Bump mermaid from 10.9.0 to 10.9.6

[dependabot]

Bumps mermaid from 10.9.0 to 10.9.6.

Commits

• dd351a7 chore: bump mermaid version to v10.9.6
• e67a79b build: upgrade repo to use Node v20.17.0
• e8c7043 fix: loosen uuid dependency range to allow v14
• 1e8583d ci(publish): support NPM trusted publishing
• 1173597 chore(deps): update dependencies using pnpm audit
• c2094a4 Update docs
• 46a487d test: correct createUserStyles call
• 47437f3 Merge commit from fork
• 7470a90 fix: skip namespacing CSSKeyframeRule
• b37366e fix: disallow some CSS at-rules in custom CSS
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for mermaid since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Summary by cubic

Upgrade mermaid from 10.9.0 to 10.9.6 to pick up security hardening and rendering fixes. No app code changes required.

• Dependencies
  • mermaid → 10.9.6
  • dagre-d3-es → 7.0.13 (with d3 ^7.9.0)
  • d3 → 7.9.0
  • dompurify → 3.4.2
  • uuid → 14.0.0 (allowed by widened range in mermaid)

^{Written for commit 8ae5889. Summary will update on new commits.}

[netlify]

✅ Deploy Preview for alloradocs ready!

Name	Link
🔨 Latest commit	8ae5889
🔍 Latest deploy log	https://app.netlify.com/projects/alloradocs/deploys/6a02351f21d4230008cb65a1
😎 Deploy Preview	https://deploy-preview-160--alloradocs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[cubic-dev-ai]

No issues found across 1 file

Architecture diagram

sequenceDiagram
    participant CDN as CDN / Bundle
    participant Browser as Browser (Client)
    participant Mermaid as Mermaid Runtime v10.9.6
    participant DOM as DOM API
    participant DOMPurify as DOMPurify 3.4.2
    participant Dagre as dagre-d3-es (layout engine)
    participant D3 as d3.js 7.9.0
    participant UUID as uuid v14

    Note over Browser,DOM: Diagram Rendering Flow

    Browser->>CDN: Load mermaid bundle (v10.9.6)
    CDN-->>Browser: Script loaded

    Browser->>Mermaid: mermaid.initialize(config)
    Mermaid->>Mermaid: Parse config options
    Mermaid->>Mermaid: Set theme & security level

    Browser->>Mermaid: mermaid.run({ nodes: [element] })
    Mermaid->>DOM: querySelector for diagram elements
    DOM-->>Mermaid: DOM node(s)

    loop For each diagram element
        Mermaid->>Mermaid: Extract raw diagram text
        Mermaid->>Mermaid: Parse & validate diagram syntax (new parser)
        alt Valid syntax
            Mermaid->>Mermaid: Create diagram model
            Mermaid->>Mermaid: Process custom CSS (security hardening)
            Note over Mermaid: NEW: disallow certain CSS at-rules in custom CSS
            Mermaid->>Dagre: Layout nodes/edges
            Dagre->>D3: Request rendering coordinates
            D3-->>Dagre: Layout positions
            Dagre-->>Mermaid: Positioned graph

            alt Keyframe handling
                Mermaid->>Mermaid: Identify CSSKeyframeRule
                Note over Mermaid: FIX: skip namespacing of CSSKeyframeRule
            end

            Mermaid->>Mermaid: Generate SVG markup
            Mermaid->>DOMPurify: sanitize SVG + any custom CSS
            DOMPurify-->>Mermaid: Clean SVG string
            Mermaid->>DOM: Insert sanitized SVG into document
            DOM-->>Mermaid: SVG element rendered

            Mermaid->>UUID: Generate unique IDs for diagram elements
            UUID-->>Mermaid: v14 UUIDs
            Note over Mermaid: CHANGE: wider uuid range allowing v14

        else Parse error
            Mermaid->>Mermaid: Report error to console
            Mermaid->>DOM: Render error message in placeholder
            Mermaid-->>Browser: Error callback
        end
    end

    Mermaid-->>Browser: Render complete callback

Loading