Skip to content

Chore/bump pozeiden 0.4.1 - #87

Merged
tsunaminoai merged 4 commits into
mainfrom
chore/bump-pozeiden-0.4.0
Aug 7, 2026
Merged

Chore/bump pozeiden 0.4.1#87
tsunaminoai merged 4 commits into
mainfrom
chore/bump-pozeiden-0.4.0

Conversation

@tsunaminoai

Copy link
Copy Markdown
Contributor

Bump pozeiden to 0.4.1

Picks up pozeiden's two 0.3.0 security fixes that the CLI/WASM mermaid
paths were missing (GHSA-p2c5-qmq5-3r4f SVG/XSS injection,
GHSA-rg4m-w3p2-gf3p out-of-bounds writes) plus the 0.4.0 hardening,
accessibility metadata, and layout rewrite. Behaviour change per
pozeiden's stability policy: emitted mermaid SVG bytes change (wider
default font stack; accTitle/accDescr become <title>/<desc>).

Verified: zig build test, zig build (CLI renders a mermaid pie through
pozeiden 0.4.0), zig build wasm; zon2json-lock regenerated (also picks
up pozeiden's corrected transitive mvzr ref pin).
@tsunaminoai tsunaminoai added the chore Chore needed to maintain the quality of the code without material change. label Aug 7, 2026
@tsunaminoai
tsunaminoai requested a review from sc2ben August 7, 2026 19:23
@tsunaminoai
tsunaminoai enabled auto-merge August 7, 2026 19:23
@tsunaminoai
tsunaminoai merged commit ceec7fb into main Aug 7, 2026
4 checks passed
@sc2ben
sc2ben deleted the chore/bump-pozeiden-0.4.0 branch August 7, 2026 19:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

chore Chore needed to maintain the quality of the code without material change.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants