Build(deps): Bump the npm group with 5 updates

[dependabot]

Bumps the npm group with 5 updates:

Package	From	To
@mui/x-data-grid	9.11.0	9.12.0
mermaid	11.16.1	11.17.1
cspell	10.0.1	10.1.0
oxfmt	0.63.0	0.65.0
oxlint	1.78.0	1.80.0

Updates @mui/x-data-grid from 9.11.0 to 9.12.0

Release notes

Sourced from @​mui/x-data-grid's releases.

v9.12.0

We'd like to extend a big thank you to the 12 contributors who made this release possible. Here are some highlights ✨:

• 🧮 Support Formulas on the Data Grid: cells in opted-in columns can hold spreadsheet-like formulas (=SUM(RANGE(…)), =price * quantity) evaluated by a built-in engine, with a formula editor and Formula Bar, autocomplete, reference highlighting, optional A1 notation, fill-handle reference adjustment, custom functions, and live formula Excel export
• ♿️ Improve the accessibility of Data Grid cells and picker day cells
• 🗓️ Enable multi-resource event creation and editing in the Scheduler
• 🐞 Bugfixes
• 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​mustafajw07

The following team members contributed to this release: @​brijeshb42, @​flaviendelangle, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​silviuaavram

Data Grid

@mui/x-data-grid@9.12.0

• [DataGrid] Expose apiRef on GridCallbackDetails for selector access in callbacks (#22973) @​michelengelen
• [DataGrid] Fix header height not updating when headerFilters or columnGroupingModel change (#23059) @​MBilalShafi
• [DataGrid] Fix unhandled rejection when unmounting mid-autosize (#23319) @​JCQuintas
• [DataGrid] Label the blank singleSelect filter option (#23294) @​JCQuintas
• [DataGrid] Stop sending incomplete filter items to the data source (#23303) @​JCQuintas
• [DataGrid] Support the rowheader attribute for grid cells (#23340) @​silviuaavram

@mui/x-data-grid-pro@9.12.0

Same changes as in @mui/x-data-grid@9.12.0, plus:

• [DataGridPro] Honor hasNextPage in infinite lazy loading (#23048) @​MBilalShafi

@mui/x-data-grid-premium@9.12.0

Same changes as in @mui/x-data-grid-pro@9.12.0, plus:

• [DataGridPremium] Formula support (#22807) @​MBilalShafi

Date and Time Pickers

@mui/x-date-pickers@9.12.0

• [fields] Keep the selected section on blank space clicks (#23318) @​LukasTy
• [pickers] Associate the day cells with their week day column header (#23339) @​LukasTy
• [pickers] Keep the gridcell role and the column index on filler cells (#23326) @​Anexus5919

@mui/x-date-pickers-pro@9.12.0

Same changes as in @mui/x-date-pickers@9.12.0, plus:

... (truncated)

Changelog

Sourced from @​mui/x-data-grid's changelog.

9.12.0

Aug 21, 2026

We'd like to extend a big thank you to the 12 contributors who made this release possible. Here are some highlights ✨:

• 🧮 Support Formulas on the Data Grid: cells in opted-in columns can hold spreadsheet-like formulas (=SUM(RANGE(…)), =price * quantity) evaluated by a built-in engine, with a formula editor and Formula Bar, autocomplete, reference highlighting, optional A1 notation, fill-handle reference adjustment, custom functions, and live formula Excel export
• ♿️ Improve the accessibility of Data Grid cells and picker day cells
• 🗓️ Enable multi-resource event creation and editing in the Scheduler
• 🐞 Bugfixes
• 📚 Documentation improvements

Special thanks go out to these community members for their valuable contributions: @​Anexus5919, @​mustafajw07

The following team members contributed to this release: @​brijeshb42, @​flaviendelangle, @​JCQuintas, @​LukasTy, @​MBilalShafi, @​michelengelen, @​noraleonte, @​rita-codes, @​romgrk, @​silviuaavram

Data Grid

@mui/x-data-grid@9.12.0

• [DataGrid] Expose apiRef on GridCallbackDetails for selector access in callbacks (#22973) @​michelengelen
• [DataGrid] Fix header height not updating when headerFilters or columnGroupingModel change (#23059) @​MBilalShafi
• [DataGrid] Fix unhandled rejection when unmounting mid-autosize (#23319) @​JCQuintas
• [DataGrid] Label the blank singleSelect filter option (#23294) @​JCQuintas
• [DataGrid] Stop sending incomplete filter items to the data source (#23303) @​JCQuintas
• [DataGrid] Support the rowheader attribute for grid cells (#23340) @​silviuaavram

@mui/x-data-grid-pro@9.12.0

Same changes as in @mui/x-data-grid@9.12.0, plus:

• [DataGridPro] Honor hasNextPage in infinite lazy loading (#23048) @​MBilalShafi

@mui/x-data-grid-premium@9.12.0

Same changes as in @mui/x-data-grid-pro@9.12.0, plus:

• [DataGridPremium] Formula support (#22807) @​MBilalShafi

Date and Time Pickers

@mui/x-date-pickers@9.12.0

• [fields] Keep the selected section on blank space clicks (#23318) @​LukasTy
• [pickers] Associate the day cells with their week day column header (#23339) @​LukasTy
• [pickers] Keep the gridcell role and the column index on filler cells (#23326) @​Anexus5919

@mui/x-date-pickers-pro@9.12.0

... (truncated)

Commits

• ce0220b [release] v9.12.0 (#23382)
• d160993 [DataGridPremium] Formula support (#22807)
• 20cb519 [DataGrid] Expose apiRef on GridCallbackDetails for selector access in ca...
• 553d237 [test] Fix act warnings in the data source filter tests (#23360)
• 6d40a0d [DataGrid] Support the "rowheader" attribute for grid cells (#23340)
• 62c43fa [DataGrid] Stop sending incomplete filter items to the data source (#23303)
• 17580d3 [DataGrid] Fix header height not updating when headerFilters or `columnGrou...
• fef2279 [DataGrid] Fix unhandled rejection when unmounting mid-autosize (#23319)
• 3edb100 [DataGrid] Label the blank singleSelect filter option (#23294)
• See full diff in compare view

Updates mermaid from 11.16.1 to 11.17.1

Release notes

Sourced from mermaid's releases.

mermaid@11.17.1

Patch Changes

• #8092 31ce60a Thanks @​pbrolin47! - fix(c4): wrap element labels to c4.width again

  C4 element labels (System, Container, Component, Person and their _Ext variants) stopped wrapping in 11.17.0, so long descriptions rendered on one unbroken line and the shape grew sideways well past the configured c4.width. The unified-shapes label helper gated wrapping on the root-level wrap option, which has no schema default and is therefore undefined; it now gates on c4.wrap (default true), which is what the legacy renderer used.

• #8088 c66200b Thanks @​ashishjain0512! - fix: neo-look arrowheads and crow's-foot markers no longer fall back to default theme colours/stroke widths on the first render with layout: elk. State diagram arrowheads stayed dark on dark themes, and ER / requirement markers were drawn at the default stroke width, because markers were created from the layout package's own bundled copy of mermaid, whose config had not been initialized yet.

• #8079 281cd7b Thanks @​ashishjain0512! - fix(class): class diagram relation markers (composition, aggregation, extension, dependency, lollipop) no longer scale with the edge stroke width, so they stay outside the class box boundary in themes that set strokeWidth: 2 (redux, redux-dark, redux-color, redux-dark-color, neo, neo-dark) with the default classic look.

mermaid@11.17.0

Minor Changes

• #7842 3670b4e Thanks @​filipsajdak! - feat(c4): render C4 elements through the unified shape system, using the new person shape

• #7812 cdfc0ea Thanks @​knsv-bot! - feat(class): route classDiagram to the unified (v2) renderer by default

  Set class: { defaultRenderer: 'dagre-d3' } in the config to restore the legacy renderer.

• #7785 c45cde9 Thanks @​knsv-bot! - feat(flowchart): add collapsible flowchart subgraphs via subgraphId@{ view: collapsed }

• #7828 8eb3afc Thanks @​knsv-bot! - feat(elk): add elk.keepEntryNodeOnTop config option to keep a recursive flow's entry node on top

• #7803 74e44eb Thanks @​knsv-bot! - feat(elk): add elk.nodePlacementAlignment config option

• #7792 ea55b31 Thanks @​RodrigojndSantos! - feat(er): add subgraph support to ER diagrams.

• #7970 a2c0fb6 Thanks @​filipsajdak! - feat(flowchart): add folder, bucket, console (terminal window) and browser shapes

• #7842 ae3e115 Thanks @​filipsajdak! - feat(flowchart): add person shape (circular head above a rounded body), usable in flowcharts via A@{ shape: person }

• #7724 0fd7a9f Thanks @​xdumaine! - feat(xyChart): add legends for named line and bar series

Patch Changes

• #7847 215fe89 Thanks @​filipsajdak! - fix(c4): named attributes such as $tags, $link and $sprite are no longer clobbered to undefined when they arrive in an earlier positional slot of Person/System/Container/Component/Boundary/Rel statements.

• #7871 8d874c4 Thanks @​knsv-bot! - fix(flowchart): stop dagre layout from spamming warn-level logs on every node/edge/cluster

• #8071 b3d1f63 Thanks @​pbrolin47! - fix(block): sibling blocks overlapping in block diagrams when one has a label wider than 200px

• #7870 71b8843 Thanks @​knsv-bot! - fix: a RangeError: Invalid array length crash when rendering certain edges.

• #7924 9cbef5d Thanks @​nightt5879! - fix(treeView): icons disappearing after strict security sanitization.

• #7850 a34cbf0 Thanks @​aloisklink! - fix(block): allow classdefs to update text color

• #7937 f9cbe1e Thanks @​filipsajdak! - fix(dagre): let a diagram's own nodeSpacing/rankSpacing take effect in the unified dagre layout

... (truncated)

Commits

• 569f46e Version Packages (#8114)
• 3054836 Version Packages
• 5b17e0a Merge pull request #8092 from mermaid-js/hotfix/11.17.1
• 655211a Reverted change of wrap-options
• 8a23480 Updated doc from feedback
• 412c80a Update doc and consistent handlig in c4 as for seq diags
• b433a9a Updated changeset to describe specifik diagram affected
• 6bae15e Updated tests to Playwright API
• 1a96110 fix(dev): dedupe @​codemirror/state so the dev explorer editor loads
• adba7fe Merge branch 'hotfix/11.17.1' of github.com:mermaid-js/mermaid into hotfix/11...
• Additional commits viewable in compare view

Updates cspell from 10.0.1 to 10.1.0

Release notes

Sourced from cspell's releases.

v10.1.0

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:

<testsuite tests="3">
  <testcase classname="File1" name"/>
  <testcase classname="File2" name="AnotherSuccessfulTest"/>
  <testcase classname="foo3" name="AFailingTest">
    <failure type="prohibited word"> zzz </failure>
  </testcase>
</testsuite>

This PR follows that shape but wraps it in a <testsuites> root and groups by file (one <testsuite> per file, suite name = file path), since that is the convention used by other widely-consumed JUnit reporters (for example ESLint's JUnit formatter) and is what most CI JUnit parsers expect. The package README documents the full mapping.

• package.json, tsconfig.json, test framework, and files/exports/publishConfig shape are copied from cspell-json-reporter. Version pinned to 10.0.1 to match the monorepo's locked versioning.
• No third-party XML library was added. The repo has no existing XML dependency, so a small escaping helper (src/utils/escapeXml.ts) and a pure XML-string builder (src/utils/buildJUnitXml.ts) were written in-repo, consistent with the monorepo's small-utility-file convention.
• Unit tests (32) cover: no files, a clean file (single passing testcase), a file with issues, escaping of special characters in paths/words/messages, a skipped file, and non-issue processing errors (error emitter routed to a dedicated cspell-errors testsuite using <error>).

Assumptions the issue thread left ambiguous, called out for review:

1. One <testsuite> per file rather than one flat suite for the whole run. Matches common JUnit reporter convention and keeps per-file counts meaningful in CI UIs.
2. A clean file gets one synthetic passing <testcase name="no issues found"> so a suite is never reported with tests="0", which some JUnit consumers treat as suspicious.
3. Settings are intentionally slimmer than cspell-json-reporter's (outFile, suiteName only). JUnit XML has no natural place for arbitrary debug/progress log dumps.
4. cspell processing errors are reported as <error> elements, distinct from spelling <failure> elements, per the JUnit failure-vs-error distinction.

Verified locally: tsc -b clean, vitest 32/32, eslint and prettier clean, and the full monorepo build:prod succeeds with the package in the workspace. One environment note: the package's CLI smoke-test script wasn't runnable locally (repo requires Node >=22.18.0, local was 22.17.0 — the sibling json-reporter fails identically there), so CI is the first place it will run.

---

Fixes

fix: allow substitutions across ignored ranges (#9017)

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.1.0 (2026-08-22)

Features

feat(cspell-junit-reporter): add JUnit XML reporter package (#8945)

Closes #4570.

Adds @cspell/cspell-junit-reporter, a new workspace package modeled on packages/cspell-json-reporter, that emits a JUnit-compatible XML report of a cspell run.

The issue asked for a minimal mapping along the lines of:

<testsuite tests="3">
  <testcase classname="File1" name"/>
  <testcase classname="File2" name="AnotherSuccessfulTest"/>
  <testcase classname="foo3" name="AFailingTest">
    <failure type="prohibited word"> zzz </failure>
  </testcase>
</testsuite>

This PR follows that shape but wraps it in a <testsuites> root and groups by file (one <testsuite> per file, suite name = file path), since that is the convention used by other widely-consumed JUnit reporters (for example ESLint's JUnit formatter) and is what most CI JUnit parsers expect. The package README documents the full mapping.

• package.json, tsconfig.json, test framework, and files/exports/publishConfig shape are copied from cspell-json-reporter. Version pinned to 10.0.1 to match the monorepo's locked versioning.
• No third-party XML library was added. The repo has no existing XML dependency, so a small escaping helper (src/utils/escapeXml.ts) and a pure XML-string builder (src/utils/buildJUnitXml.ts) were written in-repo, consistent with the monorepo's small-utility-file convention.
• Unit tests (32) cover: no files, a clean file (single passing testcase), a file with issues, escaping of special characters in paths/words/messages, a skipped file, and non-issue processing errors (error emitter routed to a dedicated cspell-errors testsuite using <error>).

Assumptions the issue thread left ambiguous, called out for review:

1. One <testsuite> per file rather than one flat suite for the whole run. Matches common JUnit reporter convention and keeps per-file counts meaningful in CI UIs.
2. A clean file gets one synthetic passing <testcase name="no issues found"> so a suite is never reported with tests="0", which some JUnit consumers treat as suspicious.
3. Settings are intentionally slimmer than cspell-json-reporter's (outFile, suiteName only). JUnit XML has no natural place for arbitrary debug/progress log dumps.
4. cspell processing errors are reported as <error> elements, distinct from spelling <failure> elements, per the JUnit failure-vs-error distinction.

Verified locally: tsc -b clean, vitest 32/32, eslint and prettier clean, and the full monorepo build:prod succeeds with the package in the workspace. One environment note: the package's CLI smoke-test script wasn't runnable locally (repo requires Node >=22.18.0, local was 22.17.0 — the sibling json-reporter fails identically there), so CI is the first place it will run.

---

Fixes

fix: allow substitutions across ignored ranges (#9017)

... (truncated)

Commits

• 401518c v10.1.0
• acf8449 chore: Prepare Release v10.1.0 (auto-deploy) (#8883)
• 3078371 fix: Workflow Bot -- Update Dictionaries (main) (#9024)
• f557824 ci: Workflow Bot -- Update ALL Dependencies (main) (#9014)
• 1c11da6 ci: Workflow Bot -- Update ALL Dependencies (main) (#8970)
• 67448c8 chore: bump the development-dependencies group across 1 directory with 16 upd...
• ce30dc7 chore: bump chalk from 5.6.2 to 6.0.0 (#8973)
• 9703748 ci: Workflow Bot -- Update ALL Dependencies (main) (#8952)
• c8b94a7 doc: Update Node version requirement to 22 (#8940)
• 69c4b7f chore: bump commander from 14.0.3 to 15.0.0 (#8925)
• Additional commits viewable in compare view

Updates oxfmt from 0.63.0 to 0.65.0

Commits

• 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
• 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
• c07fe7c feat(oxfmt): support experimentalOperatorPosition (#25643)
• fed6681 docs(oxfmt): skip expanding overrides options (#25572)
• See full diff in compare view

Updates oxlint from 1.78.0 to 1.80.0

Release notes

Sourced from oxlint's releases.

oxlint v1.80.0 & oxfmt v0.65.0

Table of Contents

• Oxlint v1.80.0
• Oxfmt v0.65.0

Oxlint v1.80.0

🚀 Features

• 70c3e35 linter/typescript/no-confusing-non-null-assertion: Implement suggestion (#26012) (Mikhail Baev)

🐛 Bug Fixes

• 17ae11c linter/oxc/double-comparisons: Handle grouped logical expressions (#26044) (camc314)
• 8a353a7 linter/eslint/no-control-regex: Refine help message text (#25996) (Rahul Mishra)
• 8a9bdbd estree: Include decorators in FormalParameterRest spans (#26021) (camc314)
• 8d94cd1 linter/eslint/no-useless-rename: Preserve type modifiers (#26020) (Cameron)
• 2cde1f6 rust: Address nightly deprecations (#25998) (Boshen)
• 51d36d7 linter/vue: Resolve vue imports via shared import helpers (#25903) (Connor Shea)
• 83a68d2 linter/react/no-react-children: Resolve react imports by symbol (#25901) (Connor Shea)
• 124e196 linter: Resolve globals by reference, not by name (#25905) (Connor Shea)
• a701bcc linter: Remove invalid React compiler doc links (#25900) (Boshen)

📚 Documentation

• 9b7e153 linter: Set version to 1.79.0 for rules shipped in 1.79.0 (#25902) (connorshea)

Oxfmt v0.65.0

🐛 Bug Fixes

• bf37dd5 formatter: Preserve class decorators before export when the statement is suppressed (#26034) (leaysgur)

oxlint v1.79.0 & oxfmt v0.64.0

Table of Contents

• Oxlint v1.79.0
• Oxfmt v0.64.0

Oxlint v1.79.0

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

See React Compiler Support for details.

🚀 Features

• 9b7394e linter/typescript/no-empty-object-type: Implement suggestion (#25833) (Mikhail Baev)

🐛 Bug Fixes

... (truncated)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

[1.79.0] - 2026-08-18

💥 BREAKING CHANGES

• 8c4552d linter: [BREAKING] Split react/react-compiler into per-category rules (#25500) (Boshen)

🐛 Bug Fixes

• 228e8e0 linter: Resolve inactive React compiler rules (#25830) (Boshen)
• aa49d86 linter: Allow spread rule options in config types (#25675) (ch3rry)
• 36f8451 linter/eslint/no-eval: Align indirect default with ESLint (#25656) (camc314)
• beb724d linter/eslint/no-unused-vars: Report bare underscore parameters (#25663) (camc314)
• 4004c10 linter/eslint/no-irregular-whitespace: Check comments by default (#25660) (camc314)
• 285820e linter/no-large-snapshots: Precompile and document allowed snapshot matchers (#25611) (Mikhail Baev)
• 4df5835 linter: Allow capitalized built-in calls (#25516) (Boshen)

Commits

• 97e99b8 release(apps): oxlint v1.80.0 && oxfmt v0.65.0 (#26045)
• 0db127c release(apps): oxlint v1.79.0 && oxfmt v0.64.0 (#25866)
• 228e8e0 fix(linter): resolve inactive React compiler rules (#25830)
• aa49d86 fix(linter): allow spread rule options in config types (#25675)
• 8922381 refactor(linter): remove inactive react config rule (#25740)
• 8c4552d feat(linter)!: split react/react-compiler into per-category rules (#25500)
• 36f8451 fix(linter/eslint/no-eval): align indirect default with ESLint (#25656)
• beb724d fix(linter/eslint/no-unused-vars): report bare underscore parameters (#25663)
• 4004c10 fix(linter/eslint/no-irregular-whitespace): check comments by default (#25660)
• 285820e fix(linter/no-large-snapshots): precompile and document allowed snapshot matc...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[netlify]

✅ Deploy Preview for pomerium-docs ready!

Name	Link
🔨 Latest commit	675b6a0
🔍 Latest deploy log	https://app.netlify.com/projects/pomerium-docs/deploys/6a908ca759625b00096a61b6
😎 Deploy Preview	https://deploy-preview-2355--pomerium-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[greptile-apps]

Greptile Summary

Updates five npm dependencies and regenerates the lockfile for their associated transitive packages.

• Upgrades @mui/x-data-grid and Mermaid runtime dependencies.
• Upgrades cspell, oxfmt, and oxlint development tools.
• Synchronizes the lockfile root engine metadata with the repository’s Node 24/npm 11 requirements.

Confidence Score: 5/5

The dependency update appears safe to merge, with no concrete blocking or non-blocking defects identified.

The changed packages remain compatible with the repository configurations examined, CI installs the integrity-pinned lockfile using npm 11, and the documented oxlint breaking change does not affect any enabled rule.

Important Files Changed

Filename	Overview
package.json	Advances five dependency ranges without introducing a concrete configuration or compatibility defect.
package-lock.json	Resolves the upgraded dependency graph and preserves the Node 24/npm 11 toolchain alignment required for reliable clean installs.

_{Reviews (1): Last reviewed commit: "Build(deps): Bump the npm group with 5 u..." | Re-trigger Greptile}