Bump the prod-dependencies-minor group across 1 directory with 5 updates by dependabot[bot] · Pull Request #3107 · wavetermdev/waveterm

dependabot · 2026-03-23T19:35:59Z

Bumps the prod-dependencies-minor group with 5 updates in the / directory:

Package	From	To
css-tree	`3.1.0`	`3.2.1`
mermaid	`11.12.3`	`11.13.0`
react-frame-component	`5.2.7`	`5.3.0`
ws	`8.19.0`	`8.20.0`
sass	`1.91.0`	`1.98.0`

Updates css-tree from 3.1.0 to 3.2.1

Release notes

Sourced from css-tree's releases.

3.2.1

Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0
Added "sideEffects": false in package.json

Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)

Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)

Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)

Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
Added onToken option to the parse() method, which can be either an array or a function:
When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
parse(css, {
    onToken(type, start, end, index) {
        if (this.isBlockOpenerTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        } else if (this.isBlockCloserTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        }
    }
});
Extended TokenStream with the following methods:

getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)

getTokenType(tokenIndex) – returns the token's type by index

isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>

isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>

getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists

Changed generate() to not auto insert whitespaces between tokens for raw values (#356)

Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.

Bumped mdn/data to 2.27.1 and various fixes in syntaxes

Changelog

Sourced from css-tree's changelog.

3.2.1 (March 5, 2026)

Fixed parsing of nested function in a group in definition syntax (#358)

3.2.0 (March 4, 2026)
Added "sideEffects": false in package.json

Added list option to the parse() method to specify whether the parser should produce a List (by default, list: true) or an array (list: false) for node's children (e.g., SelectorList, Block, etc.)

Added support for Functional Notation in definition syntax (for now by wrapping function arguments into an implicit group when necessary, see #292)

Added support for stacked multipliers {A}? and {A,B}? according to spec in definition syntax parsing (#346)

Added math functions support in syntax matching (e.g., min(), max(), etc.) (#344)
Added onToken option to the parse() method, which can be either an array or a function:
When the value is an array, it is populated with objects { type, start, end } (token type, and its start and end offsets).
When the value is a function, it accepts type, start, end, and index parameters, and is invoked with a token API as this, enabling advanced token handling (see onToken). For example, the following demonstrates checking if all block tokens have matching pairs:
parse(css, {
    onToken(type, start, end, index) {
        if (this.isBlockOpenerTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No closing pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        } else if (this.isBlockCloserTokenType(type)) {
            if (this.getBlockPairTokenIndex(index) === -1) {
                console.warn('No opening pair for', this.getTokenValue(index), this.getRangeLocation(start, end));
            }
        }
    }
});
Extended TokenStream with the following methods:

getTokenEnd(tokenIndex) – returns the token's end offset by index, complementing getTokenStart(tokenIndex)

getTokenType(tokenIndex) – returns the token's type by index

isBlockOpenerTokenType(tokenType) – returns true for <function-token>, <(-token>, <[-token>, and <{-token>

isBlockCloserTokenType(tokenType) – returns true for <)-token>, <]-token>, and <}-token>

getBlockTokenPairIndex(tokenIndex) – returns the index of the pair token for a block, or -1 if no pair exists

Changed generate() to not auto insert whitespaces between tokens for raw values (#356)

Fixed fork() to extend node definitions instead of overriding them. For example, fork({ node: { Dimension: { generate() { /* ... */ } } } }) will now update only the generate() method on the Dimension node, while inheriting all other properties from the previous syntax definition.

Bumped mdn/data to 2.27.1 and various fixes in syntaxes

Commits

8a6caba 3.2.1
7c7f9ee Fix parsing of nested function in a group in definition syntax (fixes #358)
c42fee2 3.2.0
aad332e Add Function Notation in syntax definition (#292)
264d09d Fix GitHub actions
5766a65 Fix syntax definition issues
307d8df Bump deps
c008c01 Add support for stacked multipliers {A}? and {A,B}? in definition syntax ...
20f5671 Add list option for parser (fixes #348)
39a0c72 Update nodejs versions
Additional commits viewable in compare view

Updates mermaid from 11.12.3 to 11.13.0

Release notes

Sourced from mermaid's releases.

mermaid@11.13.0

Minor Changes

#7352 d6db0b0 Thanks @remcohaszing! - feat: Export the AsyncIconLoader, SyncIconLoader, and IconLoader types.

#5932 cdacb0b Thanks @exoego! - feat: Add venn-beta diagram

#6789 73e9849 Thanks @omkarht! - feat: Add half-arrowheads (solid & stick) and central connection support

#7387 acce4db Thanks @exoego! - feat: Add Ishikawa diagram (ishikawa-beta)

#6995 9745f32 Thanks @darshanr0107! - feat: Deprecate flowchart.htmlLabels in favor of root-level htmlLabels in Mermaid config

#5814 2dd29be Thanks @kairi003! - feat: allow to put notes in namespaces on classDiagram

Patch Changes

#7075 96a766d Thanks @darshanr0107! - fix: Prevent HTML tags from being escaped in sandbox label rendering

#6843 32723b2 Thanks @saurabhg772244! - fix: Support edge animation in hand drawn look

#7453 a60e615 Thanks @darshanr0107! - fix: ER diagram edge label positioning

#6989 1a9d45a Thanks @darshanr0107! - fix: Resolved parsing error where direction TD was not recognized within subgraphs

#7178 96ca7c0 Thanks @omkarht! - fix(treemap): Fixed treemap classDef style application to properly apply user-defined styles

#7076 60f6331 Thanks @darshanr0107! - fix: Correct viewBox casing and make SVGs responsive

#7055 fa15ce8 Thanks @darshanr0107! - fix: Improve participant parsing and prevent recursive loops on invalid syntax

#7276 33c7c72 Thanks @darshanr0107! - fix: respect markdownAutoWrap: false to prevent text auto-wrapping in flowchart markdown labels with htmlLabels enabled.

Markdown labels with markdownAutoWrap: false, htmlLabels: false set doesn't work correctly.

#7416 3c069b5 Thanks @Crafter-Y! - fix: architecture diagram lines should now have the correct length

#6995 9745f32 Thanks @darshanr0107! - fix: Support the htmlLabels Mermaid config value whenever possible

#7293 a408b55 Thanks @darshanr0107! - fix: Prevent browser hang when using multiline accDescr in XY charts

#6119 712c1ec Thanks @NealGooch! - fix: correct block positioning when nested blocks span multiple columns

#7424 981a62e Thanks @knsv! - fix: correct BT orientation arc sweep flags in gitGraph drawArrow()

Swapped SVG arc sweep-flag values in the BT (bottom-to-top) orientation branches of drawArrow() so curves bend in the correct direction. Affects both rerouting and non-rerouting code paths for merge and non-merge arrows.

Resolves #6593

... (truncated)

Commits

b1a5e9b Version Packages (#7466)
bdd7abd fix: use correct package name for elk
a900618 dummy commit
a60e615 Fix: ER diagram edge label positioning (#7453)
1d17c14 Merge branch 'master' of https://github.com/mermaid-js/mermaid
500be12 chore: Update coupon
981fbb8 fix(gantt): restore readable outside-text for done tasks in dark mode (#7456)
0d5e35a fix(elk): scope rounded edge curve to ELK layout only (#7454)
de20da7 fix: plausible build
fcdd95b chore: Update plausible
Additional commits viewable in compare view

Updates react-frame-component from 5.2.7 to 5.3.0

Release notes

Sourced from react-frame-component's releases.

v5.3.0

What's Changed

Add fallback to document.write() for initial frame rendering via dangerouslyUseDocWrite prop to support libraries like Repcaptcha and Google Maps that depend on the frame's location/origin.

PR #248: Add document.write() fallback (@andrewpye)

Previous releases: https://github.com/ryanseddon/react-frame-component/releases

Changelog

Sourced from react-frame-component's changelog.

5.3.0

Minor Changes

8d922c3: Add fallback to document.write() for initial frame rendering via dangerouslyUseDocWrite prop to support libraries like Repcaptcha and Google Maps that depend on the frame's location/origin.

Commits

c5953eb version bump and changelog
8d922c3 Add document.write() fallback (#248)
fec4853 Correct assets path (#276)
d381d35 feat: add auto deploy of example page (#275)
9623cdf Add Changesets release workflow with npm trusted publishers (#273)
3db8ce4 Add prettier and changeset process (#272)
add9187 Modernise build tooling (Node 22, ESLint 9, Vitest, Vite) (#271)
See full diff in compare view

Updates ws from 8.19.0 to 8.20.0

Release notes

Sourced from ws's releases.

8.20.0

Features

Added exports for the PerMessageDeflate class and utilities for the Sec-WebSocket-Extensions and Sec-WebSocket-Protocol headers (d3503c1f).

Commits

8439255 [dist] 8.20.0
d3503c1 [minor] Export the PerMessageDeflate class and header utils
3ee5349 [api] Convert the isServer and maxPayload parameters to options
91707b4 [doc] Add missing space
8b55319 [pkg] Update eslint to version 10.0.1
ca533a5 [pkg] Update globals to version 17.0.0
See full diff in compare view

Updates sass from 1.91.0 to 1.98.0

Release notes

Sourced from sass's releases.

Dart Sass 1.98.0

To install Sass 1.98.0, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Command-Line Interface

Gracefully handle dependency loops in --watch mode.

Dart API

Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

Fix a crash when manually constructing a SassCalculation for 'calc' with an argument that can't be simplified.

Properly emit deprecation warnings as text rather than StringBuffer objects when running in a browser.

Emit colored warnings and other messages on the console when running in a browser.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.3

To install Sass 1.97.3, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Fix a bug where nesting an at-rule within multiple style rules in plain CSS could cause outer style rules to be omitted.

See the full changelog for changes in earlier releases.

Dart Sass 1.97.2

To install Sass 1.97.2, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

Changes

Additional fixes for implicit configuration when nested imports are involved.

See the full changelog for changes in earlier releases.

... (truncated)

Changelog

Sourced from sass's changelog.

1.98.0

Command-Line Interface

Gracefully handle dependency loops in --watch mode.

Dart API

Add a const Logger.defaultLogger field. This provides a logger that emits to standard error or the browser console, but automatically chooses whether to use terminal colors.

JavaScript API

Fix a crash when manually constructing a SassCalculation for 'calc' with an argument that can't be simplified.

Properly emit deprecation warnings as text rather than StringBuffer objects when running in a browser.

Emit colored warnings and other messages on the console when running in a browser.

1.97.3

Fix a bug where nesting an at-rule within multiple style rules in plain CSS could cause outer style rules to be omitted.

1.97.2

Additional fixes for implicit configuration when nested imports are involved.

1.97.1

Fix a bug with the new CSS-style if() syntax where values would be evaluated even if their conditions didn't match.

1.97.0

Add support for the display-p3-linear color space.

1.96.0

Allow numbers with complex units (more than one numerator unit or more than zero denominator units) to be emitted to CSS. These are now emitted as calc() expressions, which now support complex units in plain CSS.

1.95.1

No user-visible changes.

... (truncated)

Commits

5a81ae3 Bump version to 1.98.0 (#2754)
e25e71d Update immutable to v5.1.5 (#2753)
43fac1a Bump actions/upload-artifact from 6 to 7 (#2747)
8b85c9a Bump actions/download-artifact from 7 to 8 (#2749)
00f83f0 Bump postcss from 8.5.6 to 8.5.8 in /pkg/sass-parser (#2752)
0a325a4 Bump actions/attest-build-provenance from 3 to 4 (#2748)
7fb3c0f Gracefully handle dependency loops in watch mode (#2746)
e86d044 Bump eslint from 9.39.3 to 10.0.1 in /pkg/sass-parser (#2743)
4bcd256 Add Logger.defaultLogger to automatically choose whether to use colors (#2742)
c3f8ff0 Always convert printed objects to strings in JS (#2741)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for sass since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-dependencies-minor group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [css-tree](https://github.com/csstree/csstree) | `3.1.0` | `3.2.1` | | [mermaid](https://github.com/mermaid-js/mermaid) | `11.12.3` | `11.13.0` | | [react-frame-component](https://github.com/ryanseddon/react-frame-component) | `5.2.7` | `5.3.0` | | [ws](https://github.com/websockets/ws) | `8.19.0` | `8.20.0` | | [sass](https://github.com/sass/dart-sass) | `1.91.0` | `1.98.0` | Updates `css-tree` from 3.1.0 to 3.2.1 - [Release notes](https://github.com/csstree/csstree/releases) - [Changelog](https://github.com/csstree/csstree/blob/master/CHANGELOG.md) - [Commits](csstree/csstree@v3.1.0...v3.2.1) Updates `mermaid` from 11.12.3 to 11.13.0 - [Release notes](https://github.com/mermaid-js/mermaid/releases) - [Commits](https://github.com/mermaid-js/mermaid/compare/mermaid@11.12.3...mermaid@11.13.0) Updates `react-frame-component` from 5.2.7 to 5.3.0 - [Release notes](https://github.com/ryanseddon/react-frame-component/releases) - [Changelog](https://github.com/ryanseddon/react-frame-component/blob/master/CHANGELOG.md) - [Commits](ryanseddon/react-frame-component@v5.2.7...v5.3.0) Updates `ws` from 8.19.0 to 8.20.0 - [Release notes](https://github.com/websockets/ws/releases) - [Commits](websockets/ws@8.19.0...8.20.0) Updates `sass` from 1.91.0 to 1.98.0 - [Release notes](https://github.com/sass/dart-sass/releases) - [Changelog](https://github.com/sass/dart-sass/blob/main/CHANGELOG.md) - [Commits](sass/dart-sass@1.91.0...1.98.0) --- updated-dependencies: - dependency-name: css-tree dependency-version: 3.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: mermaid dependency-version: 11.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: react-frame-component dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: ws dependency-version: 8.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor - dependency-name: sass dependency-version: 1.98.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-dependencies-minor ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-03-23T19:36:02Z

Deploying waveterm with Cloudflare Pages

Latest commit:	`8a9ec2c`
Status:	✅ Deploy successful!
Preview URL:	https://d102f3e1.waveterm.pages.dev
Branch Preview URL:	https://dependabot-npm-and-yarn-prod-2ie2.waveterm.pages.dev

View logs

kilo-code-bot · 2026-03-23T19:36:49Z

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Overview

This is a Dependabot PR that updates 5 production dependencies to their latest minor/patch versions:

Package	From	To
css-tree	3.1.0	3.2.1
mermaid	11.12.3	11.13.0
react-frame-component	5.2.7	5.3.0
ws	8.19.0	8.20.0
sass	1.91.0	1.98.0

Analysis

No code changes - only dependency version updates in package.json and regenerated package-lock.json
All updates are minor/patch versions which are typically safe
Review of release notes shows no breaking changes or security concerns

Files Reviewed (3 files)

package.json
docs/package.json
package-lock.json

_{Reviewed by minimax-m2.5-20260211 · 227,478 tokens}

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the prod-dependencies-minor group across 1 directory with 5 updates#3107

Bump the prod-dependencies-minor group across 1 directory with 5 updates#3107
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/prod-dependencies-minor-7dead4e57a

dependabot bot commented on behalf of github Mar 23, 2026

Uh oh!

cloudflare-workers-and-pages bot commented Mar 23, 2026 •

edited

Loading

Uh oh!

kilo-code-bot bot commented Mar 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 23, 2026

3.2.1

3.2.0

3.2.1 (March 5, 2026)

3.2.0 (March 4, 2026)

mermaid@11.13.0

Minor Changes

Patch Changes

v5.3.0

What's Changed

5.3.0

Minor Changes

8.20.0

Features

Dart Sass 1.98.0

Changes

Command-Line Interface

Dart API

JavaScript API

Dart Sass 1.97.3

Changes

Dart Sass 1.97.2

Changes

1.98.0

Command-Line Interface

Dart API

JavaScript API

1.97.3

1.97.2

1.97.1

1.97.0

1.96.0

1.95.1

Uh oh!

cloudflare-workers-and-pages bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying waveterm with Cloudflare Pages

Uh oh!

kilo-code-bot bot commented Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Overview

Analysis

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

cloudflare-workers-and-pages bot commented Mar 23, 2026 •

edited

Loading

kilo-code-bot bot commented Mar 23, 2026 •

edited

Loading