[dependabot]

Bumps the javascript group in /js with 3 updates: pele, oxfmt and oxlint.

Updates pele from 1.6.0 to 1.10.0

Release notes

Sourced from pele's releases.

1.10.0

• %% comments no longer remove the character before it, so set A%% note keeps A and A->>B:%% note keeps the :. This applies to Venn, sequence, XY chart, quadrant, gantt, journey and timeline diagrams. A line that worked only because a comment removed a stray : or , is now a syntax error. #64
• title with nothing after it on its line sets no title, instead of taking the next line as the title and dropping it. This applies to Venn, sequence, gantt, C4, journey and timeline diagrams. #66
• Error messages show entity codes as written, such as [#35](https://github.com/obsidianmd/pele/issues/35);x, instead of internal placeholders. Lines and columns count the source as written, including front matter, comments, directives and blank lines. #63 #67 #73
• Sankey: a value that doesn't start with a number, such as abc, is a syntax error instead of an empty flow. 50% still reads as 50. #60
• Sankey: entity codes in prefix and suffix are decoded in value labels, as in tooltips. #59
• XY chart: explicit y bounds that both clamp to the same limit fall back to the data range instead of drawing NaN. #56
• Radar: values near the largest double are drawn in proportion instead of at the center. #74
• The edge-limit error now states only the limit. #52

1.9.1

• Rendered SVG no longer contains U+FFFE, U+FFFF or unpaired surrogate halves, so it is always valid XML. #72
• Style values that contain control characters, or other characters XML doesn't allow, are now ignored instead of written with those characters removed.
• Links and images now strip U+FFFE, U+FFFF and unpaired surrogate halves before their scheme is checked, as they already did for control characters.
• Internal links are checked against the note name as a browser reads it, and get no href if that check fails. Their href and data-href are unchanged otherwise.
• Event modeling: long data, note and specification lines now wrap without splitting emoji.

1.9.0

• Labels support more HTML tags: <sub> and <sup> for subscript and superscript, <code>, <kbd>, <samp> and <tt> in the monospace font, <u> and <ins> underlined, and <var>, <cite> and <dfn> in italics. #50 #27
• Labels keep text that looks like a tag but isn't HTML, so List<T> no longer renders as List. #31
• Labels wrap at zero-width spaces and soft hyphens (­), and wrapped lines sit closer together. #44
• Class diagrams wrap separate groups of classes into rows to fit maxWidth instead of shrinking. #23
• Sankey links use a gradient from source to target color when the diagram has an idPrefix. Node names accept Unicode, and labels avoid neighboring columns and shrink in narrow or crowded charts. #9 #47
• State diagrams use flowchart.curve for transitions, matching Mermaid. #21
• C4 relation labels no longer cover the elements they connect, and only diagrams that start with a C4 keyword are detected as C4. #2 #22
• Quadrant point labels keep clear of quadrant titles and the chart's edge. #38
• mount() no longer causes "ResizeObserver loop" errors when a diagram is resized. #37
• Added --pele-zoom-cursor to set the cursor on zoom buttons.

1.8.0

• Added a math render option for typesetting $$...$$ labels. Pele doesn't include a typesetter, so hosts must supply a resolver that returns SVG, or MathML/HTML, and its size. Labels show the TeX source when no resolver is given. Math works in the same diagram types as Mermaid 12.1: flowchart, swimlane, sequence, state, class, ER, mindmap, kanban, block, requirement and use case. Exported types: MathResolver and MathMarkup. #36
• Diagrams with subgraphs now have fewer edge crossings. Edges between groups, and edges from several groups into one node, are ordered using the layout of the whole drawing. #3
• HTML bold and italic now continue across <br> line breaks, so <b>First<br/>Second</b> is bold on both lines. #39
• Entity codes now accept HTML5 aliases such as #lcub; and #verbar;. #41
• Each entity code is now decoded only once, so #amp;lt; renders as <, matching Mermaid. #42
• Sequence: a message to self with a label taller than its loop no longer overlaps the next message. #10
• Timeline: in top-to-bottom timelines, the line from a period to its first event is now straight when the two boxes differ in height. #11

1.7.0

• Added mermaidType to render() results, parse() models and PeleError that returns Mermaid's type such as flowchart-v2 for graph TD or classDiagram for classDiagram. #30
• parse() now returns ParsedDiagramModel, a DiagramModel with mermaidType. render() still accepts any DiagramModel.
• Chinese and Japanese labels now wrap between characters, so long labels no longer stretch diagrams. Closing punctuation stays on the line it follows. #16

Commits

• 4eff76f Release: 1.10.0
• 4226947 Tests: Cover TreeView box-drawing error positions after front matter
• d7bf613 TreeView: Locate box-drawing errors in the source as written
• 00ef295 Tests: Cover Usecase JSON errors after entity codes
• d909c73 Usecase: Report JSON errors in the text as written
• ba59e6b Tests: Cover Agentflow metadata error positions after a directive
• 81922d6 Agentflow: Locate metadata errors in the source as written
• 50d198f Errors: Record entity code edits only while locating an error
• e7ae93c Errors: Show names in Radar, Venn and Pie errors as written
• 489b2a0 Tests: Cover error positions after a brace with trailing blanks
• Additional commits viewable in compare view

Updates oxfmt from 0.72.0 to 0.74.0

Release notes

Sourced from oxfmt's releases.

oxfmt v0.74.0

🐛 Bug Fixes

• e236de0 formatter_tests: Skip conformance spec calls with non-literal options (#27957) (leaysgur)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• a5d8184 jsdoc: Parse code spans after quotes in descriptions (#27955) (leaysgur)
• 2645d2c formatter_markdown: Treat link destinations and footnote references as opaque to code span fences (#27948) (leaysgur)
• 4d8195c formatter_yaml: Keep a root plain scalar starting with a document marker verbatim (#27947) (leaysgur)
• 529b057 formatter_core: Keep front matter verbatim when body starts with indented delimiter (#27946) (leaysgur)
• c22a9b2 formatter: Treat static block with only empty statements as empty (#27945) (leaysgur)
• d3ff3f6 formatter/jsdoc: Write descriptions as written to not close the comment (#27823) (leaysgur)
• c4c1727 formatter/sort_imports: Keep comments after the last import (#27822) (leaysgur)
• a64677e formatter: Print JSDoc embedded snippets with LF (#27821) (leaysgur)
• 2c1cc20 formatter: Keep comment only Vue bindings as-is (#27820) (leaysgur)
• 1bf236d formatter/sort_imports: Do not use comments as import source (#27819) (leaysgur)
• 52ee29d formatter_yaml: Never start col-0 line with document marker or BOM (#27818) (leaysgur)
• 81c75e7 formatter/css: Keep glued css-in-js statement placeholders glued (#27814) (leaysgur)
• a1ef7f4 formatter: Keep typecast parens in same-operator binary and arrow chain (#27812) (leaysgur)
• de110ce formatter: Keep more parens around TSInstantiationExpression (#27811) (leaysgur)
• 8b02e90 formatter_json: Reject invalid JSON instead of dropping them (#27785) (leaysgur)
• 6fe4c1b formatter: Treat lone CR in JSX text and argument blank lines (#27780) (leaysgur)
• 5605362 oxfmt: Validate editorconfig as like oxfmtrc (#27778) (leaysgur)
• 5b2acb0 formatter_core: Report error position releative to CRLF source (#27777) (leaysgur)
• c78e80e formatter_core: Report parse error positions relative to the BOM-headed source (#27776) (leaysgur)
• 3a980c9 formatter_toml: Handle BOM like other languages (#27775) (leaysgur)
• 97c9fc4 oxfmt: Handle BOM in config JSON (#27774) (leaysgur)
• 28eb4a7 oxfmt: Print trailing newline for --list-different (#27773) (leaysgur)
• d2bea21 formatter: Glue comments to an opener in empty for-head slots and array holes (#27737) (leaysgur)
• 6a95ec1 formatter: Keep comment position on holey array (#27730) (leaysgur)
• 54769da formatter: Break after dangling line comment in holey array (#27729) (leaysgur)
• 99077ef formatter_json: Reject unary expressions other than signed numbers (#27728) (leaysgur)
• 22cd4cd formatter_json: Handle holey array and comments (#27727) (leaysgur)
• 644ca1c formatter: Do not indent logical chains whose right sides all inline (#27667) (leaysgur)
• a07a0fb formatter: Wrap comment-only JSX expression container in a group (#27666) (leaysgur)

⚡ Performance

• e220293 formatter: Check only the operator suppression mark in is_quiet (#27952) (leaysgur)
• e5fdc9c formatter_core: Write into one element stack through a concrete Formatter (#27559) (leaysgur)
• a342f7e formatter: Skip comment handling for nodes with no comment near them (#27557) (leaysgur)
• d8ce750 formatter: Write string literals with swapped quotes into the arena (#27558) (Yuji Sugiura)
• 1c393c0 formatter_core: Skip scanning texts with nothing to rewrite (#27561) (leaysgur)
• 1d3ef10 formatter_core: Keep the embedded IR when nothing in it is rewritten (#27673) (leaysgur)

📚 Documentation

• 1325225 oxfmt: Update useless comment prefix (#27956) (leaysgur)
• d0dd140 formatter: Note lossy cooked round-trip in template embeds (#27944) (leaysgur)
• 8a3a6c8 oxfmt: Update stale notes on the JSDoc string-out channel and fixture origins (#27824) (leaysgur)

... (truncated)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 6941b4e release(apps): oxlint v1.88.0 && oxfmt v0.73.0 (#27643)
• a495e82 feat(oxfmt): support associations config to specify language over filepath ...
• 408d87f docs(oxfmt): simplify oxfmtrc docs (#27432)
• 5db28fa feat(oxfmt): support Astro via prettier-plugin-astro@1.x (#27386)
• 902e188 docs(oxfmt): update how embeddedLanguageFormatting option works (#27362)
• See full diff in compare view

Updates oxlint from 1.88.0 to 1.89.0

Release notes

Sourced from oxlint's releases.

oxlint v1.89.0

💥 BREAKING CHANGES

• e3c1b11 ast: [BREAKING] Preserve lone surrogates in static property names (#27095) (Dunqing)
• a0a987c ast: [BREAKING] Preserve lone surrogates in static member names (#26677) (Dunqing)

🚀 Features

• 770ada4 linter: Mark vue 3 rules as recommended (#27717) (Cam McHenry)
• ba38c1d linter: Mark react/react-hooks rules as recommended (#27701) (Cam McHenry)
• d85a3ba linter: Mark promise rules as recommended (#27693) (Cam McHenry)
• e71c88a linter: Mark node rule as recommended (#27692) (Cam McHenry)
• 7213f61 linter: Mark nextjs rules as recommended (#27691) (Cam McHenry)
• d7c6b26 linter: Mark jsx-a11y rules as recommended (#27690) (Cam McHenry)
• 199dfdc linter: Mark jsdoc rules as recommended (#27689) (Cam McHenry)
• 780bff3 linter: Mark jest/vitest rules as recommended (#27672) (Cam McHenry)
• 6ae6859 linter: Mark import rules as recommended (#27671) (Cam McHenry)
• b7a1df3 linter: Mark unicorn rules as recommended (#27670) (Cam McHenry)
• c44a355 linter: Mark typescript rules as recommended from upstream (#27634) (Cam McHenry)
• 6b49dba linter: Mark eslint rules as recommended from upstream (#27632) (Cam McHenry)

🐛 Bug Fixes

• 7c47246 linter: Check module specifiers and string values that contain lone surrogates (#26717) (Dunqing)
• 782ab6e linter: Search string values without UTF-8 conversion (#26716) (Dunqing)
• 326904f linter/unicorn/no-useless-undefined: Allow undefined in React.useRef (#25027) (Chris Dokurno)
• f9cf165 linter/unicorn/prefer-spread: Ignore super method calls (#27868) (camc314)
• 00484e1 linter/eslint/prefer-const: Report destructuring assignments inside blocks (#27856) (camc314)
• 9c35461 linter/eslint/sort-vars: Report every out-of-order declaration (#27767) (camc314)
• 01e1c5e linter/unicorn/prefer-string-replace-all: Resolve regex variables (#27769) (camc314)
• 7f474d5 linter/eslint/no-loop-func: Detect writes after the loop (#27754) (camc314)
• 4b7fea6 linter/eslint/block-scoped-var: Ignore declarations without writes (#27760) (camc314)
• 2947917 linter/eslint/no-lonely-if: Check final else blocks in else-if chains (#27759) (camc314)
• fc039b5 linter/eslint/sort-imports: Check imports after other statements (#27749) (camc314)
• 1acba97 linter/unicorn/prefer-at: Report slice index reads once (#27762) (camc314)
• 6190e26 linter/eslint/prefer-arrow-callback: Ignore functions used as conditional tests (#27533) (Anzal Husain Abidi)
• b3cdaaf linter/eslint/sort-keys: Check computed identifier names (#27748) (camc314)
• 170e608 linter/unicorn/prefer-native-coercion-functions: Check object methods and function properties (#27750) (camc314)
• 9261df7 linter/unicorn/prefer-string-raw: Check object property values (#27758) (camc314)
• ddea86b linter/eslint/prefer-template: Report separate nested concatenations (#27764) (camc314)
• 2c67197 linter/eslint/no-unused-vars: Count conditional calls in sequences as uses (#27755) (camc314)
• 7f22fa0 linter/unicorn/prefer-regexp-test: Check logical operands in boolean contexts (#27761) (camc314)
• 3c44398 linter/eslint/class-methods-use-this: Count this in parameter defaults (#27756) (camc314)
• d85923f linter/eslint/no-param-reassign: Report rest parameter writes (#27765) (camc314)
• 8ea47bb linter/unicorn/prefer-type-error: Handle parenthesized type checks (#27766) (camc314)
• e96856c linter/unicorn/catch-error-name: Check unused underscore-prefixed names (#27751) (camc314)
• d8ca399 linter/unicorn/no-array-callback-reference: Ignore callback factory calls (#27763) (camc314)
• 1267ab8 linter/eslint/max-params: Count rest parameters (#27757) (camc314)
• 9ff25c3 linter/eslint/no-useless-assignment: Report dead stores to function parameters (#27735) (camc314)
• ee5e730 linter/eslint/no-setter-return: Check setters in property descriptors (#27731) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.89.0] - 2026-10-19

🐛 Bug Fixes

• 9a424c2 oxlint,oxfmt: Correct Node.js TypeScript support range (#27699) (camc314)

Commits

• 07ed78f release(apps): oxlint v1.89.0 && oxfmt v0.74.0 (#27961)
• 9a424c2 fix(oxlint,oxfmt): correct Node.js TypeScript support range (#27699)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: lang: javascript. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-actions]

Test Results

27 tests  ±0   27 ✅ ±0   4s ⏱️ -1s
 2 suites ±0    0 💤 ±0 
 2 files   ±0    0 ❌ ±0 

Results for commit e6d5313. ± Comparison against base commit 738d5c6.