Skip to content

Update JavaScript dependencies - #23

Merged
samuel-williams-shopify merged 1 commit into
mainfrom
update-js-dependencies
Aug 15, 2026
Merged

Update JavaScript dependencies#23
samuel-williams-shopify merged 1 commit into
mainfrom
update-js-dependencies

Conversation

@samuel-williams-shopify

@samuel-williams-shopify samuel-williams-shopify commented Aug 15, 2026

Copy link
Copy Markdown
Contributor

Update the JavaScript dependencies and reduce the checked-in Mermaid distribution to the runtime files Utopia Project actually uses.

  • Update Mermaid from 11.12.0 (locked; ^11.4.1 declared) to 11.16.1
  • Update transitive dependencies, including DOMPurify to 3.4.13
  • Keep @socketry/syntax at the current 0.5.0
  • Configure utopia:components:update to vendor only mermaid.esm.min.mjs and its minified ESM chunks
  • Temporarily pin Utopia to Support selecting component package files utopia#74 until the component selection support is released
  • Remove unused core, unminified ESM, UMD, and source-map distributions
  • Reduce the vendored Mermaid footprint from about 66 MB to 3.8 MB

Validation:

  • bake utopia:components:update reproduces the manually curated component tree byte-for-byte: 197 files with no added, removed, or changed hashes
  • All 104 vendored Mermaid runtime modules are reachable from the imported entry point
  • All static and dynamic module imports resolve within the vendored distribution
  • No unused runtime modules or stale source-map references remain
  • npm outdated reports no remaining updates
  • npm audit --omit=dev reports zero vulnerabilities
  • Mermaid flowchart and sequence parsing smoke tests pass
  • Ruby test suite: 17 examples, 17 passed

@samuel-williams-shopify
samuel-williams-shopify merged commit c3f5a8e into main Aug 15, 2026
23 of 29 checks passed
@samuel-williams-shopify
samuel-williams-shopify deleted the update-js-dependencies branch August 15, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant