build(deps): bump the production-dependencies group with 8 updates by dependabot[bot] · Pull Request #37 · ZenNotes/zennotesandroid

dependabot · 2026-08-28T17:16:03Z

Bumps the production-dependencies group with 8 updates:

Package	From	To
@capacitor/filesystem	`8.1.2`	`8.1.3`
@codemirror/commands	`6.10.4`	`6.11.0`
@codemirror/view	`6.43.8`	`6.43.9`
@xyflow/react	`12.11.3`	`12.11.4`
dompurify	`3.4.13`	`3.4.14`
jsxgraph	`1.13.1`	`1.13.2`
katex	`0.16.47`	`0.18.4`
mermaid	`11.16.1`	`11.17.2`

Updates @capacitor/filesystem from 8.1.2 to 8.1.3

Release notes

Sourced from @capacitor/filesystem's releases.

v8.1.3

8.1.3 (2026-08-19)

Bug Fixes

android: only apply kotlin-android plugin if not already applied (#83) (3de47a3)

This release is also available on:

npm package (@latest dist-tag)

v8.1.3-next.1

8.1.3-next.1 (2026-07-23)

This release is also available on:

npm package (@next dist-tag)

Changelog

Sourced from @capacitor/filesystem's changelog.

8.1.3 (2026-08-19)

Bug Fixes

android: only apply kotlin-android plugin if not already applied (#83) (3de47a3)

Commits

adc1899 chore(release): 8.1.3 [skip ci]
3de47a3 fix(android): only apply kotlin-android plugin if not already applied (#83)
73cde0d chore: force semantic release to release on chore
ecb604f chore(ci): Check every maven central version for android publish (#78)
6ef910a docs: minor contributing guide improvements (#77)
2fa6e16 chore(ci): use Xcode 26 (#76)
7ba8af9 chore(ci): fix npm version being installed (#75)
See full diff in compare view

Updates @codemirror/commands from 6.10.4 to 6.11.0

Commits

See full diff in compare view

Updates @codemirror/view from 6.43.8 to 6.43.9

Commits

See full diff in compare view

Updates @xyflow/react from 12.11.3 to 12.11.4

Release notes

Sourced from @xyflow/react's releases.

@xyflow/react@12.11.4

Patch Changes

#5974 8c42922 - Minimap still works after ReactFlow remounts

#5962 cbf40b9 - Show log if user hides attribution in development

#5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

#5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

Changelog

Sourced from @xyflow/react's changelog.

12.11.4

Patch Changes

#5974 8c42922 - Minimap still works after ReactFlow remounts

#5962 cbf40b9 - Show log if user hides attribution in development

#5976 3319ef4 - Fix the MiniMap zooming out to include the origin when every node is hidden.

#5955 965ca70 - Fix MiniMap calling useCallback conditionally for onNodeClick.

Commits

286816c chore(packages): bump
3319ef4 fix(react): keep minimap bounds at the viewport when all nodes are hidden
b7186f3 fix(react): minimap still works after reactflow remounts #5971
d8edc77 Merge pull request #5955 from Jian-Zhang08/fix/minimap-onnodeclick-conditiona...
59b1a60 Simplify node click handling in MiniMap component
25869f2 chore(system): add attr warning handler
b04e9d1 chore(system): rename utils isDomNodeVisible
31535ef chore(system): add isDomNodeVisible
bce7475 chore(proOptions): add comments
435123f Update index.tsx
Additional commits viewable in compare view

Updates dompurify from 3.4.13 to 3.4.14

Release notes

Sourced from dompurify's releases.

DOMPurify 3.4.14

Fixed an issue with possible bypasses when risky tags are allow-listed, thanks @AlirezaRouhbakhsh

Fixed a couple of edge cases with mixed document contexts, thanks @fishjojo1

Added the SVG pointer-events and vector-effect presentation attributes to the allow-list, thanks @Jaybhade

Conducted another refactoring run, removed dead branches and duplicated logic, flattened attribute validation

Updated the documentation in several spots, README, wiki, etc., thanks @Akokonunes

Updated several development dependencies and CI workflow actions

Commits

4e6fe24 release: 3.4.14 (#1587)
See full diff in compare view

Updates jsxgraph from 1.13.1 to 1.13.2

Release notes

Sourced from jsxgraph's releases.

Release of v1.13.2

JSXGraph v1.13.2 is a patch release that resolves several bugs, and - somewhat unusual for a patch release - comes with a few new features and API changes.

The API changes are:

Homogeneous Coordinates: The methods surface3d.F and surface3d.evalF now return homogeneous coordinates. These are arrays in the form [1, x, y, z], making them compatible with 3D transformations.

JXG.appBox Configuration: The JXG.appBox feature (introduced in v1.13.0) now expects cssStyle instead of style as the key name for JSXGraph board attributes.

New features

curve.getCoords(): A new method that returns an array of coordinates for a curve.

3D Enhancements:

The default style for 3D front planes has changed to a "frame style."

plane3d can now be triangulated.

Camera distance handling is now synchronized for both parallel and central projections.

Bug Fixes

2D Plotting Regression: Clipping of curve screen coordinates has been reactivated and improved.

Other Fixes: Various issues have been resolved, including the correct handling of media query listeners.

For a complete list of changes, please refer to the CHANGELOG.

Enjoy, Alfred

Changelog

Sourced from jsxgraph's changelog.

1.13.2

API changes:

surface3d.F and surface3d.evalF return homogeneous coords

appBox - jsxgraph: {cssStyle: ... }, rename attribute from style to cssStyle

New features

Curve: new method getCoords

Change defaults: display box3d front planes as frames only - if visible

Improvements

surface3d, plane3d: allow ranges to contain functions as input for tiling

surface3d, plane3d: Enable dynamic colormaps for

Refactor handling of camera distance r (in 3D), synchronize handling von attribute r of view3d for parallel and central projection

Enable triangulation of planes

API docs

Type.evaluate: recurse into arrays

board.setAttribute() defaultAxes

Bug fixes

Plotting while the HTML div has display:none

Fix regression: clipping of curve screen coords (in SVG)

Curves with transposed input

JXG.GeometryElement3D.setAttribute()

Fix media query listener cleanup

Commits

02b2fd4 Update cdnjs
4223035 Release of v1.13.2
74b9df2 CHANGELOG for upcoming v1.13.2
d09ada3 Fix regression: case view3d.r == 0
66af727 Remove old example in tiling.js
f225515 Merge branch 'main' into develop
6409140 Merge pull request #828 from HeyChengdu/codex/fix-media-query-listener-leak
2c8f802 Add comments in colormap part
87c4154 Enable triangulation of planes
e145fd9 Update examples in tiling.js
Additional commits viewable in compare view

Updates katex from 0.16.47 to 0.18.4

Release notes

Sourced from katex's releases.

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

environment: report invalid environment names as ParseError (#4256) (e507f75), closes #3760 #3760

v0.18.3

0.18.3 (2026-08-09)

Bug Fixes

allow braced arguments for delimsizing (#4255) (1c973ae)

v0.18.2

0.18.2 (2026-08-08)

Bug Fixes

prevent prototype pollution in settings (#4260) (0adf7e7)

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

v0.18.0

0.18.0 (2026-07-17)

Features

prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

v0.17.0

0.17.0 (2026-05-22)

Performance Improvements

... (truncated)

Changelog

Sourced from katex's changelog.

0.18.4 (2026-08-10)

Bug Fixes

environment: report invalid environment names as ParseError (#4256) (e507f75), closes #3760 #3760

0.18.3 (2026-08-09)

Bug Fixes

allow braced arguments for delimsizing (#4255) (1c973ae)

0.18.2 (2026-08-08)

Bug Fixes

prevent prototype pollution in settings (#4260) (0adf7e7)

0.18.1 (2026-07-19)

Bug Fixes

htmlData: allow escaped commas in \htmlData (#4236) (87a2b30), closes #4204 #4218

0.18.0 (2026-07-17)

Features

prefix css classes (#4229) (6f5c44f)

BREAKING CHANGES

users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.

0.17.0 (2026-05-22)

Performance Improvements

simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)

BREAKING CHANGES

... (truncated)

Commits

49dc3d9 chore(release): 0.18.4 [ci skip]
e507f75 fix(environment): report invalid environment names as ParseError (#4256)
f0f46a8 chore(release): 0.18.3 [ci skip]
1c973ae fix: allow braced arguments for delimsizing (#4255)
a11ce72 docs: update migration guide (#4248)
95322e1 docs: add Deno section (#4254)
dd88e46 chore(deps): update dependency js-yaml to v4.3.1 [security] (#4263)
93c362b chore(release): 0.18.2 [ci skip]
0adf7e7 fix: prevent prototype pollution in settings (#4260)
5a5bf20 chore(deps): update dependency postcss to v8.5.23 [security] (#4259)
Additional commits viewable in compare view

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates mermaid from 11.16.1 to 11.17.2

Release notes

Sourced from mermaid's releases.

mermaid@11.17.2

Patch Changes

#8125 178d7c7 Thanks @knsv-bot! - fix: restore the edgePaths class on the edge group in rendered SVG, and point the flowchart, block and user journey stylesheets at it

mermaid@11.17.1

Patch Changes

#8092 31ce60a Thanks @pbrolin47! - fix(c4): wrap element labels to c4.width again

C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

#8088 c66200b Thanks @ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

#8079 281cd7b Thanks @ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

#7842 3670b4e Thanks @filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

#7812 cdfc0ea Thanks @knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

#7785 c45cde9 Thanks @knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

#7828 8eb3afc Thanks @knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

#7803 74e44eb Thanks @knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

#7792 ea55b31 Thanks @RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

#7970 a2c0fb6 Thanks @filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

#7842 ae3e115 Thanks @filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

#7724 0fd7a9f Thanks @xdumaine! - feat(xyChart): add legends for named line and bar series

Patch Changes

#7847 215fe89 Thanks @filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

#7871 8d874c4 Thanks @knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

#8071 b3d1f63 Thanks @pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

#7870 71b8843 Thanks @knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

#7924 9cbef5d Thanks @nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

... (truncated)

Commits

dcb694d Version Packages (#8130)
178d7c7 fix: restore edgePaths class on the edge group (#8125)
569f46e Version Packages (#8114)
3054836 Version Packages
5b17e0a Merge pull request #8092 from mermaid-js/hotfix/11.17.1
655211a Reverted change of wrap-options
8a23480 Updated doc from feedback
412c80a Update doc and consistent handlig in c4 as for seq diags
b433a9a Updated changeset to describe specifik diagram affected
6bae15e Updated tests to Playwright API
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 8 updates: | Package | From | To | | --- | --- | --- | | [@capacitor/filesystem](https://github.com/ionic-team/capacitor-filesystem) | `8.1.2` | `8.1.3` | | [@codemirror/commands](https://github.com/codemirror/commands) | `6.10.4` | `6.11.0` | | [@codemirror/view](https://github.com/codemirror/view) | `6.43.8` | `6.43.9` | | [@xyflow/react](https://github.com/xyflow/xyflow/tree/HEAD/packages/react) | `12.11.3` | `12.11.4` | | [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` | | [jsxgraph](https://github.com/jsxgraph/jsxgraph) | `1.13.1` | `1.13.2` | | [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.4` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.16.1` | `11.17.2` | Updates `@capacitor/filesystem` from 8.1.2 to 8.1.3 - [Release notes](https://github.com/ionic-team/capacitor-filesystem/releases) - [Changelog](https://github.com/ionic-team/capacitor-filesystem/blob/main/CHANGELOG.md) - [Commits](ionic-team/capacitor-filesystem@v8.1.2...v8.1.3) Updates `@codemirror/commands` from 6.10.4 to 6.11.0 - [Changelog](https://github.com/codemirror/commands/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/commands/commits) Updates `@codemirror/view` from 6.43.8 to 6.43.9 - [Changelog](https://github.com/codemirror/view/blob/main/CHANGELOG.md) - [Commits](https://github.com/codemirror/view/commits) Updates `@xyflow/react` from 12.11.3 to 12.11.4 - [Release notes](https://github.com/xyflow/xyflow/releases) - [Changelog](https://github.com/xyflow/xyflow/blob/main/packages/react/CHANGELOG.md) - [Commits](https://github.com/xyflow/xyflow/commits/@xyflow/react@12.11.4/packages/react) Updates `dompurify` from 3.4.13 to 3.4.14 - [Release notes](https://github.com/cure53/DOMPurify/releases) - [Commits](cure53/DOMPurify@3.4.13...3.4.14) Updates `jsxgraph` from 1.13.1 to 1.13.2 - [Release notes](https://github.com/jsxgraph/jsxgraph/releases) - [Changelog](https://github.com/jsxgraph/jsxgraph/blob/main/CHANGELOG.md) - [Commits](jsxgraph/jsxgraph@v1.13.1...v1.13.2) Updates `katex` from 0.16.47 to 0.18.4 - [Release notes](https://github.com/KaTeX/KaTeX/releases) - [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md) - [Commits](KaTeX/KaTeX@v0.16.47...v0.18.4) Updates `mermaid` from 11.16.1 to 11.17.2 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.16.1...mermaid@11.17.2) --- updated-dependencies: - dependency-name: "@capacitor/filesystem" dependency-version: 8.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@codemirror/commands" dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: "@codemirror/view" dependency-version: 6.43.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: "@xyflow/react" dependency-version: 12.11.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: dompurify dependency-version: 3.4.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: jsxgraph dependency-version: 1.13.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: katex dependency-version: 0.18.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: mermaid dependency-version: 11.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

adibhanna · 2026-08-28T17:34:08Z

Closing: katex 0.16.15 → 0.18.4 leaves the ^0.16.15 range the pinned app-core declares (0.x caret = <0.17), so the shell would bundle a katex the core wasn't written against. The other seven bumps here are fine and within range — the group will come back without katex once the ignore rule lands.

dependabot · 2026-08-28T17:34:10Z

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 28, 2026

adibhanna mentioned this pull request Aug 28, 2026

chore(dependabot): keep katex inside app-core's ^0.16 range #38

Merged

adibhanna closed this Aug 28, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/production-dependencies-0242fc9c7a branch August 28, 2026 17:34

Navigation Menu

Uh oh!

build(deps): bump the production-dependencies group with 8 updates - #37

build(deps): bump the production-dependencies group with 8 updates#37
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-0242fc9c7a

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

adibhanna commented Aug 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 28, 2026

v8.1.3

8.1.3 (2026-08-19)

Bug Fixes

v8.1.3-next.1

8.1.3-next.1 (2026-07-23)

8.1.3 (2026-08-19)

Bug Fixes

@​xyflow/react@​12.11.4

Patch Changes

12.11.4

Patch Changes

DOMPurify 3.4.14

Release of v1.13.2

1.13.2

API changes:

New features

Improvements

Bug fixes

v0.18.4

0.18.4 (2026-08-10)

Bug Fixes

v0.18.3

0.18.3 (2026-08-09)

Bug Fixes

v0.18.2

0.18.2 (2026-08-08)

Bug Fixes

v0.18.1

0.18.1 (2026-07-19)

Bug Fixes

v0.18.0

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

v0.17.0

0.17.0 (2026-05-22)

Performance Improvements

0.18.4 (2026-08-10)

Bug Fixes

0.18.3 (2026-08-09)

Bug Fixes

0.18.2 (2026-08-08)

Bug Fixes

0.18.1 (2026-07-19)

Bug Fixes

0.18.0 (2026-07-17)

Features

BREAKING CHANGES

0.17.0 (2026-05-22)

Performance Improvements

BREAKING CHANGES

mermaid@11.17.2

Patch Changes

mermaid@11.17.1

Patch Changes

mermaid@11.17.0

Minor Changes

Patch Changes

Uh oh!

adibhanna commented Aug 28, 2026

Uh oh!

dependabot Bot commented on behalf of github Aug 28, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@xyflow/react@12`.11.4