Sidharth Vinod
f337d16caf
Merge pull request #221 from mermaid-js/dependabot/npm_and_yarn/develop/tailwindcss-2.2.0
...
Bump tailwindcss from 2.1.4 to 2.2.0
2021-06-18 22:36:02 +05:30
Sidharth Vinod
5773558e84
Merge pull request #219 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-4.3.4
...
Bump typescript from 4.3.2 to 4.3.4
2021-06-18 22:35:34 +05:30
Sidharth Vinod
8fe4b7f536
Merge pull request #217 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/parser-4.27.0
...
Bump @typescript-eslint/parser from 4.26.1 to 4.27.0
2021-06-18 22:35:18 +05:30
dependabot[bot]
765ed2f012
Bump tailwindcss from 2.1.4 to 2.2.0
...
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss ) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases )
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/master/CHANGELOG.md )
- [Commits](https://github.com/tailwindlabs/tailwindcss/compare/v2.1.4...v2.2.0 )
---
updated-dependencies:
- dependency-name: tailwindcss
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-18 13:03:09 +00:00
dependabot[bot]
63c23b9e0b
Bump typescript from 4.3.2 to 4.3.4
...
Bumps [typescript](https://github.com/Microsoft/TypeScript ) from 4.3.2 to 4.3.4.
- [Release notes](https://github.com/Microsoft/TypeScript/releases )
- [Commits](https://github.com/Microsoft/TypeScript/compare/v4.3.2...v4.3.4 )
---
updated-dependencies:
- dependency-name: typescript
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-18 13:02:51 +00:00
dependabot[bot]
0288392a61
Bump eslint-plugin-tailwindcss from 1.13.2 to 1.13.4
...
Bumps [eslint-plugin-tailwindcss](https://github.com/francoismassart/eslint-plugin-tailwindcss ) from 1.13.2 to 1.13.4.
- [Release notes](https://github.com/francoismassart/eslint-plugin-tailwindcss/releases )
- [Commits](https://github.com/francoismassart/eslint-plugin-tailwindcss/compare/v1.13.2...v1.13.4 )
---
updated-dependencies:
- dependency-name: eslint-plugin-tailwindcss
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-18 13:02:37 +00:00
dependabot[bot]
21072d343c
Bump @typescript-eslint/parser from 4.26.1 to 4.27.0
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 4.26.1 to 4.27.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.27.0/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-18 13:02:28 +00:00
Sidharth Vinod
9801dd606d
fix(gist): warnings
2021-06-15 21:26:27 +05:30
Sidharth Vinod
b762d1a44a
Merge branch 'master' into gists
...
* master: (28 commits)
fix: SecurityLevel
Trigger an alert when securityLevel is stripped
Only strip securityLevel option when state is loaded from URL
Fix lint issues
Update monaco
Bump tslib from 2.2.0 to 2.3.0
Bump monaco-editor from 0.24.0 to 0.25.0
Bump eslint from 7.27.0 to 7.28.0
Bump cssnano from 5.0.5 to 5.0.6
Bump postcss from 8.3.0 to 8.3.2
Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
Bump cypress from 7.4.0 to 7.5.0
Handle <img> tag support in graphs
Force securityLevel option to 'strict' by default to mitigate XSS attacks
Bump mocha from 8.4.0 to 9.0.0
Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
Bump prettier from 2.3.0 to 2.3.1
Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
Bump normalize-url from 4.5.0 to 4.5.1
Fix typo in grammer
...
2021-06-15 21:20:28 +05:30
Sidharth Vinod
1324242337
Merge pull request #216 from mermaid-js/develop
...
Develop
2021-06-15 21:17:05 +05:30
Sidharth Vinod
af64307067
fix: SecurityLevel
2021-06-15 20:54:09 +05:30
Sidharth Vinod
be6931d0ca
Merge pull request #209 from Morreski/develop
...
Mitigate XSS vulnerability and allow img tags to be correctly handled in output SVG.
2021-06-15 13:02:33 +05:30
Enguerrand Pelletier and Sidharth Vinod
a907674539
Trigger an alert when securityLevel is stripped
...
Co-authored-by: Sidharth Vinod <sidharthv96@gmail.com >
2021-06-15 09:15:47 +02:00
Morreski
fbe2f127b8
Only strip securityLevel option when state is loaded from URL
2021-06-14 22:38:44 +02:00
Sidharth Vinod
81a5181877
Merge pull request #215 from mermaid-js/develop
...
Develop
2021-06-12 11:19:50 +05:30
Sidharth Vinod
3848f9d618
Fix lint issues
2021-06-12 11:13:44 +05:30
Sidharth Vinod
4f52a37e1d
Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor into develop
...
* 'master' of https://github.com/mermaid-js/mermaid-live-editor :
Bump normalize-url from 4.5.0 to 4.5.1
Fix typo in grammer
Fix CVE
2021-06-12 11:00:48 +05:30
Sidharth Vinod
6c8c0f20c8
Update monaco
2021-06-12 10:59:44 +05:30
Sidharth Vinod
570d5c79a8
Merge pull request #213 from mermaid-js/dependabot/npm_and_yarn/develop/monaco-editor-0.25.0
...
Bump monaco-editor from 0.24.0 to 0.25.0
2021-06-12 10:55:06 +05:30
Sidharth Vinod
5548625536
Merge pull request #214 from mermaid-js/dependabot/npm_and_yarn/develop/tslib-2.3.0
...
Bump tslib from 2.2.0 to 2.3.0
2021-06-12 10:54:49 +05:30
Sidharth Vinod
bb2f5b46a8
Merge pull request #212 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-7.28.0
...
Bump eslint from 7.27.0 to 7.28.0
2021-06-12 10:54:36 +05:30
dependabot[bot]
559feacae0
Bump tslib from 2.2.0 to 2.3.0
...
Bumps [tslib](https://github.com/Microsoft/tslib ) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/Microsoft/tslib/releases )
- [Commits](https://github.com/Microsoft/tslib/compare/2.2.0...2.3.0 )
---
updated-dependencies:
- dependency-name: tslib
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-12 05:14:48 +00:00
dependabot[bot]
ecc514816c
Bump monaco-editor from 0.24.0 to 0.25.0
...
Bumps [monaco-editor](https://github.com/Microsoft/monaco-editor ) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/Microsoft/monaco-editor/releases )
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md )
- [Commits](https://github.com/Microsoft/monaco-editor/compare/v0.24.0...v0.25.0 )
---
updated-dependencies:
- dependency-name: monaco-editor
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-12 05:14:43 +00:00
dependabot[bot]
8d2d6a83ae
Bump eslint from 7.27.0 to 7.28.0
...
Bumps [eslint](https://github.com/eslint/eslint ) from 7.27.0 to 7.28.0.
- [Release notes](https://github.com/eslint/eslint/releases )
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/eslint/eslint/compare/v7.27.0...v7.28.0 )
---
updated-dependencies:
- dependency-name: eslint
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-12 05:14:31 +00:00
Sidharth Vinod
9ca183e654
Merge pull request #210 from mermaid-js/dependabot/npm_and_yarn/develop/cssnano-5.0.6
...
Bump cssnano from 5.0.5 to 5.0.6
2021-06-12 10:42:35 +05:30
Sidharth Vinod
f65dba35c4
Merge pull request #207 from mermaid-js/dependabot/npm_and_yarn/develop/postcss-8.3.2
...
Bump postcss from 8.3.0 to 8.3.2
2021-06-12 10:42:26 +05:30
dependabot[bot]
65a1e067ab
Bump cssnano from 5.0.5 to 5.0.6
...
Bumps [cssnano](https://github.com/cssnano/cssnano ) from 5.0.5 to 5.0.6.
- [Release notes](https://github.com/cssnano/cssnano/releases )
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@5.0.5...cssnano@5.0.6 )
---
updated-dependencies:
- dependency-name: cssnano
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-12 05:01:04 +00:00
dependabot[bot]
14bfbb1607
Bump postcss from 8.3.0 to 8.3.2
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.3.0 to 8.3.2.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.3.0...8.3.2 )
---
updated-dependencies:
- dependency-name: postcss
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-12 05:00:57 +00:00
Sidharth Vinod
49a812c43f
Merge pull request #211 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-plugin-tailwindcss-1.13.2
...
Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
2021-06-12 10:29:36 +05:30
Sidharth Vinod
45010e17d2
Merge pull request #203 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/eslint-plugin-4.26.1
...
Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
2021-06-12 10:29:17 +05:30
Sidharth Vinod
60f553f9eb
Merge pull request #202 from mermaid-js/dependabot/npm_and_yarn/develop/cypress-7.5.0
...
Bump cypress from 7.4.0 to 7.5.0
2021-06-12 10:29:04 +05:30
dependabot[bot]
cdf9ccd3c9
Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
...
Bumps [eslint-plugin-tailwindcss](https://github.com/francoismassart/eslint-plugin-tailwindcss ) from 1.9.1 to 1.13.2.
- [Release notes](https://github.com/francoismassart/eslint-plugin-tailwindcss/releases )
- [Commits](https://github.com/francoismassart/eslint-plugin-tailwindcss/compare/v1.9.1...v1.13.2 )
---
updated-dependencies:
- dependency-name: eslint-plugin-tailwindcss
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 09:17:02 +00:00
dependabot[bot]
566c696be8
Bump cypress from 7.4.0 to 7.5.0
...
Bumps [cypress](https://github.com/cypress-io/cypress ) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/cypress-io/cypress/releases )
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/.releaserc.base.js )
- [Commits](https://github.com/cypress-io/cypress/compare/v7.4.0...v7.5.0 )
---
updated-dependencies:
- dependency-name: cypress
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 09:16:50 +00:00
Sidharth Vinod
abde98bd5f
Merge pull request #200 from mermaid-js/dependabot/npm_and_yarn/normalize-url-4.5.1
...
Bump normalize-url from 4.5.0 to 4.5.1
2021-06-11 14:46:12 +05:30
Sidharth Vinod
5c9afbc1ed
Merge pull request #205 from mermaid-js/dependabot/npm_and_yarn/develop/mocha-9.0.0
...
Bump mocha from 8.4.0 to 9.0.0
2021-06-11 14:45:06 +05:30
Morreski
cec1dc4df9
Handle <img> tag support in graphs
2021-06-11 11:13:13 +02:00
Morreski
1096d10cb4
Force securityLevel option to 'strict' by default to mitigate XSS attacks
2021-06-11 11:13:03 +02:00
dependabot[bot]
d5ecf60c84
Bump mocha from 8.4.0 to 9.0.0
...
Bumps [mocha](https://github.com/mochajs/mocha ) from 8.4.0 to 9.0.0.
- [Release notes](https://github.com/mochajs/mocha/releases )
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mochajs/mocha/compare/v8.4.0...v9.0.0 )
---
updated-dependencies:
- dependency-name: mocha
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 08:05:16 +00:00
dependabot[bot]
4d48a14100
Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
...
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 08:03:53 +00:00
Sidharth Vinod
d751945e94
Merge pull request #204 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/parser-4.26.1
...
Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
2021-06-11 13:31:26 +05:30
Sidharth Vinod
aa74eaff95
Merge pull request #206 from mermaid-js/dependabot/npm_and_yarn/develop/prettier-2.3.1
...
Bump prettier from 2.3.0 to 2.3.1
2021-06-11 13:31:13 +05:30
dependabot[bot]
35bf065120
Bump prettier from 2.3.0 to 2.3.1
...
Bumps [prettier](https://github.com/prettier/prettier ) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/prettier/prettier/releases )
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md )
- [Commits](https://github.com/prettier/prettier/compare/2.3.0...2.3.1 )
---
updated-dependencies:
- dependency-name: prettier
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 05:05:32 +00:00
dependabot[bot]
0604c27b56
Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
...
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser ) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/parser )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-11 05:04:56 +00:00
dependabot[bot]
956d5d0684
Bump normalize-url from 4.5.0 to 4.5.1
...
Bumps [normalize-url](https://github.com/sindresorhus/normalize-url ) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/sindresorhus/normalize-url/releases )
- [Commits](https://github.com/sindresorhus/normalize-url/commits )
---
updated-dependencies:
- dependency-name: normalize-url
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2021-06-10 16:35:13 +00:00
Sidharth Vinod
4cba8bdb72
Merge pull request #199 from Yukaii/bugfix/fix-grammer-typo
...
Fix grammer typo
2021-06-09 11:51:38 +05:30
Yukai Huang
09f4b4f35e
Fix typo in grammer
2021-06-08 21:06:31 +08:00
Sidharth Vinod
c751fc3c01
Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor
...
* 'master' of https://github.com/mermaid-js/mermaid-live-editor :
Update SRI
Release 8.10.2
Release 8.10.2
Update README.md
Migrate to GHCR
Create docker-publish.yml
2021-06-08 11:40:46 +05:30
Sidharth Vinod
65ab28d03b
Fix CVE
2021-06-08 11:40:36 +05:30
Sidharth Vinod
f4d6ca8c92
Cypress regex fix
2021-06-06 12:27:10 +05:30
Sidharth Vinod
86953aadc7
Merge pull request #198 from mermaid-js/develop
...
Release 8.10.2
2021-06-06 12:09:57 +05:30