Backports the following fixes from Mermaid v11.16.1.

• GHSA-c4c3-pg64-4m4v
  • fix: increase protections against prototype pollution
  • deprecate: Deprecate the mermaidAPI.setConfig() function
• GHSA-6x64-9x62-f2gx - fix: handle CSS sibling combinators in compileCSS
• GHSA-2v8p-3f2j-5mp7 - fix(xychart): support zero-width x-axis ranges

Due to a publish error, v10.9.7 was skipped.

Full Changelog: https://github.com/mermaid-js/mermaid/compare/v10.9.6...v10.9.8

• #8022 12d472c Thanks @aloisklink! - fix: handle CSS sibling combinators in compileCSS

• #8022 2cd6dcf Thanks @aloisklink! - fix: increase protections against prototype pollution

  User-controlled input already has protections against prototype pollution.

  Fixes: GHSA-c4c3-pg64-4m4v

• #8022 99af3fc Thanks @aloisklink! - fix(architecture): use Maps and Sets to store groups/services

  Services are now rendered in the order they are defined and more service IDs are now supported.

• #8022 2cd6dcf Thanks @aloisklink! - deprecate: Deprecate the mermaidAPI.setConfig() function

  Calling this function has no observable effect, as the next time a render() or parse() is called, the currentConfig is cleared.

• #8022 630aa7e Thanks @aloisklink! - fix(xychart): support zero-width x-axis ranges

• #8022 59b22fa Thanks @aloisklink! - fix(radar): limit number of ticks to 32

  Setting a ticks value higher than this would only show 32 ticks.

• #8022 12d472c Thanks @aloisklink! - fix: handle CSS sibling combinators in compileCSS

• #8022 2cd6dcf Thanks @aloisklink! - fix: increase protections against prototype pollution

  User-controlled input already has protections against prototype pollution.

  Fixes: GHSA-c4c3-pg64-4m4v

• #8022 99af3fc Thanks @aloisklink! - fix(architecture): use Maps and Sets to store groups/services

  Services are now rendered in the order they are defined and more service IDs are now supported.

• #8022 2cd6dcf Thanks @aloisklink! - deprecate: Deprecate the mermaidAPI.setConfig() function

  Calling this function has no observable effect, as the next time a render() or parse() is called, the currentConfig is cleared.

• #8022 630aa7e Thanks @aloisklink! - fix(xychart): support zero-width x-axis ranges

• #8022 59b22fa Thanks @aloisklink! - fix(radar): limit number of ticks to 32

  Setting a ticks value higher than this would only show 32 ticks.

Full Changelog: https://github.com/zumerlab/snapdom/compare/v2.23.1...v2.23.2

• docs: correction to dynamicParams migration: #96624
• docs: proxy event argument: #96435
• docs: remove experimental note from runtime prefetching: #96615
• Turbopack: don't strip async-module runtime from shared runtime chunks: #96599
• [turbopack] Add turbopack_ecmascript and turbopack_wasm's embeded FS to internal_assets_conditions: #96600
• Preserve per-segment prefetching after dynamic navigation: #96583
• Rename static generation stream option to waitForAllReady: #96564
• Remove obsolete static generation plumbing: #96563
• [turbopack] Drop dead writes to exports: #96381
• [turbopack] Ignore writes to exports after a module.exports = {} writes: #96380

Huge thanks to @icyJoseph, @lukesandberg, @sampoder, and @ztanner for helping!

• Updated @platejs/markdown.

Published @platejs/core@53.3.3.

• #5068 by @WilliamPeralta – Keep custom inline elements inside a table cell's paragraph when deserializing markdown. The cell deserializer recognised only inlineEquation as inline, so any other custom inline element was hoisted out of the paragraph and became its sibling. The cell serializer then separated those siblings with <br/>, and a second round trip turned that into a newline — silently destroying the element. The check now asks the editor whether the node is inline, which is the same answer the plugin configuration already holds.

• 279fdae by @github-actions[bot] – Updated slate, slate-dom, slate-react.

Published @platejs/test-utils@53.3.3.

• Updated @platejs/core, @platejs/slate.

• Updated @platejs/core, @platejs/slate, @platejs/utils.

Thanks to everyone who contributed to this release:

@WilliamPeralta

Full changelog: v53.3.2...v53.3.3

Rspack now supports cache.name and cache.storage.location, aligning with webpack's persistent cache semantics. cache.storage.directory is now the base directory, while the final cache location defaults to <directory>/<cache.name>. Default cache paths remain unchanged.

If you previously used storage.directory as the exact cache path, migrate it to storage.location. Existing cache data is not migrated automatically.

cache: {
  type: 'persistent',
  storage: {
    type: 'filesystem',
-   directory: '/custom/cache',
+   location: '/custom/cache',
  },
}

• feat(rstest): inject module origin for import.meta.rstest by @9aoy in https://github.com/web-infra-dev/rspack/pull/15006
• feat: align persistent cache storage options with webpack by @hardfist in https://github.com/web-infra-dev/rspack/pull/15049
• feat(hmr): emit css.c / css.r in the hot-update manifest for precise CSS updates by @stormslowly in https://github.com/web-infra-dev/rspack/pull/14682

• perf: avoid cloning Lightning CSS stylesheet AST by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14982
• perf: avoid cloning CSS module lists during ordering by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14984
• perf(copy): offload asset reads by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/15022
• perf: share source across linking diagnostics by @hardfist in https://github.com/web-infra-dev/rspack/pull/15048

• fix(binding): preserve entry dependency identity by @matthewdavis-oai in https://github.com/web-infra-dev/rspack/pull/14964
• fix(loader): preserve lightningcss license comments by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14980
• fix(esm): add missing CJS interop runtime requirement by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/14978
• fix(runtime): avoid dead require bootstrap by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/14991
• fix(runtime): preserve collision-free createRequire imports by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/14994
• fix: clean up compilation-scoped plugin caches by @matthewdavis-oai in https://github.com/web-infra-dev/rspack/pull/14999
• fix(rstest): hoist test API imports by source order by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15007
• fix(binding): release custom runtime module generators on close by @SyMind in https://github.com/web-infra-dev/rspack/pull/15008
• fix: preserve context exports in rspack runtime mode by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/15001
• fix(runtime): correct full-hash chunk filenames by @matthewdavis-oai in https://github.com/web-infra-dev/rspack/pull/14997
• fix(copy-plugin): use POSIX asset keys by @matthewdavis-oai in https://github.com/web-infra-dev/rspack/pull/15015
• fix(runtime): remove redundant runtime declarations by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/14993
• fix(worker): handle SharedWorker string name option by @elecmonkey in https://github.com/web-infra-dev/rspack/pull/15012
• fix: avoid runtime scope conflicts in module factories by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/15002
• fix: preserve direct exports bindings by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/15003
• fix(dll): serialize buildMeta.defaultObject as redirect-warn by @tusharsingh308 in https://github.com/web-infra-dev/rspack/pull/15016
• fix(json): match webpack source map behavior for generated modules by @matthewdavis-oai in https://github.com/web-infra-dev/rspack/pull/15014
• fix: keep property name when global is used in object shorthand by @lazerg in https://github.com/web-infra-dev/rspack/pull/15054
• fix: prevent compiler abort for exported rspackRequire by @LingyuCoder in https://github.com/web-infra-dev/rspack/pull/15050

• refactor(binding): replace compilation pointers with compilation ids by @SyMind in https://github.com/web-infra-dev/rspack/pull/14988

• docs: clarify optimization.nodeEnv defaults by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14976
• docs: invite @swwind to Rspack core team by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14977
• docs(binding): document JavaScript binding architecture by @SyMind in https://github.com/web-infra-dev/rspack/pull/14995
• docs: document unsupported webpack CLI options by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15017
• docs: improve webpack migration guidance by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15032
• docs: clarify webpack plugin migration by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15033
• docs(sources): add rspack_sources architecture guide by @SyMind in https://github.com/web-infra-dev/rspack/pull/15057

• chore(deps): update dependency @rslint/core to v0.7.2 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/14936
• chore(deps): update dependency toml to ^4.3.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/14942
• chore: remove obsolete pnpm configs by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14987
• chore: update shared Agent Skills by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14986
• chore: migrate Git hooks to Rstack CLI by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14989
• chore: migrate Rslint to Rstack CLI by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14990
• chore: migrate Rslib and Rsbuild to Rstack CLI by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14992
• chore: migrate Rstest and Rspress to Rstack CLI by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/14998
• chore: replace migration skill with eco-ci debugger by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15009
• chore(deps): update dependency @rspress/core to ^2.0.19 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15029
• chore(deps): update dependency @rstest/adapter-rspack to ^0.11.5 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15031
• chore(deps): update dependency @module-federation/runtime-tools to v2.8.1 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15027
• chore(deps): update dependency @ast-grep/napi to ^0.45.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15030
• chore(deps): update dependency @rspack/lite-tapable to v1.1.5 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15028
• chore(deps): update github-actions by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15026
• chore: modernize Renovate configuration by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15040
• chore(deps): update dependency memfs to v4.64.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15036
• chore(deps): update dependency source-map to ^0.8.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15037
• chore(deps): update dependency terser to v5.49.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15038
• chore(deps): update dependency ts-checker-rspack-plugin to ^1.6.0 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15039
• chore(renovate): group all npm patch updates by @chenjiahan in https://github.com/web-infra-dev/rspack/pull/15041
• chore(deps): update dependency less to v4.8.1 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15045
• chore(deps): update dependency markdown-to-jsx to ^9.10.1 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15046
• chore(deps): update dependency @rstest/core to ^0.11.5 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15044
• chore(deps): update dependency chalk to v6 by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15043
• chore(deps): update patch npm dependencies by @renovate[bot] in https://github.com/web-infra-dev/rspack/pull/15042
• chore(build): enable createRequire parser in Rslib builds by @Timeless0911 in https://github.com/web-infra-dev/rspack/pull/15058

• @tusharsingh308 made their first contribution in https://github.com/web-infra-dev/rspack/pull/15016
• @lazerg made their first contribution in https://github.com/web-infra-dev/rspack/pull/15054

Full Changelog: https://github.com/web-infra-dev/rspack/compare/v2.1.7...v2.1.8

• Restore visible focus after keyboard close in Safari and Firefox (#5093) by @lyzno1
• Type render callback props based on the rendered element (#5104) by @atomiks
• Reduce popup bundle size (#5233) by @atomiks
• Reduce store bundle size (#5250) by @atomiks
• Keep unpositioned popups at the viewport origin (#5299) by @flaviendelangle
• Correct layout and passive effect timing (#5337) by @atomiks
• Remove redundant lifecycle synchronization (#5341) by @atomiks
• Prevent stale cleanup from clearing registered part IDs (#5340) by @atomiks
• Complete popup unmounting after a canceled exit transition (#5401) by @atomiks
• Fix rendered trigger ID ownership (#5110) by @atomiks
• Prevent unwanted flip with capped scrollable content (#5120) by @atomiks
• Fix collisionPadding off-by-one on the biased side (#5143) by @atomiks
• Reduce shared popup bundle size (#5192) by @atomiks
• Mount popup subtrees synchronously when opening in React 17 (#5309) by @atomiks
• Fix auto-resize origin for left-anchored popups (#5370) by @sai6855
• Avoid redundant re-renders during lazy flipping (#5372) by @mdm317
• Strip implementation-only types from published .d.ts files (#5165) by @michaldudak
• Fix usePreviousValue equality comparison (#5264) by @lyzno1

• Remove the implicit dir attribute from <Accordion.Root> (#5117) by @chuganzy

• Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak

• Respect locale when filtering (#5195) by @atomiks
• Add input-press to change event details (#5356) by @chuganzy
• Add cancel-open to change event details (#5376) by @chuganzy
• Reset list scroll position on filter (#5231) by @atomiks
• Remove dead code and deduplicate handlers (#5194) by @atomiks
• Fix listbox separator semantics (#5399) by @sarthakmalik0810

• Show <Avatar.Fallback> immediately when delay={0} (#5147) by @chuganzy

• Fix keyboard click handling for custom elements (#4838) by @atomiks

• Remove redundant validation input ref (#5188) by @nami8824
• Stop internal input clicks from reaching ancestors (#5176) by @atomiks
• Reduce bundle size (#5223) by @atomiks

• Focus invalid checkbox (#5216) by @atomiks
• Align form values with native submission (#5218) by @atomiks
• Reduce bundle size (#5223) by @atomiks

• Add input-press to change event details (#5356) by @chuganzy
• Add cancel-open to change event details (#5376) by @chuganzy
• Stop filtering grouped items after limit (#5086) by @lyzno1
• Remove leaky value registry (#5198) by @atomiks
• Set initial highlight in inline combobox (#5230) by @atomiks
• Return highlight to selected item on query clear (#5232) by @atomiks
• Expose expanded state for inline comboboxes (#5332) by @sarthakmalik0810
• Keep portalled popup content open (#5334) by @obeattie
• Reset list scroll position on filter (#5231) by @atomiks
• Fix hovered item stealing highlight when the list scrolls in Safari (#5265) by @arikchakma
• Inherit the disabled state from <Combobox.Root> in <Combobox.Item> (#5365) by @chuganzy
• Widen trigger slip-out release tolerance (#5159) by @atomiks
• Remove dead code and deduplicate handlers (#5194) by @atomiks
• Fix listbox separator semantics (#5399) by @sarthakmalik0810

• Fix nested list reorder detection (#5156) by @jjenzz
• Always skip natively disabled items during list navigation (#5185) by @atomiks
• Fix scroll alignment for RTL direction in scrollIntoViewIfNeeded (#5234) by @sai6855
• Simplify keyboard bookkeeping (#5249) by @atomiks

• Fix touch outside-press dismissal without a backdrop (#5096) by @atomiks
• Prevent <Dialog.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak
• Fix scroll lock handoff with external overlays (#4665) by @atomiks
• Reduce bundle size (#5193) by @atomiks

• Prevent <Drawer.Root> from reopening after remounting with a reused handle (#5109) by @michaldudak
• Fix unreliable swipe-to-open gestures (#5105) by @atomiks
• Fix popup flashing fully open for a frame on swipe area re-grab (#5112) by @atomiks
• Deduplicate swipe math to reduce bundle size (#5181) by @atomiks
• Fix scroll handling when focus moves while the virtual keyboard is open (#5179) by @atomiks
• Fix cross-axis scroll blocked on iOS below the touchmove slop (#5257) by @atomiks
• Fix snap point jump when pinned pointer moves leave the drag offset unchanged (#5308) by @atomiks
• Fix Shadow DOM swipe gestures (#5360) by @atomiks

• Keep invalid state on disabled fields (#5116) by @atomiks
• Reduce bundle size (#5225) by @atomiks
• Fix data-dirty tracking for null-valued controls (#5290) by @sai6855

• Reduce bundle size (#5225) by @atomiks

• Reduce bundle size (#5225) by @atomiks
• Focus the first invalid field in document order (#5287) by @atomiks

• Ignore pinch-zoom shifting (#4485) by @atomiks
• Cancel stale submenu hover-open when Chrome drops mouseleave (#5153) by @atomiks
• Fix exit animation not running on uncheck of item (#5252) by @sai6855
• Fix duplicate onOpenChange calls when closing a submenu (#5178) by @atomiks
• Fix VoiceOver announcement when opening a submenu (#5342) by @atomiks
• Propagate disabled state to items (#5363) by @chuganzy
• Open submenus on Android TalkBack press (#5384) by @atomiks
• Prevent <Menu.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak
• Widen trigger slip-out release tolerance (#5159) by @atomiks

• Format clamped values (#5409) by @atomiks
• Reduce bundle size (#5224) by @atomiks

• Fix frozen menu when the open trigger unmounts (#5240) by @DreierF
• Ignore pinch-zoom shifting (#4485) by @atomiks

• Fix keyboard editing with multi-character format symbols (#5111) by @atomiks
• Reduce bundle size (#5220) by @atomiks

• Keep focus on the invalid field when autoSubmit is blocked (#5089) by @lyzno1

• Prevent <Popover.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak
• Reduce bundle size (#5193) by @atomiks

• Prevent <PreviewCard.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak

• Fix custom min/max semantics to match the indicator (#5095) by @atomiks
• Reduce bundle size (#5224) by @atomiks

• Remove unnecessary ARIA attributes from <Radio.Root> (#5213) by @sai6855
• Stop internal input clicks from reaching ancestors (#5176) by @atomiks
• Align form values with native submission (#5238) by @atomiks
• Reduce bundle size (#5223) by @atomiks

• Fix thumb-drag divide-by-zero and per-scroll re-render (#5099) by @atomiks
• Fix scrollbar visibility during touch scrolling on iOS (#5157) by @atomiks
• Add WebKit overscroll feedback to <ScrollArea.Thumb> (#5145) by @atomiks
• Reduce bundle size (#5217) by @atomiks
• Prevent scroll snapping while dragging the thumb (#5259) by @atomiks
• End thumb drag when the primary button is no longer held (#5374) by @atomiks

• Fix hovered item stealing highlight when the list scrolls in Safari (#5265) by @arikchakma
• Inherit the disabled state from <Select.Root> in <Select.Item> (#5365) by @chuganzy
• Widen trigger slip-out release tolerance (#5159) by @atomiks
• Do not force-mount the popup on programmatic value changes (#5119) by @atomiks
• Remove dead code and deduplicate handlers (#5194) by @atomiks
• Fix listbox separator semantics (#5399) by @sarthakmalik0810

• Fix assorted issues (#5097) by @atomiks
• Reduce bundle size (#5222) by @atomiks
• Exclude the prehydration script from client bundles (#5003) by @michaldudak

• Stop internal input clicks from reaching ancestors (#5176) by @atomiks
• Reduce bundle size (#5223) by @atomiks

• Position pre-hydration indicator inside streamed Suspense (#5171) by @brijeshb42
• Exclude the prehydration script from client bundles (#5003) by @michaldudak
• Reduce bundle size (#5221) by @atomiks

• Fix remaining toast timer calculation (#5261) by @sai6855
• Reduce bundle size (#5219) by @atomiks
• Render content passed through the render prop in <Toast.Title>, <Toast.Description>, and <Toast.Action> (#5210) by @m2na7
• Fix re-adding a closing toast (#5258) by @atomiks
• Fix swipe direction locking for two-axis swipes (#5295) by @sai6855
• Fix <Toast.Provider> prop effect ordering (#5338) by @atomiks

• Reduce bundle size (#5224) by @atomiks

• Reduce bundle size (#5221) by @atomiks

• Prevent <Tooltip.Root> from reopening after remounting with a reused handle (#5149) by @michaldudak

All contributors of this release in alphabetical order: @arikchakma, @atomiks, @bernardobelchior, @brijeshb42, @chuganzy, @DiegoAndai, @DreierF, @flaviendelangle, @jjenzz, @lyzno1, @m2na7, @mdm317, @michaldudak, @nami8824, @obeattie, @sai6855, @sarthakmalik0810

• feat: 客户端增加所见即所得编辑模式 @sunsonliu(#1835)(9931722)

• style: 优化工具栏样式；同步时间线toolbar @sunsonliu(#1834)(b773156)
• Updated dependencies [3dd4cb7, 03fe16e, d87f2e9, 6c4f049, 3e9105c, 4100bfd]:
  • cherry-markdown@0.11.9