pull request #8398 from mermaid-js/pebr/12.1.0-tmp
  • Additional commits viewable in compare view

Updates react from 19.3.0 to 19.3.1

Release notes

Sourced from react's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates react-dom from 19.3.0 to 19.3.1

Release notes

Sourced from react-dom's releases.

19.3.1 (October 14th, 2026)

React Server Components

Commits

Updates swagger-ui-dist from 5.33.1 to 5.33.3

Release notes

Sourced from swagger-ui-dist's releases.

v5.33.3

5.33.3 (2026-10-15)

Bug Fixes

v5.33.2

5.33.2 (2026-10-12)

Bug Fixes

  • deps: bump dompurify from 3.4.13 to 3.4.16 (#11076) (3beee55)
  • json-schema-5: move early return after useCallback in models (#11082) (7f26236)
Commits
  • 38ca10e chore(release): cut the 5.33.3 release
  • f170383 fix(deps): bump swagger-client to v3.38.3 (#11096)
  • e89a91f chore(release): cut the 5.33.2 release
  • 7f26236 fix(json-schema-5): move early return after useCallback in models (#11082)
  • cfd955e chore(deps): bump postcss-selector-parser from 7.1.5 to 7.1.6 (#11083)
  • 553cf09 chore(deps-dev): bump joi from 17.13.7 to 17.13.8 (#11087)
  • d19e961 chore(deps): bump source-map-js from 1.2.1 to 1.2.2 (#11085)
  • 5672801 chore(deps): bump proxy-addr from 2.0.7 to 2.0.8 (#11086)
  • 2addfaf chore(deps): bump shell-quote from 1.10.0 to 1.12.0 (#11084)
  • 121c488 chore(deps): bump aquasecurity/trivy-action (#11079)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by cubic

Updates the browser-runtime group: mermaid, react, react-dom, and swagger-ui-dist.

  • mermaid 12.1.0 → 12.2.0 adds opt-in mindmap coloring by hierarchy depth and fixes swimlane, node sizing, and edge label rendering.
  • react and react-dom 19.3.0 → 19.3.1 improve the React Server Components transport protocol.
  • swagger-ui-dist 5.33.1 → 5.33.3 bumps swagger-client, dompurify, and other transitive dependencies, and fixes a hooks-order issue in json-schema model rendering.