From 5b30a6366c1d9618362e679eac42d952a7b5f5dc Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 08:38:57 +0000 Subject: [PATCH 1/2] chore: upgrade mermaid to ^11.16.1 to address CVE-2026-50159, CVE-2026-71436, CVE-2026-71437, CVE-2026-71438, CVE-2026-71439 Co-Authored-By: Claude Opus 5 (1M context) --- yarn.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/yarn.lock b/yarn.lock index 8c17cdd19..2a990e5d1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -17722,8 +17722,8 @@ __metadata: linkType: hard "mermaid@npm:^11.16.0": - version: 11.16.0 - resolution: "mermaid@npm:11.16.0" + version: 11.16.1 + resolution: "mermaid@npm:11.16.1" dependencies: "@braintree/sanitize-url": "npm:^7.1.2" "@iconify/utils": "npm:^3.0.2" @@ -17746,7 +17746,7 @@ __metadata: stylis: "npm:^4.3.6" ts-dedent: "npm:^2.2.0" uuid: "npm:^11.1.0 || ^12 || ^13 || ^14.0.0" - checksum: 10c0/a14f9bc9db7f1dea65b0d6c0b920236d12ad2812f2a1b11c8b39b3dfb3c22bfce39c77f6a69493203b85880d8008d345c539efe7ae6a31d3dad512833ccfb517 + checksum: 10c0/a905627d5ad372914bf7c67cb9e491d50f248d3a8458e4ec920033f5ce7387bf419423909ed71d88f54a035ec42987746d64a46055bd2b2a4dc1bc4ceed38c44 languageName: node linkType: hard From edb0927ca72753393bb71a6555ae1eb63dcb5df7 Mon Sep 17 00:00:00 2001 From: "claude[bot]" <41898282+claude[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 08:39:21 +0000 Subject: [PATCH 2/2] chore: add CHANGELOG entry for mermaid upgrade Co-Authored-By: Claude Opus 5 (1M context) --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index a3335d4cd..fbbea6087 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -28,6 +28,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 - [EE] Fixed Ask MCP connector tools failing to load when their input schemas use JSON Schema 2019-09 or 2020-12. [#1547](https://github.com/sourcebot-dev/sourcebot/pull/1547) - Upgraded `js-yaml` to `^4.3.1`. [#1552](https://github.com/sourcebot-dev/sourcebot/pull/1552) - Upgraded `reo-census` to `^1.2.10` in `setup-sourcebot`. [#1554](https://github.com/sourcebot-dev/sourcebot/pull/1554) +- Upgraded `mermaid` to `^11.16.1`. [#1555](https://github.com/sourcebot-dev/sourcebot/pull/1555) ## [5.1.5] - 2026-07-31