Files
DocsGPT/frontend
Alex 05d9338983 chore(deps): mermaid 12
mermaid 12 needs no source change; mermaidSecurity.ts and its strict-mode
init-directive test pass unchanged.

Adds a lodash-es ^4.18.1 override. mermaid 12 depends on chevrotain ~11.1.2
(mermaid 11 resolved chevrotain 12, which has no lodash-es), and chevrotain
11 pulls lodash-es <= 4.17.23, carrying GHSA-r5fr-rjxr-66jc and
GHSA-f23m-r3pf-42rh, both high. 4.18.1 is the fixed line. Without the
override the frontend gains 5 high-severity advisories.

Verified rendering in Chromium rather than the unit suite, since happy-dom
has no SVG getBBox and cannot render any mermaid version. Flowchart,
sequence, pie, class, state, gantt, ER and mindmap all produce SVG on 12,
matching 11 to the byte except classDiagram (+17 bytes). A strict-mode
`click ... "javascript:..."` target is still stripped.

598 tests pass, build clean, 0 advisories.
2026-09-12 19:31:29 +01:00
..
2023-02-09 10:03:56 +05:30
2026-05-29 09:21:59 +01:00
2026-09-12 19:28:18 +01:00
2026-05-26 15:48:04 +01:00
2023-03-27 21:44:22 +01:00
2023-02-09 08:01:22 +05:30
2026-05-26 16:59:37 +01:00
2026-09-12 19:31:29 +01:00
2026-09-12 19:31:29 +01:00
2026-05-15 12:23:31 +01:00