v10.9.8

actualbudget/actualv10.9.8Aug 4, 2026by aloisklink

AI Summary

A backport release bringing fixes from Mermaid v11.16.1, including security patches and bug fixes for rendering.

Key Highlights

Backported security fix for prototype pollution (GHSA-c4c3-pg64-4m4v)
Fix for CSS sibling combinators in compileCSS
Fix for xychart zero-width x-axis ranges
Note: v10.9.7 was skipped due to a publish error

Full Release Notes

Backports the following fixes from [Mermaid v11.16.1][1].
    
 - GHSA-c4c3-pg64-4m4v
    - fix: increase protections against prototype pollution
    - deprecate: Deprecate the `mermaidAPI.setConfig()` function
 - GHSA-6x64-9x62-f2gx - fix: handle CSS sibling combinators in compileCSS
 - GHSA-2v8p-3f2j-5mp7 - fix(xychart): support zero-width x-axis ranges
    
Due to a publish error, v10.9.7 was skipped.

**Full Changelog**: https://github.com/mermaid-js/mermaid/compare/v10.9.6...v10.9.8

[1]: https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1