v10.9.8

mastra-ai/mastrav10.9.8Aug 4, 2026by aloisklink

AI Summary

A patch release backports critical security fixes and stability improvements from Mermaid v11.16.1, focusing on prototype pollution protection and CSS compilation handling.

Key Highlights

Backports security fixes and improvements from Mermaid v11.16.1
Fixes increase protections against prototype pollution (GHSA-c4c3-pg64-4m4v)
Fixes handling of CSS sibling combinators in compileCSS
Fixes support for zero-width x-axis ranges in xychart
Deprecates the mermaidAPI.setConfig() function

Full Release Notes

Backports the following fixes from [Mermaid v11.16.1][1].
    
 - GHSA-c4c3-pg64-4m4v
    - fix: increase protections against prototype pollution
    - deprecate: Deprecate the `mermaidAPI.setConfig()` function
 - GHSA-6x64-9x62-f2gx - fix: handle CSS sibling combinators in compileCSS
 - GHSA-2v8p-3f2j-5mp7 - fix(xychart): support zero-width x-axis ranges
    
Due to a publish error, v10.9.7 was skipped.

**Full Changelog**: https://github.com/mermaid-js/mermaid/compare/v10.9.6...v10.9.8

[1]: https://github.com/mermaid-js/mermaid/releases/tag/mermaid%4011.16.1