Niels Lohmann
d1235cecc9
The pip installs in check_amalgamation.yml, ubuntu.yml (Meson) and semgrep.yml now use --require-hashes with requirements files compiled by pip-compile --generate-hashes (Python 3.14, as on ubuntu-26.04). The astyle and generate_natvis requirements move to requirements.in, and Meson and Semgrep get theirs in .github/requirements, which Dependabot now watches. check_amalgamation.yml installs the natvis requirements from the PR tree, as it already does for astyle. The Mermaid checker overrides KaTeX to 0.18.11 (GHSA-238p-pmpm-9mq7; Mermaid 11 still requires ^0.16.47) and updates DOMPurify to 3.4.17 (GHSA-cg2g-xh64-v4q7, GHSA-mrv2-3pqr-j5jr, GHSA-c6gr-qvv4-5v3f). Signed-off-by: Niels Lohmann <mail@nlohmann.me>
14 lines
282 B
JSON
14 lines
282 B
JSON
{
|
|
"name": "check-mermaid",
|
|
"private": true,
|
|
"description": "Validate the Mermaid diagrams of the documentation (see check_mermaid.mjs)",
|
|
"type": "module",
|
|
"dependencies": {
|
|
"jsdom": "30.1.3",
|
|
"mermaid": "11.17.2"
|
|
},
|
|
"overrides": {
|
|
"katex": "0.18.11"
|
|
}
|
|
}
|