Release Notes

-Fix for vulnerability with links from actors in sequence diagrams

• Bump @babel/core from 7.16.0 to 7.16.5 (#2575) @dependabot
• Bump @babel/eslint-parser from 7.16.3 to 7.16.5 (#2579) @dependabot
• Bump @babel/preset-env from 7.16.4 to 7.16.5 (#2576) @dependabot
• Bump @babel/register from 7.16.0 to 7.16.5 (#2569) @dependabot
• Bump babel-jest from 27.4.4 to 27.4.5 (#2571) @dependabot
• Bump concurrently from 6.4.0 to 6.5.1 (#2570) @dependabot
• Bump eslint from 8.4.1 to 8.5.0 (#2572) @dependabot
• Bump eslint-plugin-jsdoc from 37.2.0 to 37.3.0 (#2573) @dependabot
• Bump jest from 27.4.4 to 27.4.5 (#2578) @dependabot
• Bump lint-staged from 12.1.2 to 12.1.3 (#2577) @dependabot
• Bump terser-webpack-plugin from 5.2.5 to 5.3.0 (#2574) @dependabot

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

Fixes

• 2560 balancing theme css (#2562) @knsv
• feat(flowchart): Allow default in the node ID (#2513) @Yash-Singh1

Documentation

• update jupyter integration tutorial (#2561) @connor4312

Repo cleanup activities

• Curly210102 organize/build (#2551) @mmorel-35
• ci commitlint : setup commitlint (#2529) @mmorel-35
• clean-up: remove useless files (#2532) @mmorel-35
• create update browserlist workflow (#2563) @mmorel-35
• fix: husky pre-commit (#2545) @sidharthv96
• fix: lint-staged and merge eslint-config-html (#2550) @mmorel-35
• lint html : enable eslint-plugin-html (#2531) @mmorel-35
• lint markdown : enable eslint-plugin-markdown (#2530) @mmorel-35
• move jison folder into src folder (#2528) @mmorel-35

Dependency upgrades

• Bump @percy/cli from 1.0.0-beta.70 to 1.0.0-beta.71 (#2536) @dependabot
• Bump babel-jest from 27.3.1 to 27.4.2 (#2535) @dependabot
• Bump babel-jest from 27.4.2 to 27.4.4 (#2558) @dependabot
• Bump cypress from 9.0.0 to 9.1.1 (#2539) @dependabot
• Bump dompurify from 2.3.3 to 2.3.4 (#2557) @dependabot
• Bump eslint from 8.3.0 to 8.4.1 (#2544) @dependabot
• Bump eslint-plugin-jsdoc from 37.0.3 to 37.1.0 (#2540) @dependabot
• Bump eslint-plugin-jsdoc from 37.1.0 to 37.2.0 (#2556) @dependabot
• Bump jest from 27.3.1 to 27.4.3 (#2537) @dependabot
• Bump jest from 27.4.3 to 27.4.4 (#2555) @dependabot
• Bump prettier from 2.5.0 to 2.5.1 (#2538) @dependabot
• Bump stylis from 4.0.12 to 4.0.13 (#2553) @dependabot
• Bump webpack from 5.64.2 to 5.64.4 (#2517) @dependabot
• Bump webpack from 5.64.4 to 5.65.0 (#2554) @dependabot

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

Changes

• Fix: async highlight and escape html in docs (#2512) @Yash-Singh1
• Feature/1893 data flow diagrams (#2389) @maiermic
• Changed logic to render states with spaces in names (#2521) @pbendersky
• Fix for a xss vulnerability (#2542) @knsv

Documentation changes

• Change "Help wanted!" to "Good first issue!" shield (#2533) @spydon

Dependency upgrades

• Bump @babel/eslint-parser from 7.16.0 to 7.16.3 (#2488) @dependabot
• Bump @babel/preset-env from 7.16.0 to 7.16.4 (#2504) @dependabot
• Bump concurrently from 6.3.0 to 6.4.0 (#2490) @dependabot
• Bump cypress from 8.7.0 to 9.0.0 (#2486) @dependabot
• Bump eslint from 8.2.0 to 8.3.0 (#2518) @dependabot
• Bump eslint from 8.2.0 to 8.3.0 (#2506) @dependabot
• Bump eslint-plugin-jest from 25.2.4 to 25.3.0 (#2519) @dependabot
• Bump prettier from 2.4.1 to 2.5.0 (#2520) @dependabot
• Bump webpack from 5.62.1 to 5.64.1 (#2498) @dependabot
• Bump webpack from 5.64.1 to 5.64.2 (#2505) @dependabot
• Bump webpack-dev-server from 4.4.0 to 4.5.0 (#2489) @dependabot
• Bump webpack-dev-server from 4.5.0 to 4.6.0 (#2515) @dependabot

🧰 Maintenance

• Enable eslint-plugin-jest, eslint-plugin-cypress and wider scan (#2500) @mmorel-35
• Fixes rendering of state names with spaces (#2501) @pbendersky
• Pr labeler config validator (#2502) @Yash-Singh1
• enable eslint fix with prettier-plugin-jsdoc and eslint-plugin-jsdoc (#2471) @mmorel-35
• setup lint-staged and husky (#2522) @mmorel-35
• Don't lock issues on close (#2503) @Yash-Singh1

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

Documentation changes

• Add GNU Emacs to integrations documentation (#2448) @efim
• Add chrome extension to integrations.md (#2478) @zephyraft
• Add jsdoc (#2464) @Yash-Singh1
• Add missing code listing in sequence diagram docs (#2470) @kahgoh
• Corrected typos in documentation (#2431) @alwinw
• Remove references to non-existent Markdown file (#2476) @bartek
• Update entityRelationshipDiagram.md (#2420) @Zer0n0mask
• Update gantt.md (#2468) @jaybuidl
• Update gantt.md with milestones info (#2419) @Zer0n0mask
• Use monaco-mermaid for syntax highlighting and many syntax highlighting improvements (#2449) @Yash-Singh1
• typo (#2418) @tshepang

Dependency updates

• chore(*) : define date and hour for dependencies updates (#2440) @mmorel-35
• Bump @babel/core from 7.15.8 to 7.16.0 (#2453) @dependabot
• Bump @babel/eslint-parser from 7.15.8 to 7.16.0 (#2454) @dependabot
• Bump @babel/preset-env from 7.15.8 to 7.16.0 (#2451) @dependabot
• Bump @babel/register from 7.15.3 to 7.16.0 (#2455) @dependabot
• Bump @percy/cli from 1.0.0-beta.68 to 1.0.0-beta.69 (#2416) @dependabot
• Bump @percy/cli from 1.0.0-beta.69 to 1.0.0-beta.70 (#2435) @dependabot
• Bump babel-jest from 27.2.5 to 27.3.0 (#2414) @dependabot
• Bump babel-jest from 27.3.0 to 27.3.1 (#2437) @dependabot
• Bump babel-loader from 8.2.2 to 8.2.3 (#2434) @dependabot
• Bump cypress from 8.6.0 to 8.7.0 (#2445) @dependabot
• Bump eslint from 8.0.0 to 8.0.1 (#2415) @dependabot
• Bump eslint from 8.0.1 to 8.1.0 (#2438) @dependabot
• Bump eslint from 8.1.0 to 8.2.0 (#2466) @dependabot
• Bump husky from 7.0.2 to 7.0.4 (#2439) @dependabot
• Bump jest from 27.2.5 to 27.3.0 (#2421) @dependabot
• Bump jest from 27.3.0 to 27.3.1 (#2436) @dependabot
• Bump terser-webpack-plugin from 5.2.4 to 5.2.5 (#2491) @dependabot
• Bump webpack from 5.58.1 to 5.58.2 (#2413) @dependabot
• Bump webpack from 5.58.2 to 5.60.0 (#2433) @dependabot
• Bump webpack from 5.60.0 to 5.61.0 (#2452) @dependabot
• Bump webpack from 5.61.0 to 5.62.1 (#2465) @dependabot
• Bump webpack-cli from 4.9.0 to 4.9.1 (#2417) @dependabot
• Bump webpack-dev-server from 4.3.1 to 4.4.0 (#2446) @dependabot

🚀 Features

• #2425 Unicode handling for HTML labels (#2427) @ashishjain0512
• feat: added includes; added excludes date background (#2423) @qdechochen
• removed duplicate 'Browser Extensions' header (#2482) @The-Alchemist
• #2496 Security fix (#2497) @knsv

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

🚀 Features & Fixes

• Initial implementation for Issue#2249. (#2276) @eajenkins
• 2070: Update ER Diagram to have keys and comments. (#2237) @RonaldZielaznicki
• 2315 adding actor shape (#2318) @knsv
• Add a milestone to docs (#2340) @lgasp
• Emoji front (#2282) @new-pac
• Feature: field static classifier (#2269) @Xstoudi
• Fix live editor link (#2304) @Swaagie
• Optimize Images (#2274) @Yash-Singh1
• configureSvgSize should make height 100% when useMaxWidth is true. (#2312) @cm-wada-yusuke
• Comment console.log in sanitizeText (#2375) @OlegAxenow
• group jison loader and transformer (#2369) @mmorel-35
• Add esm build. Fixes #2371 (#2372) @sidharthv96

Documentation updates

• docs: add Chinese README (#2373) @lexmin0412
• docs: remove duplicate content (#2387) @lexmin0412
• chore(ci) : fix pr-labeler failure (#2299) @mmorel-35
• chore(ci): fix andymckay/labeler configuration (#2300) @mmorel-35
• Document curve interpolation (#2275) @Yash-Singh1
• Update README.md (#2359) @anugs
• Update n00b-gettingStarted.md (#2360) @anugs
• Document two-way relations and fix relationship docs for class diagrams (#2376) @Yash-Singh1

Module Version Upgrade

• Bump js-base64 from 3.7.1 to 3.7.2 (#2349) @dependabot
• Bump terser-webpack-plugin from 4.2.3 to 5.2.4 (#2364) @dependabot
• Bump webpack from 4.46.0 to 5.53.0 (#2324) @dependabot
• Bump webpack from 5.53.0 to 5.55.1 (#2366) @dependabot
• Bump webpack from 5.55.1 to 5.58.0 (#2386) @dependabot
• Bump webpack from 5.58.0 to 5.58.1 (#2399) @dependabot
• Bump webpack-cli from 4.8.0 to 4.9.0 (#2397) @dependabot
• Bump webpack-dev-server from 4.2.1 to 4.3.0 (#2351) @dependabot
• Bump webpack-dev-server from 4.3.0 to 4.3.1 (#2380) @dependabot
• Bump @babel/core from 7.14.8 to 7.15.5 (#2295) @dependabot
• Bump @babel/eslint-parser from 7.15.0 to 7.15.7 (#2338) @dependabot
• Bump @babel/preset-env from 7.15.0 to 7.15.6 (#2332) @dependabot
• Bump @percy/cli from 1.0.0-beta.65 to 1.0.0-beta.68 (#2334) @dependabot
• Bump axios from 0.21.1 to 0.21.4 (#2328) @dependabot
• Bump babel-jest from 27.0.6 to 27.2.1 (#2337) @dependabot
• Bump cypress from 8.1.0 to 8.4.1 (#2325) @dependabot
• Bump dompurify from 2.3.1 to 2.3.3 (#2336) @dependabot
• Bump eslint-plugin-prettier from 3.4.0 to 4.0.0 (#2339) @dependabot
• Bump husky from 7.0.1 to 7.0.2 (#2331) @dependabot
• Bump jest from 27.0.6 to 27.2.1 (#2329) @dependabot
• Bump js-base64 from 3.6.1 to 3.7.1 (#2333) @dependabot
• Bump prettier from 2.3.2 to 2.4.1 (#2330) @dependabot
• Bump start-server-and-test from 1.13.1 to 1.14.0 (#2335) @dependabot
• Bump tar from 6.1.0 to 6.1.11 (#2326) @dependabot
• Bump tmpl from 1.0.4 to 1.0.5 (#2327) @dependabot
• Bump webpack-dev-server from 3.11.2 to 4.2.1 (#2323) @dependabot

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Fix for Class diagrams (#2292) @ashishjain0512

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

🚀 Features

• 2070: Update ER Diagram to have keys and comments. (#2237) @RonaldZielaznicki
• 2315 adding actor shape (#2318) @knsv
• Add a milestone to docs (#2340) @lgasp
• Bump @babel/core from 7.14.8 to 7.15.5 (#2295) @dependabot
• Bump @babel/eslint-parser from 7.15.0 to 7.15.7 (#2338) @dependabot
• Bump @babel/preset-env from 7.15.0 to 7.15.6 (#2332) @dependabot
• Bump @percy/cli from 1.0.0-beta.65 to 1.0.0-beta.68 (#2334) @dependabot
• Bump axios from 0.21.1 to 0.21.4 (#2328) @dependabot
• Bump babel-jest from 27.0.6 to 27.2.1 (#2337) @dependabot
• Bump cypress from 8.1.0 to 8.4.1 (#2325) @dependabot
• Bump dompurify from 2.3.1 to 2.3.3 (#2336) @dependabot
• Bump eslint-plugin-prettier from 3.4.0 to 4.0.0 (#2339) @dependabot
• Bump husky from 7.0.1 to 7.0.2 (#2331) @dependabot
• Bump jest from 27.0.6 to 27.2.1 (#2329) @dependabot
• Bump js-base64 from 3.6.1 to 3.7.1 (#2333) @dependabot
• Bump prettier from 2.3.2 to 2.4.1 (#2330) @dependabot
• Bump start-server-and-test from 1.13.1 to 1.14.0 (#2335) @dependabot
• Bump tar from 6.1.0 to 6.1.11 (#2326) @dependabot
• Bump tmpl from 1.0.4 to 1.0.5 (#2327) @dependabot
• Bump webpack-dev-server from 3.11.2 to 4.2.1 (#2323) @dependabot
• Doc change: Added a full integration with mermaid for Dokuwiki (#2357) @gerardnico

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

🚀 Features

• Fixes for a vulnerability in state diagrams that can be used for XSS attacks.

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

Downgrade of d3 for build and size issues as the latest version of d3 causes mermaid to grow 90k (zipped)

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

🚀 Features

• Switch default renderer for class diagrams to the next generation renderer (#2257) @knsv
• #2270 Adding support for direction statements in class diagrams. (#2271) @knsv
• #2253 class diagram v2 fixes (#2255) @ashishjain0512

Other Fixes

• #2272 Switching the renderer in the docs for flowchart (#2273) @knsv
• #2196 Fix e2e test (#2224) @mmorel-35
• Fixed Unequal Arrow Bug (#2246) @reetghosh1
• Move @percy/migrate to devDependencies (#2260) @72636c
• Add Codedoc plugin (#2225) @danielsitnik
• Use right tag for andymckay/labeler (#2254) @mmorel-35
• Add nano to integrations (#2241) @Yash-Singh1
• Fix to table in documentation (#2266) @jmelfi
• Markdown Diagrams Extension for Chrome Webstore (#2259) @Clint-Chester

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Better native sanitazion and applikation of dompurify arter native sanitazion @knsv

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Prevention of prototype pollution using whitelist mechanics for keywords

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Security fix adding better protection against prototype pollution @knsv

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Combining Mermaids native sanitation with DOMPurify (#2210) @knsv

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

• Using dompurify to sanitize HTML (#2171) @knsv
• Remove entity-decode dependency (#2175) @sidharthv96
• Fix broken internal links in README (#2145) @carbeer
• Update Tutorials for LiveEditor V2 (#2178) @sidharthv96
• 2177 dependency updates (#2187) @knsv
• docs(README): Point to live editor (#2184) @anishkny
• Bump actions/setup-node from 1 to 2.2.0 (#2164) @dependabot

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

🚀 Features

• Switching default renderer for state diagrams to the new and improved renderer also used for stateDiagram-v2 (#2151) @knsv
• Improved theming functionality with new diagram specific variables for user journey diagram (#2133) @ashishjain0512
• Handling of javascript urls and blocking onerror when using security setting antiscript (#2123) @knsv
• Removed some non-production dependencies from the list of production dependencies (#2109) @fabiospampinato
• Assign proper namespaces to foreignObject children (#2119) @lishid

Documentation updates

• [docs] Update default log level value with correct datatype (#2083) @hydrosquall
• Update flowchart.md (#2141) @bish0polis
• fix typo (#2125) @TribalNightOwl

🎉 Thanks to all contributors helping with this release! 🎉

8.10.2

Features

• #2072 Making the subgraphs and composite states grow with the title if the title is wider than the content. (#2078) @knsv
• #2074 Fix for issue #2074 , updated version to 8.10.1 (#2076) @mahimas28
• #2050 Making it possible to set the rendering direction in subgraphs (#2082) @knsv
• #2088 Making it possible to theme forks in state diagrams (#2089) @knsv
• #2111 More robust handling of the htmlLabels configuration closing a security issue (#2115) @knsv

Documentation updates

• Document <> in the state diagram page (#2069) @jmg-duarte
• fixed typo in Setup.md (#2113) @cm-wada-yusuke
• Changes in sentence structuring for better readability (#2041) @beriakomal
• add Podlite editor (#2068) @zag

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes 8.10.1

New features

• Possibility added to change direction for the rendering in composite states in state diagrams (#2058) @knsv
• #2032 Adding new statement to add choice shape in state diagrams (#2034) @knsv
• #2029 option to configure renderer which version of the render to use for flowcharts, class diagrams and state diagrams (#2031) @knsv
• #1648, #1656 Making Pie Chart more configurable (#2051) @ashishjain0512
• #2043 Pie Chart to support Themes and configurable slice/section color
• More theming options for state diagrams (#2048) @knsv

Bug fixes

• Fixes for links to and from subgraphs and labels on multiple edges from the same node to the same destination (#2025) @knsv
• #2055 Allowing multiple ids for one state in state diagrams (#2056) @knsv
• #2045 Diagram specific theming options not affecting state diagrams v2
• #2035 State diagrams - composite states not growing with title (#2036) @knsv
• #2026 Fix for adding descriptions to states when using state diagrams v2 (#2030) @knsv

Other impromenets

• #2017, #2038 Standardization of requirement diagrams (#2018) @knsv, @ashishjain0512
• Add code sample in Issue template (#2020) @sidharthv96
• Update sequenceDiagram.md (#2027) @dominikmeyersap

🎉 Thanks to all contributors helping with this release! 🎉

Release Notes

Features

• Updated selectors in order to change the text color for flowcharts vis classDef statements (#1956) @knsv
• Feature/1802 notes remain bright (#1937) @Rutorai
• Gantt: add top xaxis (#1954) @nacc
• Journey diagrams handling of right margin (#1967) @knsv
• fix: re-write id generator (#1982) @ahmadnassri

Updated dependencies

• Update actions/checkout requirement to v2.3.4 (#2001) @dependabot
• Bump ssri from 6.0.1 to 6.0.2 (#1992) @dependabot
• Bump actions/cache from v1 to v2.1.5 (#2000) @dependabot
• Bump actions/upload-artifact from v1 to v2.2.3 (#2002) @dependabot
• Bump Dunning-Kruger/lock-issues from v1 to v1.1 (#2003) @dependabot
• Bump eslint-plugin-prettier from 3.1.2 to 3.4.0 (#2005) @dependabot
• Bump andymckay/labeler from 1.0 to 1.0.2 (#2004) @dependabot
• Bump coveralls from 3.0.9 to 3.1.0 (#2006) @dependabot

Documentation changes

• Typo, unwanted period (#1948) @bglnelissen
• Update development.md (#1950) @doble-eme
• Fix formatting that annoyed me (#1964) @beaudry
• Update flowchart.md (#1965) @bby-bishopclark
• Dependabot configuration (#1979) @mmorel-35
• Update development.md (#1980) @laDanz
• Add joplin to integrations (#1991) @SilvM
• dateFormat must not have ':' (#1993) @aniston
• Add Tuleap in the integration list (#1988) @vaceletm
• Update flowchart.md (#1999) @bish0polis
• docs: update setup config (#1997) @Mister-Hope

🎉 Thanks to all contributors helping with this release! 🎉

Release notes

• Fix for XSS vulnerability and prototype pollution (#1940)
  ​