@matfsw/docusaurus-plantuml-plugin 1.1.0 → 1.1.2

package/CHANGELOG.md

@@ -7,6 +7,52 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.1.2]
+
+### Fixed
+
+- De-flaked the zoom test suite. `data-plantuml-status="ready"` is written during the render
+  commit, but `useZoomPan` attaches its listeners and writes the initial transform from
+  *passive* effects that React flushes afterwards. The shared `renderReady()` helper returned on
+  the attribute alone, so a test could act on the viewport in between — a dispatched wheel event
+  found no listener, and a zoom set before the reset effect ran was immediately overwritten.
+  Both surfaced on CI as a scale stuck at 1, and one of them failed the `1.1.1` release build.
+  The helper now also waits for the hook's inline transform, which only the hook ever writes.
+
+### Changed
+
+- Development dependencies: `vitest` and `@vitest/coverage-v8` `3` → `4`, and
+  `@testing-library/jest-dom` `6` → `7`. No product code changed; all 433 tests and the
+  coverage report pass unchanged.
+
+- `.github/dependabot.yml` now ignores the majors that are blocked upstream rather than merely
+  unreviewed, each with the reason and the condition for revisiting. Left un-ignored they
+  produced a grouped pull request that could never go green, which hid the updates that *were*
+  takeable:
+  - **TypeScript 7** — typescript-eslint refuses to run against it
+    ([typescript-eslint#10940](https://github.com/typescript-eslint/typescript-eslint/issues/10940)).
+  - **ESLint 10** — `eslint-plugin-react@7.37.5`, the latest release, still caps its peer range
+    at `^9.7`.
+  - **eslint-plugin-react-hooks 7** — its React Compiler rules flag 15 places in `useZoomPan`
+    that are the deliberate design recorded in
+    [ADR 0003](docs/adr/0003-zoom-container-transform.md).
+
+## [1.1.1]
+
+### Security
+
+- Added `overrides` pinning three transitively-installed packages to patched versions:
+  `serialize-javascript` `>= 7.0.7` (RCE and denial-of-service advisories), `uuid` `>= 11.1.1`
+  (missing buffer bounds check) and `esbuild` `>= 0.28.1` (development-server request
+  handling). `npm audit` now reports no vulnerabilities.
+
+  **This changes nothing for consumers of the package.** All three arrived through build-time
+  tooling — `serialize-javascript` and `uuid` through the `@docusaurus/core` used to build the
+  example site, `esbuild` through `tsup` — and none of them is part of what a reader's browser
+  downloads. npm also ignores an `overrides` block declared by a dependency, so these apply
+  only to this repository's own installs. The plugin's own `copy-webpack-plugin` dependency
+  was already resolving a patched `serialize-javascript`.
+
 ## [1.1.0]
 
 ### Added
@@ -201,7 +247,9 @@ Initial release.
   opt-out.
 - Plugin option validation that rejects unknown keys and out-of-range values at build time.
 
-[Unreleased]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.0...HEAD
+[Unreleased]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.2...HEAD
+[1.1.2]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.1...v1.1.2
+[1.1.1]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.1.0...v1.1.1
 [1.1.0]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.3...v1.1.0
 [1.0.3]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.2...v1.0.3
 [1.0.2]: https://github.com/matf/docusaurus-plantuml-plugin/compare/v1.0.1...v1.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matfsw/docusaurus-plantuml-plugin",
-  "version": "1.1.0",
+  "version": "1.1.2",
   "description": "Render PlantUML diagrams in Docusaurus 3 entirely in the browser - no Java, no PlantUML server, no CDN.",
   "keywords": [
     "docusaurus",
@@ -85,17 +85,17 @@
     "@docusaurus/theme-classic": "^3.9.2",
     "@docusaurus/tsconfig": "^3.9.2",
     "@docusaurus/types": "^3.9.2",
-    "@eslint/js": "^9.39.1",
+    "@eslint/js": "^9.39.5",
     "@playwright/test": "^1.57.0",
     "@testing-library/dom": "^10.4.1",
-    "@testing-library/jest-dom": "^6.9.1",
+    "@testing-library/jest-dom": "^7.0.0",
     "@testing-library/react": "^16.3.0",
     "@testing-library/user-event": "^14.6.1",
     "@types/node": "^26.1.2",
     "@types/react": "^19.2.18",
     "@types/react-dom": "^19.2.4",
-    "@vitest/coverage-v8": "^3.2.4",
-    "eslint": "^9.39.1",
+    "@vitest/coverage-v8": "^4.1.10",
+    "eslint": "^9.39.5",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^5.2.0",
@@ -107,6 +107,11 @@
     "tsup": "^8.5.0",
     "typescript": "~5.9.3",
     "typescript-eslint": "^8.46.4",
-    "vitest": "^3.2.4"
+    "vitest": "^4.1.10"
+  },
+  "overrides": {
+    "serialize-javascript": "^7.0.7",
+    "uuid": "^11.1.1",
+    "esbuild": "^0.28.1"
   }
 }