Commit Graph
1567 Commits
Author SHA1 Message Date
Sidharth Vinod f337d16caf Merge pull request #221 from mermaid-js/dependabot/npm_and_yarn/develop/tailwindcss-2.2.0
Bump tailwindcss from 2.1.4 to 2.2.0
2021-06-18 22:36:02 +05:30
Sidharth Vinod 5773558e84 Merge pull request #219 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-4.3.4
Bump typescript from 4.3.2 to 4.3.4
2021-06-18 22:35:34 +05:30
Sidharth Vinod 8fe4b7f536 Merge pull request #217 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/parser-4.27.0
Bump @typescript-eslint/parser from 4.26.1 to 4.27.0
2021-06-18 22:35:18 +05:30
dependabot[bot] 765ed2f012 Bump tailwindcss from 2.1.4 to 2.2.0
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/compare/v2.1.4...v2.2.0)

---
updated-dependencies:
- dependency-name: tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-18 13:03:09 +00:00
dependabot[bot] 63c23b9e0b Bump typescript from 4.3.2 to 4.3.4
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 4.3.2 to 4.3.4.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Commits](https://github.com/Microsoft/TypeScript/compare/v4.3.2...v4.3.4)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-18 13:02:51 +00:00
dependabot[bot] 0288392a61 Bump eslint-plugin-tailwindcss from 1.13.2 to 1.13.4
Bumps [eslint-plugin-tailwindcss](https://github.com/francoismassart/eslint-plugin-tailwindcss) from 1.13.2 to 1.13.4.
- [Release notes](https://github.com/francoismassart/eslint-plugin-tailwindcss/releases)
- [Commits](https://github.com/francoismassart/eslint-plugin-tailwindcss/compare/v1.13.2...v1.13.4)

---
updated-dependencies:
- dependency-name: eslint-plugin-tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-18 13:02:37 +00:00
dependabot[bot] 21072d343c Bump @typescript-eslint/parser from 4.26.1 to 4.27.0
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.26.1 to 4.27.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.27.0/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-18 13:02:28 +00:00
Sidharth Vinod 9801dd606d fix(gist): warnings 2021-06-15 21:26:27 +05:30
Sidharth Vinod b762d1a44a Merge branch 'master' into gists
* master: (28 commits)
  fix: SecurityLevel
  Trigger an alert when securityLevel is stripped
  Only strip securityLevel option when state is loaded from URL
  Fix lint issues
  Update monaco
  Bump tslib from 2.2.0 to 2.3.0
  Bump monaco-editor from 0.24.0 to 0.25.0
  Bump eslint from 7.27.0 to 7.28.0
  Bump cssnano from 5.0.5 to 5.0.6
  Bump postcss from 8.3.0 to 8.3.2
  Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
  Bump cypress from 7.4.0 to 7.5.0
  Handle <img> tag support in graphs
  Force securityLevel option to 'strict' by default to mitigate XSS attacks
  Bump mocha from 8.4.0 to 9.0.0
  Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
  Bump prettier from 2.3.0 to 2.3.1
  Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
  Bump normalize-url from 4.5.0 to 4.5.1
  Fix typo in grammer
  ...
2021-06-15 21:20:28 +05:30
Sidharth Vinod 1324242337 Merge pull request #216 from mermaid-js/develop
Develop
2021-06-15 21:17:05 +05:30
Sidharth Vinod af64307067 fix: SecurityLevel 2021-06-15 20:54:09 +05:30
Sidharth Vinod be6931d0ca Merge pull request #209 from Morreski/develop
Mitigate XSS vulnerability and allow img tags to be correctly handled in output SVG.
2021-06-15 13:02:33 +05:30
Enguerrand PelletierandSidharth Vinod a907674539 Trigger an alert when securityLevel is stripped
Co-authored-by: Sidharth Vinod <sidharthv96@gmail.com>
2021-06-15 09:15:47 +02:00
Morreski fbe2f127b8 Only strip securityLevel option when state is loaded from URL 2021-06-14 22:38:44 +02:00
Sidharth Vinod 81a5181877 Merge pull request #215 from mermaid-js/develop
Develop
2021-06-12 11:19:50 +05:30
Sidharth Vinod 3848f9d618 Fix lint issues 2021-06-12 11:13:44 +05:30
Sidharth Vinod 4f52a37e1d Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor into develop
* 'master' of https://github.com/mermaid-js/mermaid-live-editor:
  Bump normalize-url from 4.5.0 to 4.5.1
  Fix typo in grammer
  Fix CVE
2021-06-12 11:00:48 +05:30
Sidharth Vinod 6c8c0f20c8 Update monaco 2021-06-12 10:59:44 +05:30
Sidharth Vinod 570d5c79a8 Merge pull request #213 from mermaid-js/dependabot/npm_and_yarn/develop/monaco-editor-0.25.0
Bump monaco-editor from 0.24.0 to 0.25.0
2021-06-12 10:55:06 +05:30
Sidharth Vinod 5548625536 Merge pull request #214 from mermaid-js/dependabot/npm_and_yarn/develop/tslib-2.3.0
Bump tslib from 2.2.0 to 2.3.0
2021-06-12 10:54:49 +05:30
Sidharth Vinod bb2f5b46a8 Merge pull request #212 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-7.28.0
Bump eslint from 7.27.0 to 7.28.0
2021-06-12 10:54:36 +05:30
dependabot[bot] 559feacae0 Bump tslib from 2.2.0 to 2.3.0
Bumps [tslib](https://github.com/Microsoft/tslib) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/Microsoft/tslib/releases)
- [Commits](https://github.com/Microsoft/tslib/compare/2.2.0...2.3.0)

---
updated-dependencies:
- dependency-name: tslib
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:48 +00:00
dependabot[bot] ecc514816c Bump monaco-editor from 0.24.0 to 0.25.0
Bumps [monaco-editor](https://github.com/Microsoft/monaco-editor) from 0.24.0 to 0.25.0.
- [Release notes](https://github.com/Microsoft/monaco-editor/releases)
- [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/monaco-editor/compare/v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: monaco-editor
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:43 +00:00
dependabot[bot] 8d2d6a83ae Bump eslint from 7.27.0 to 7.28.0
Bumps [eslint](https://github.com/eslint/eslint) from 7.27.0 to 7.28.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v7.27.0...v7.28.0)

---
updated-dependencies:
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:14:31 +00:00
Sidharth Vinod 9ca183e654 Merge pull request #210 from mermaid-js/dependabot/npm_and_yarn/develop/cssnano-5.0.6
Bump cssnano from 5.0.5 to 5.0.6
2021-06-12 10:42:35 +05:30
Sidharth Vinod f65dba35c4 Merge pull request #207 from mermaid-js/dependabot/npm_and_yarn/develop/postcss-8.3.2
Bump postcss from 8.3.0 to 8.3.2
2021-06-12 10:42:26 +05:30
dependabot[bot] 65a1e067ab Bump cssnano from 5.0.5 to 5.0.6
Bumps [cssnano](https://github.com/cssnano/cssnano) from 5.0.5 to 5.0.6.
- [Release notes](https://github.com/cssnano/cssnano/releases)
- [Commits](https://github.com/cssnano/cssnano/compare/cssnano@5.0.5...cssnano@5.0.6)

---
updated-dependencies:
- dependency-name: cssnano
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:01:04 +00:00
dependabot[bot] 14bfbb1607 Bump postcss from 8.3.0 to 8.3.2
Bumps [postcss](https://github.com/postcss/postcss) from 8.3.0 to 8.3.2.
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss/compare/8.3.0...8.3.2)

---
updated-dependencies:
- dependency-name: postcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-12 05:00:57 +00:00
Sidharth Vinod 49a812c43f Merge pull request #211 from mermaid-js/dependabot/npm_and_yarn/develop/eslint-plugin-tailwindcss-1.13.2
Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
2021-06-12 10:29:36 +05:30
Sidharth Vinod 45010e17d2 Merge pull request #203 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/eslint-plugin-4.26.1
Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
2021-06-12 10:29:17 +05:30
Sidharth Vinod 60f553f9eb Merge pull request #202 from mermaid-js/dependabot/npm_and_yarn/develop/cypress-7.5.0
Bump cypress from 7.4.0 to 7.5.0
2021-06-12 10:29:04 +05:30
dependabot[bot] cdf9ccd3c9 Bump eslint-plugin-tailwindcss from 1.9.1 to 1.13.2
Bumps [eslint-plugin-tailwindcss](https://github.com/francoismassart/eslint-plugin-tailwindcss) from 1.9.1 to 1.13.2.
- [Release notes](https://github.com/francoismassart/eslint-plugin-tailwindcss/releases)
- [Commits](https://github.com/francoismassart/eslint-plugin-tailwindcss/compare/v1.9.1...v1.13.2)

---
updated-dependencies:
- dependency-name: eslint-plugin-tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 09:17:02 +00:00
dependabot[bot] 566c696be8 Bump cypress from 7.4.0 to 7.5.0
Bumps [cypress](https://github.com/cypress-io/cypress) from 7.4.0 to 7.5.0.
- [Release notes](https://github.com/cypress-io/cypress/releases)
- [Changelog](https://github.com/cypress-io/cypress/blob/develop/.releaserc.base.js)
- [Commits](https://github.com/cypress-io/cypress/compare/v7.4.0...v7.5.0)

---
updated-dependencies:
- dependency-name: cypress
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 09:16:50 +00:00
Sidharth Vinod abde98bd5f Merge pull request #200 from mermaid-js/dependabot/npm_and_yarn/normalize-url-4.5.1
Bump normalize-url from 4.5.0 to 4.5.1
2021-06-11 14:46:12 +05:30
Sidharth Vinod 5c9afbc1ed Merge pull request #205 from mermaid-js/dependabot/npm_and_yarn/develop/mocha-9.0.0
Bump mocha from 8.4.0 to 9.0.0
2021-06-11 14:45:06 +05:30
Morreski cec1dc4df9 Handle <img> tag support in graphs 2021-06-11 11:13:13 +02:00
Morreski 1096d10cb4 Force securityLevel option to 'strict' by default to mitigate XSS attacks 2021-06-11 11:13:03 +02:00
dependabot[bot] d5ecf60c84 Bump mocha from 8.4.0 to 9.0.0
Bumps [mocha](https://github.com/mochajs/mocha) from 8.4.0 to 9.0.0.
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mochajs/mocha/compare/v8.4.0...v9.0.0)

---
updated-dependencies:
- dependency-name: mocha
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 08:05:16 +00:00
dependabot[bot] 4d48a14100 Bump @typescript-eslint/eslint-plugin from 4.26.0 to 4.26.1
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/eslint-plugin)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 08:03:53 +00:00
Sidharth Vinod d751945e94 Merge pull request #204 from mermaid-js/dependabot/npm_and_yarn/develop/typescript-eslint/parser-4.26.1
Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
2021-06-11 13:31:26 +05:30
Sidharth Vinod aa74eaff95 Merge pull request #206 from mermaid-js/dependabot/npm_and_yarn/develop/prettier-2.3.1
Bump prettier from 2.3.0 to 2.3.1
2021-06-11 13:31:13 +05:30
dependabot[bot] 35bf065120 Bump prettier from 2.3.0 to 2.3.1
Bumps [prettier](https://github.com/prettier/prettier) from 2.3.0 to 2.3.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/2.3.0...2.3.1)

---
updated-dependencies:
- dependency-name: prettier
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 05:05:32 +00:00
dependabot[bot] 0604c27b56 Bump @typescript-eslint/parser from 4.26.0 to 4.26.1
Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.26.0 to 4.26.1.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.26.1/packages/parser)

---
updated-dependencies:
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-11 05:04:56 +00:00
dependabot[bot] 956d5d0684 Bump normalize-url from 4.5.0 to 4.5.1
Bumps [normalize-url](https://github.com/sindresorhus/normalize-url) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/sindresorhus/normalize-url/releases)
- [Commits](https://github.com/sindresorhus/normalize-url/commits)

---
updated-dependencies:
- dependency-name: normalize-url
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-10 16:35:13 +00:00
Sidharth Vinod 4cba8bdb72 Merge pull request #199 from Yukaii/bugfix/fix-grammer-typo
Fix grammer typo
2021-06-09 11:51:38 +05:30
Yukai Huang 09f4b4f35e Fix typo in grammer 2021-06-08 21:06:31 +08:00
Sidharth Vinod c751fc3c01 Merge branch 'master' of https://github.com/mermaid-js/mermaid-live-editor
* 'master' of https://github.com/mermaid-js/mermaid-live-editor:
  Update SRI
  Release 8.10.2
  Release 8.10.2
  Update README.md
  Migrate to GHCR
  Create docker-publish.yml
2021-06-08 11:40:46 +05:30
Sidharth Vinod 65ab28d03b Fix CVE 2021-06-08 11:40:36 +05:30
Sidharth Vinod f4d6ca8c92 Cypress regex fix 2021-06-06 12:27:10 +05:30
Sidharth Vinod 86953aadc7 Merge pull request #198 from mermaid-js/develop
Release 8.10.2
2021-06-06 12:09:57 +05:30