This release backports the update of the dependency dagre-d3-es to 7.0.13 for CVE-2025-57347 from v11.12.1.

We've also updated the v10.x branch to support newer versions of DOMPurify, cherry-picked from https://github.com/mermaid-js/mermaid/commit/fe3cffbb673a25b81989aacb06e5d0eda35326db, avoiding CVE-2025-26791.

Full Changelog: https://github.com/mermaid-js/mermaid/compare/v10.9.4...v10.9.5

• #7107 cbf8946 Thanks @shubhamparikh2704! - fix: Updated the dependency dagre-d3-es to 7.0.13 to fix GHSA-cc8p-78qf-8p7q

• #7107 cbf8946 Thanks @shubhamparikh2704! - fix: Updated the dependency dagre-d3-es to 7.0.13 to fix GHSA-cc8p-78qf-8p7q

• #7051 63df702 Thanks @shubhamparikh2704! - Add validation for negative values in pie charts:

  Prevents crashes during parsing by validating values post-parsing.

  Provides clearer, user-friendly error messages for invalid negative inputs.

• #6921 764b315 Thanks @quilicicf! - feat: Add IDs in architecture diagrams

• #6950 a957908 Thanks @shubhamparikh2704! - chore: Fix mindmap rendering in docs and apply tidytree layout

• #6826 1d36810 Thanks @darshanr0107! - fix: Ensure edge label color is applied when using classDef with edge IDs

• #6945 d318f1a Thanks @darshanr0107! - fix: Resolve gantt chart crash due to invalid array length

• #6918 cfe9238 Thanks @shubhamparikh2704! - chore: revert marked dependency from ^15.0.7 to ^16.0.0

  • Reverted marked package version to ^16.0.0 for better compatibility
  • This is a dependency update that maintains API compatibility
  • All tests pass with the updated version

• #6921 764b315 Thanks @quilicicf! - feat: Add IDs in architecture diagrams

• #6950 a957908 Thanks @shubhamparikh2704! - chore: Fix mindmap rendering in docs and apply tidytree layout

• #6826 1d36810 Thanks @darshanr0107! - fix: Ensure edge label color is applied when using classDef with edge IDs

• #6945 d318f1a Thanks @darshanr0107! - fix: Resolve gantt chart crash due to invalid array length

• #6918 cfe9238 Thanks @shubhamparikh2704! - chore: revert marked dependency from ^15.0.7 to ^16.0.0

  • Reverted marked package version to ^16.0.0 for better compatibility
  • This is a dependency update that maintains API compatibility
  • All tests pass with the updated version

• #6704 012530e Thanks @omkarht! - feat: Added support for new participant types (actor, boundary, control, entity, database, collections, queue) in sequenceDiagram.

• #6802 c8e5027 Thanks @darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

• #6905 33bc4a0 Thanks @darshanr0107! - fix: Render newlines as spaces in class diagrams

• #6886 e0b45c2 Thanks @darshanr0107! - fix: Handle arrows correctly when auto number is enabled

• #6802 c8e5027 Thanks @darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

• Updated dependencies [33bc4a0, e0b45c2, 012530e, c8e5027]:
  • mermaid@11.11.0

• #6704 012530e Thanks @omkarht! - feat: Added support for new participant types (actor, boundary, control, entity, database, collections, queue) in sequenceDiagram.

• #6802 c8e5027 Thanks @darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

• #6905 33bc4a0 Thanks @darshanr0107! - fix: Render newlines as spaces in class diagrams

• #6886 e0b45c2 Thanks @darshanr0107! - fix: Handle arrows correctly when auto number is enabled

• #6802 c8e5027 Thanks @darshanr0107! - feat: Update mindmap rendering to support multiple layouts, improved edge intersections, and new shapes

• Updated dependencies [33bc4a0, e0b45c2, 012530e, c8e5027]:
  • mermaid@11.11.0