deps(deps): bump the weekly-minor-patch group across 1 directory with 3 updates

[dependabot]

Bumps the weekly-minor-patch group with 3 updates in the / directory: js-yaml, mermaid and baseline-browser-mapping.

Updates js-yaml from 5.2.3 to 5.4.0

Changelog

Sourced from js-yaml's changelog.

[5.4.0] - 2026-08-25

Added

• Added the scalarStyleRules dumper option to customize string formatting. See Scalar styling for details.

Changed

• [breaking] Flattened the low-level AST node style representation. Scalar and collection nodes now use SCALAR_STYLE and COLLECTION_STYLE values; explicit tags use the separate tagged property. Alias nodes now contain only kind and anchor. This only affects code that directly constructs or edits AST nodes.
• [breaking] The sortKeys option was rewritten using AST mutation to avoid side effects.
• Reworked scalar style selection. This can change formatting without changing loaded values; in particular, whitespace-only strings are now double-quoted.

Fixed

• Accept a byte order mark at the start of each document in a stream, #791.
• Produce valid flow mappings with quoteFlowKeys and flowSkipColonSpace, including alias and property-only keys, #786.
• Preserve empty scalar items when converting block sequences to flow style.
• Do not apply the 1024-character simple-key limit to flow mapping keys.
• Count Unicode code points, rather than UTF-16 code units, for the 1024-character simple-key limit.
• Add an explicit document-end marker after keep-chomped block scalars when needed to preserve trailing newlines.

[5.3.0] - 2026-08-14

This release focuses on reworking the documentation and making small architectural improvements before moving forward.

Added

• Added completely new documentation.
• Exported DUMP_SCHEMA, the default schema used by the dumper.
• Added YAMLException.throwAt() for throwing an error at a source position.

Changed

• Changed flat constant exports to grouped exports: EVENT_ID, SCALAR_STYLE, COLLECTION_STYLE, and CHOMPING_MODE, along with their value types. The old exports are still preserved, but deprecated.
• Made identify mandatory for custom tag definitions. Use identify: () => false for load-only tags.

Deprecated

• Deprecated flat constant exports. Use grouped ones instead.

Removed

... (truncated)

Commits

• 6b4ff5e 5.4.0 released
• 3b3625e Update changelog
• 4f25a74 Fix file name
• 3bd003b Expose new scalar styling API
• fbb3e9d Remove regex lookbehind for ES2015 compatibility
• d43c185 Fix flowSkipColonSpace by forcing quoteFlowKeys
• a5fdb31 Add automatic double quoting for whitespace-only strings, close #534
• 25dcf77 Fix keep-chomped scalar test expectations
• 9f50a42 Fix open-ended tracking for document end markers
• 31aad6d Fix simple key length limit for astral characters
• Additional commits viewable in compare view

Updates mermaid from 11.16.1 to 11.17.1

Release notes

Sourced from mermaid's releases.

mermaid@11.17.1

Patch Changes

• #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

  C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

• #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

• #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

• #7842 3670b4e Thanks @​filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

• #7812 cdfc0ea Thanks @​knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

  Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

• #7785 c45cde9 Thanks @​knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

• #7828 8eb3afc Thanks @​knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

• #7803 74e44eb Thanks @​knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

• #7792 ea55b31 Thanks @​RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

• #7970 a2c0fb6 Thanks @​filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

• #7842 ae3e115 Thanks @​filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

• #7724 0fd7a9f Thanks @​xdumaine! - feat(xyChart): add legends for named line and bar series

Patch Changes

• #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

• #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

• #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

• #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

• #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

• #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

• #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

... (truncated)

Commits

• 569f46e Version Packages (#8114)
• 3054836 Version Packages
• 5b17e0a Merge pull request #8092 from mermaid-js/hotfix/11.17.1
• 655211a Reverted change of wrap-options
• 8a23480 Updated doc from feedback
• 412c80a Update doc and consistent handlig in c4 as for seq diags
• b433a9a Updated changeset to describe specifik diagram affected
• 6bae15e Updated tests to Playwright API
• 1a96110 fix(dev): dedupe @​codemirror/state so the dev explorer editor loads
• adba7fe Merge branch 'hotfix/11.17.1' of github.com:mermaid-js/mermaid into hotfix/11...
• Additional commits viewable in compare view

Updates baseline-browser-mapping from 2.11.12 to 2.11.19

Commits

• 8966043 Patch to 2.11.19 because browser or feature data changed
• e18601d Browser or feature data changed
• 28cb50a Updating static site
• cb33a83 Patch to 2.11.18 because browser or feature data changed
• 61f4f92 Browser or feature data changed
• 650fe90 Updating static site
• 1b2ca49 Patch to 2.11.17 because browser or feature data changed
• cd11b62 Browser or feature data changed
• 5b76736 Updating static site
• 5d21daa Patch to 2.11.16 because browser or feature data changed
• Additional commits viewable in compare view

---

Note

Medium Risk
Mermaid 11.17 changes default rendering paths and diagram behavior for docs, which can alter how existing diagrams look or layout; js-yaml 5.4 may change serialized YAML formatting where dumping is used.

Overview
Updates only package-lock.json for the weekly minor/patch group: js-yaml 5.2.3 → 5.4.0, mermaid 11.16.1 → 11.17.1 (plus @mermaid-js/parser 1.2.1, fastdom/strictdom, and other mermaid transitive bumps), and baseline-browser-mapping 2.11.12 → 2.11.19.

For this Docusaurus site, mermaid is a direct dependency used with @docusaurus/theme-mermaid, so the jump to 11.17.x is the meaningful user-facing change: class diagrams default to the unified v2 renderer, C4 uses unified shapes, and several diagram/layout fixes ship in 11.17.0–11.17.1. js-yaml moves two minor versions with dumper/scalar formatting and AST-shape changes that mainly affect low-level YAML tooling, not typical parse/dump call sites. baseline-browser-mapping is a dev dependency refresh for browser/feature data only.

No application source files change in this PR.

^{Reviewed by Cursor Bugbot for commit 863e8d2. Bugbot is set up for automated code reviews on this repo. Configure here.}

[askmarvin1337]

Automatisch geprueft (Ask Marvin): reiner Lockfile-/Dependency-Bump, keine Breaking-Changes-Hinweise fuer die im Repo genutzte API-Oberflaeche (bei openai@7.4.0 zusaetzlich per Smoke-Test gegen translate.js-Nutzung -- chat.completions.create -- verifiziert). Freigegeben.