mermaid@11.16.1

pbakaus/impeccablemermaid@11.16.1Aug 4, 2026by github-actions[bot]

AI Summary

The main Mermaid library update featuring security enhancements and bug fixes. It improves service rendering, handles CSS sibling combinators better, and deprecates legacy configuration methods.

Key Highlights

Fixed CSS sibling combinators in compileCSS
Increased protections against prototype pollution
Services now rendered in the order they are defined
Deprecated mermaidAPI.setConfig() function
Fixed xychart support for zero-width x-axis ranges

Breaking Changes

Deprecated mermaidAPI.setConfig() function

Full Release Notes

### Patch Changes

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`12d472c`](https://github.com/mermaid-js/mermaid/commit/12d472c9ed43f94814b110da8d7a9ae6dd5266ed) Thanks [@aloisklink](https://github.com/aloisklink)! - fix: handle CSS sibling combinators in compileCSS

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`2cd6dcf`](https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43) Thanks [@aloisklink](https://github.com/aloisklink)! - fix: increase protections against prototype pollution

    User-controlled input already has protections against prototype pollution.

    Fixes: GHSA-c4c3-pg64-4m4v

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`99af3fc`](https://github.com/mermaid-js/mermaid/commit/99af3fc35ef0a9a9c8c6314521344d67523ddccf) Thanks [@aloisklink](https://github.com/aloisklink)! - fix(architecture): use `Map`s and `Set`s to store groups/services

    Services are now rendered in the order they are defined and more service IDs
    are now supported.

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`2cd6dcf`](https://github.com/mermaid-js/mermaid/commit/2cd6dcf735533b323507e3e889ffdea870540b43) Thanks [@aloisklink](https://github.com/aloisklink)! - deprecate: Deprecate the `mermaidAPI.setConfig()` function

    Calling this function has no observable effect, as the next time a
    `render()` or `parse()` is called, the `currentConfig` is cleared.

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`630aa7e`](https://github.com/mermaid-js/mermaid/commit/630aa7e5dd417e1f56bff2a1ce8df2c5ad08d289) Thanks [@aloisklink](https://github.com/aloisklink)! - fix(xychart): support zero-width x-axis ranges

-   [#8022](https://github.com/mermaid-js/mermaid/pull/8022) [`59b22fa`](https://github.com/mermaid-js/mermaid/commit/59b22fad2b3bb04f87a476c84a8a2b24679e607e) Thanks [@aloisklink](https://github.com/aloisklink)! - fix(radar): limit number of ticks to 32

    Setting a ticks value higher than this would only show 32 ticks.