Bump lodash, dagre and jointjs by dependabot[bot] · Pull Request #29 · ProcessMaker/sketch
Bumps lodash, dagre and jointjs. These dependencies needed to be updated together.
Updates lodash from 4.17.10 to 4.17.23
Commits
dec55b7Bump main to v4.17.23 (#6088)19c9251fix: setCacheHas JSDoc return type should be boolean (#6071)b5e6729jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)edadd45Prevent prototype pollution on baseUnset function4879a7adoc: fix autoLink function, conversion of source links (#6056)9648f69chore: removeyarn.lockfile (#6053)dfa407dci: remove legacy configuration files (#6052)156e196feat: add renovate setup (#6039)933e106ci: add pipeline for Bun (#6023)072a807docs: update links related to Open JS Foundation (#5968)- Additional commits viewable in compare view
Updates dagre from 0.7.4 to 0.8.5
Commits
f56edb1Update to 0.8.5079654cUpdate lodash52b2b4fUpdate eslint, karma, mochaec3fd32Update lodash and ESLint5cbd6edBump version and set as pre-release453fa90Prep v0.8.4 release98078adUpdate to graphlib 2.1.6f60d1a0Merge pull request #244 from mwaldstein/masterdb45b92Merge branch 'master' into master8dc461fBump version and set as pre-release- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by lutzroeder, a new releaser for dagre since your current version.
Updates jointjs from 1.1.0 to 3.7.7
Release notes
Sourced from jointjs's releases.
Release v3.7.7
CHANGELOG
- dia.Paper - fix custom events on link label (8d3a09f4)
- util.breakText - fix hyphenation regex to take international characters into account (c314a3d0)
Release v3.7.6
CHANGELOG
- dia.Cell - make
prop()'s internalset()call more efficient (4f8c058f6fbc51205fb8cd2d239ac042b6f5a8f6)- dia.LinkView - fix to prevent hidden
doubleLinkToolsto affect link bounding box (d9696c37ba2f2dfa5a031b1d7c7f2c1c56f25a50)- dia.attributes - fix to read all
breakTextoptions intextWrapattribute (dc9dc6f7bbf5284fe5971f2d2f18878274dbd320)- dia.attributes - fix ambiguous order of cache keys in
textattribute (e0a5aacb09746dcf7f40982c2b4d1e7b1cac92a5)- connectors.Curve - fix wrong target tangent
rightdirection (e291c175de58f9ca417d8f269496aedb8d53db4b)- linkTools.Segments - throw explicit error when incompatible
routerin use (f6ffb4b3e69c364acdffbae6fa536a8f2aa01d2b)- shapes.standard - fix cursor style on
DoubleLinkandShadowLink(1a9ca06e1fa36dcd9574710797136aa5dc2078f9)- util.breakText - fix to use the defined
separatorto join words (dc9dc6f7bbf5284fe5971f2d2f18878274dbd320)- util.breakText - fix to allow empty string to be
separator(dc9dc6f7bbf5284fe5971f2d2f18878274dbd320)- Geometry - prevent unnecessary object instantiation in
Rect.prototype.containsPoint()(b8b8d9d38b405b1ce4b58b5441320799fd1f1f32)- Geometry - prevent rounding errors in
simplify()ofPolyline(70a8631f73df7ff3bc7e16cab6b4b9cb47f163ca)Experimental
- Vectorizer: add option to support camel case attributes (2c4804e80f58c3639012995ff73fa2072f7b8197)
- routers.RightAngle: support user-defined vertices (7aca426c775217ed457d43fb569916b02c8d4037)
Release 3.7.5
CHANGELOG
- layout.PortLabel - fix passing of
label.position.args.attrsininside,outside,radiallayouts (2b826315)- connectors.Jumpover - fix to prevent stacked links from causing jumps (d8b2226f)
- util.breakText - fix to prevent NO_SPACE characters from appearing in the result (690e84b2)
Release 3.7.4
CHANGELOG
- dia.LinkView - fix element detection when using
snapLinkSelf: true(8cfdea40)Release v3.7.3
CHANGELOG
- demo.Isometric - add new demo as example of isometric projection (75a94c0e)
- dia.Cell - add
foregroundEmbedsoption totoFront()andtoBack()methods (ddc53455)- dia.Cell - fix the depth-first algorithm in
getEmbeddedCells()method (e0e9144b)Release v3.7.2
CHANGELOG
- demo - add DWDM (Dense wavelength-division multiplexing) example
... (truncated)
Changelog
Sourced from jointjs's changelog.
21-01-2026 (v4.2.3)
@joint/core
- dia.Paper - fix to wake up idle
asyncpaper withinitializeUnmounted: truewhen a new cell is added to graph- dia.Paper - fix to prevent an error when a view is synchronously dumped during an asynchronous visibility check
- dia.Element - fix
getPortBBox()to return a valid bbox when port has no size defined
@joint/layout-directed-graph
- layout.DirectedGraph - fix to accept a padding object for
clusterPaddingoption oflayout()16-12-2025 (v4.2.2)
@joint/core
- dia.Graph - fix types
@joint/layout-directed-graph
- layout.DirectedGraph - ignore cell layers in the layout
@joint/layout-msagl
- layout.MSAGL - ignore cell layers in the layout
20-11-2025 (v4.2.1)
@joint/core
- fix types to allow port optional transformations and make all SVG attributes nullable
10-11-2025 (v4.2.0)
- add new ELK layout example
@joint/core
- dia.Paper - introduce layers API
- dia.Paper - rework
autoFreezeoption- dia.Paper - add
measureNode()callback option- dia.Paper - add
findClosestMagnetToPoint()method- dia.Paper - add
viewManagementoption for advanced view lifecycle management- dia.Paper - add
cellVisibility()callback option- dia.Paper - add
disposeHiddenCellViews()method- dia.Paper - add
prioritizeCellViewMount()andprioritizeCellViewUnmount()methods- dia.Paper - add
updateCellVisibility()andupdateCellsVisibility()methods- dia.Paper - add
isCellVisible()method- dia.Paper - fix to only trigger
'render:idle'event after all updates are completed- dia.Paper - fix generic view detachment when
viewport()callback returnsfalse- dia.Paper - fix to trigger
'render:*'events when paper model is reset with no cells- dia.Paper - fix rendering of first batch of updates in
asyncmode to be asynchronous- dia.LinkView - allow link-to-link snap
- dia.LinkView - fix to prevent link snap to a magnet when only the host cell is close enough
- dia.LinkView - fix missing arrowheads in WKWebView
- dia.CellView - make
getNodeBBox()method work for nodes outside the render tree- dia.CellView - optimize measurements of nodes referenced by
refattribute
... (truncated)
Commits
59647a9Release v3.7.7 (#2384)c314a3dfix(util.breakText): take in account international characters (#2385)8d3a09ffix(dia.Paper): custom events on link label (#2381)d033ff4docs(standard.InscribedImage): fix typo in code example (#2377)ad99755chore: remove lodash3 test (#2372)739c7c1Release v3.7.6 (#2362)7aca426feat(routers.RightAngle): support user defined vertices (#2224)70a8631fix(Geometry): prevent rounding errors in simplify() of Polyline (#2371)4684a9achore(travis): update node and ubuntu dist (#2368)82213b1chore(deps): bump node version to 18 (#2367)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Dependency upgrades (package.json)
- Bump
lodashto^4.17.23 - Bump
dagreto^0.8.5 - Bump
jointjsto^3.7.7(major upgrade)
Potential impact: JointJS major version jump may introduce breaking API/behavior changes in diagram rendering; Dagre layout changes may affect graph positioning. Lodash is a patch-level upgrade.
Written by Cursor Bugbot for commit 77b6af3. This will update automatically on new commits. Configure here.