@mermaid-js/parser@1.0.0

mermaid-js/mermaid@mermaid-js/parser@1.0.0Feb 17, 2026by github-actions[bot]

AI Summary

Major release upgrading the parser to use Langium v4, with breaking changes to TypeScript requirements and type naming conventions, plus a security fix.

Key Highlights

Upgraded to Langium v4
Requires TypeScript >= 5.8.0
Type names moved from <typeName> to <typeName>.$type
Removed vulnerable lodash transitive dependency (CVE-2025-13465)

Breaking Changes

TypeScript version requirement increased to >= 5.8.0
Generated type names changed from <typeName> to <typeName>.$type

Full Release Notes

### Major Changes

-   [#7377](https://github.com/mermaid-js/mermaid/pull/7377) [`7243340`](https://github.com/mermaid-js/mermaid/commit/72433401a8c9d90d6753b7592d556122ecb953ca) Thanks [@aloisklink](https://github.com/aloisklink)! - chore: upgrade to Langium v4

    Upgrade `@mermaid-js/parser` to use Langium v4,
    see <https://github.com/eclipse-langium/langium/releases/tag/v4.0.0>
    for more details.

    The major breaking changes that impact consumers of this package are:

    -   Due to various type-related changes, `langium` now requires version `>= 5.8.0`
        of TypeScript.
    -   The generated type names from `ast.ts` have been moved from `<typeName>` to
        `<typeName>.$type`
        ([langium#1942](https://github.com/eclipse-langium/langium/pull/1942)).

    This also removes a transitive dependency on lodash versions that are vulnerable
    to CVE-2025-13465, although
    [chevrotain doesn't use the affected functions](https://github.com/Chevrotain/chevrotain/blob/21f20cd9754f8d5e85243fd9286d1fff397363ab/packages/website/docs/changes/CHANGELOG.md?plain=1#L5-L8),
    so this is only to silence security scanners.