Skip to content

Bump maplibre-gl and plotly.js - #385

Merged
camdecoster merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d63e62b580
Sep 16, 2026
Merged

camdecoster merged 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d63e62b580

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps maplibre-gl to 6.9.0 and updates ancestor dependency plotly.js. These dependencies need to be updated together.

Updates maplibre-gl from 4.7.1 to 6.9.0

Release notes

Sourced from maplibre-gl's releases.

v6.9.0

✨ Features and improvements

  • Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates setRTLTextPlugin and getRTLTextPluginStatus (#8343) (by @​HarelM)
  • Read sprite and image pixels back through an OffscreenCanvas where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (#8339) (by @​cherenkov)
  • Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (#8369) (by @​johncarmack1984)
  • Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (#8368) (by @​johncarmack1984)

🐞 Bug fixes

  • Fix setStyle() throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (#6824) (by @​miakh)
  • Fix queued GeoJSON updateData property removals throwing after geometry-only updates or retaining previously updated values (#8372) (by @​jokrasno)
  • Treat camera options passed as undefined as not given in jumpTo, easeTo and flyTo; they were coerced to NaN (#8373) (by @​vlumi)
  • Fix a Not implemented. error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a transformCameraUpdate callback (#8351) (by @​lazerg)
  • Fix a map created inside a hidden container staying at the 400x300 fallback size when the container is shown before the resize observer's first notification is delivered (#8277) (by @​spliffone)
  • Fix MercatorTransform throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (#8374) (by @​avosa)
  • Fix every style update opening a redundant sky and light transition, which kept idle from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (#8348) (by @​cherenkov)
  • Fix DOM sanitization for iframe and srcdoc (#8396) (by @​HarelM)

v6.8.0

✨ Features and improvements

  • Add map.getStyleUrl(), which returns the URL the style was loaded from, or null when the style was given as an object (#7109) (by @​bradymadden97 and @​giswqs)
  • Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (#8328, continues #7673) (by @​AveryanAlex)
  • Build the Intl.Segmenter instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (#8337) (by @​cherenkov)
  • Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (#8338) (by @​cherenkov)
  • Build the default Marker pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (#8340) (by @​cherenkov)
  • Add SDF rendering support for fill patterns, using fill-color as the foreground color (#7747) (by @​bradymadden97 and @​deniial00)
  • Warn once when the canvas is clamped to maxCanvasSize, which previously lowered the rendered resolution silently (#8200) (by @​str0kes)

🐞 Bug fixes

  • Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (#5655, #8326, continues #5956) (by @​yuiseki)
  • Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (#8251) (by @​patte)
  • Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (#7382) (by @​birkskyum)
  • Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a dem dimension mismatch error, and empty raster tiles render as transparent (#1551) (by @​clement-igonet)
  • Validate the before layer in map.moveLayer before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (#8301) (by @​lazerg)
  • Fix visible seams between hillshade tiles when using linear interpolation. (#8302) (by @​Turbo87)
  • Fix the map freezing when a render task throws an error (#6093) (by @​UberMouse)
  • Fix getCameraAltitude() returning NaN under globe and vertical-perspective, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (#6584) (by @​bigmistqke and @​patte)
  • Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (#8253) (by @​clement-igonet)
  • Fix setTiles producing stale tile URLs when loadTile runs in the same frame (#8323) (by @​johncarmack1984 and @​nostrorom)
  • Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large symbol-height-offset stays visible until it is behind the planet (#8316) (by @​clement-igonet)

v6.7.0

✨ Features and improvements

  • Support the style specification's font-faces property, with map.setFontFaces and map.getFontFaces and improve complex script languages such as Devanagari, Khmer, Burmese and Hebrew (#8237) (by @​HarelM)

... (truncated)

Changelog

Sourced from maplibre-gl's changelog.

6.9.0

✨ Features and improvements

  • Improved support for drawing the letters of Devanagari, Khmer, Burmese and the other complex scripts and also draws Arabic and Hebrew labels correctly without loading a right-to-left text plugin, which deprecates setRTLTextPlugin and getRTLTextPluginStatus (#8343) (by @​HarelM)
  • Read sprite and image pixels back through an OffscreenCanvas where available, removing a main-thread stall of tens of milliseconds on GPU-accelerated browsers when a sprite loads (#8339) (by @​cherenkov)
  • Skip clipping masks for layers hidden at the current zoom and stop re-binding dynamic buffers on cached vertex array binds, removing redundant WebGL calls every frame (#8369) (by @​johncarmack1984)
  • Re-render at most one stale terrain drape per frame and keep drapes that differ only by zoom while the map moves, so a finger lift over terrain no longer re-renders every tile at once (#8368) (by @​johncarmack1984)

🐞 Bug fixes

  • Fix setStyle() throwing while terrain is still loading because an intermediate render tried to compile a terrain shader before the replacement style initialized its projection (#6824) (by @​miakh)
  • Fix queued GeoJSON updateData property removals throwing after geometry-only updates or retaining previously updated values (#8372) (by @​jokrasno)
  • Treat camera options passed as undefined as not given in jumpTo, easeTo and flyTo; they were coerced to NaN (#8373) (by @​vlumi)
  • Fix a Not implemented. error that broke panning and zooming when the projection was changed while the camera was moving, on maps with terrain enabled or a transformCameraUpdate callback (#8351) (by @​lazerg)
  • Fix a map created inside a hidden container staying at the 400x300 fallback size when the container is shown before the resize observer's first notification is delivered (#8277) (by @​spliffone)
  • Fix MercatorTransform throwing when it is resized to a zero width, and skip the matrix calculation of every projection while the transform has a zero width or height (#8374) (by @​avosa)
  • Fix every style update opening a redundant sky and light transition, which kept idle from firing for the transition duration after the map was otherwise done, and could ease the sky and the light on a different curve from the layers (#8348) (by @​cherenkov)
  • Fix DOM sanitization for iframe and srcdoc (#8396) (by @​HarelM)

6.8.0

✨ Features and improvements

  • Add map.getStyleUrl(), which returns the URL the style was loaded from, or null when the style was given as an object (#7109) (by @​bradymadden97 and @​giswqs)
  • Sample terrain render-to-texture output through mipmaps with trilinear filtering, so draped layers stop shimmering and aliasing at high pitch (#8328, continues #7673) (by @​AveryanAlex)
  • Build the Intl.Segmenter instances used for text shaping on first use instead of at import, shaving several milliseconds off loading MapLibre on the main thread (#8337) (by @​cherenkov)
  • Link shader programs before reading their compile status, so the driver can overlap the compiles and the main thread waits less on shader compilation (#8338) (by @​cherenkov)
  • Build the default Marker pin once and clone it per marker, so creating many default markers takes roughly half the constructor time (#8340) (by @​cherenkov)
  • Add SDF rendering support for fill patterns, using fill-color as the foreground color (#7747) (by @​bradymadden97 and @​deniial00)
  • Warn once when the canvas is clamped to maxCanvasSize, which previously lowered the rendered resolution silently (#8200) (by @​str0kes)

🐞 Bug fixes

  • Fix a marker's popup jumping to another world copy when the marker is moved across the antimeridian on a zoomed-out map (#5655, #8326, continues #5956) (by @​yuiseki)
  • Fix terrain drape textures not being refreshed after zoom changes, causing stale rendering at the new zoom level (#8251) (by @​patte)
  • Fix a gap between the sky and the ground at high pitch while globe transitions to mercator (#7382) (by @​birkskyum)
  • Treat an empty tile response (e.g. HTTP 204) as no data: raster-DEM tiles now load without elevation instead of failing with a dem dimension mismatch error, and empty raster tiles render as transparent (#1551) (by @​clement-igonet)
  • Read the map container's dimensions before mutating it in Map#_setupContainer, avoiding a forced synchronous layout reflow on every map initialization (#8307) (by @​lazerg)
  • Validate the before layer in map.moveLayer before reordering, so passing the id of a layer that does not exist leaves the layer order untouched instead of dropping the moved layer out of it (#8301) (by @​lazerg)
  • Fix visible seams between hillshade tiles when using linear interpolation. (#8302) (by @​Turbo87)
  • Fix the map freezing when a render task throws an error (#6093) (by @​UberMouse)
  • Fix getCameraAltitude() returning NaN under globe and vertical-perspective, which disabled marker terrain occlusion and the camera terrain check; the altitude now follows the sphere (#6584) (by @​bigmistqke and @​patte)
  • Draw an elevated symbol on globe when the symbol itself is in view but the ground under it is behind the horizon; occlusion now follows the line of sight to the elevated point (#8253) (by @​clement-igonet)
  • Fix setTiles producing stale tile URLs when loadTile runs in the same frame (#8323) (by @​johncarmack1984 and @​nostrorom)
  • Keep the tile under an elevated symbol from being culled near the horizon, so a symbol with a large symbol-height-offset stays visible until it is behind the planet (#8316) (by @​clement-igonet)

6.7.0

✨ Features and improvements

... (truncated)

Commits
  • f985318 Bump js version to 6.9.0 (#8398)
  • b51d10a improve sanitization (#8396)
  • 3603401 chore(deps-dev): bump cssnano from 9.0.2 to 9.0.3 (#8390)
  • 3e3c447 chore(deps): bump @​maplibre/maplibre-gl-style-spec from 26.4.1 to 26.4.2 (#8391)
  • ea9f7df chore(deps): bump zensical/zensical from 0.0.59 to 0.0.60 (#8392)
  • ce10d22 feat: add bidi support and deprecate RTL plugin (#8343)
  • 86901c5 fix: stop re-opening sky and light transitions on every style update (#8350)
  • 54dfab1 chore(deps-dev): bump @​types/node from 26.4.0 to 26.4.1 (#8352)
  • 209e342 perf: skip hidden layers before their clipping masks and drop the dynamic buf...
  • 71a12d8 fix: skip terrain drawing until replacement projection is ready (#8258)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for maplibre-gl since your current version.


Updates plotly.js from 3.6.0 to 4.1.1

Release notes

Sourced from plotly.js's releases.

v4.1.1

Changed

  • Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
    • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

  • Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

v4.1.0

Added

  • Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
  • Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

  • Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

  • Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
  • Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
  • Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
  • Include type defs in appropriate partial bundles [#8001]
  • Add TypeScript declarations for the modular lib/ entry points [#8009]
  • Handle regex enum values when generating schema types [#8010]
  • Include trace-contributed layout attributes in generated types [#8020]
  • Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

v4.0.0

Added

  • Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
  • Enable TypeScript compatibility within the library and start exporting types [#7680]
  • Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
  • Use dashed markers in legend for shape traces with dash configured [#7845]
  • Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
    • forward keeps sources on the left (horizontal) or top (vertical)
    • reversed moves them to the right or bottom
  • Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
  • Add support for MathJax v4 [#7898]
  • Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
  • When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

  • Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
    • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
  • Breaking: Drop support for MathJax v2 [#7898]
    • MathJax v3 and v4 are now supported in plotly.js
  • Remove config attributes showLink, linkText, sendData, showSources, and showEditInChartStudio, as well as trace attribute stream, since all of these were associated with Chart Studio and are no longer needed [#7812]
  • Remove all *src attributes, as well as layout.hidesources attribute, from the schema [#7829]
  • Remove internal trace._fullInput property and other dead code related to the removed transforms feature. No user-facing changes expected [#7834]

Changed

... (truncated)

Changelog

Sourced from plotly.js's changelog.

plotly.js changelog

For more context information, please read through the release notes.

To see all merged commits on the main branch that will be part of the next plotly.js release, go to:

plotly/plotly.js@vX.Y.Z...main

where X.Y.Z is the semver of most recent plotly.js release.

[X.Y.Z] -- UNRELEASED

Changed

  • Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
    • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

  • Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

[4.1.0] -- 2026-09-08

Added

  • Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
  • Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

  • Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

  • Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
  • Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
  • Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
  • Include type defs in appropriate partial bundles [#8001]
  • Add TypeScript declarations for the modular lib/ entry points [#8009]
  • Handle regex enum values when generating schema types [#8010]
  • Include trace-contributed layout attributes in generated types [#8020]
  • Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

[4.0.0] -- 2026-08-24

Added

  • Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
  • Enable TypeScript compatibility within the library and start exporting types [#7680]
  • Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
  • Use dashed markers in legend for shape traces with dash configured [#7845]
  • Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
    • forward keeps sources on the left (horizontal) or top (vertical)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by aborrmann, a new releaser for plotly.js since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [maplibre-gl](https://github.com/maplibre/maplibre-gl-js) to 6.9.0 and updates ancestor dependency [plotly.js](https://github.com/plotly/plotly.js). These dependencies need to be updated together.


Updates `maplibre-gl` from 4.7.1 to 6.9.0
- [Release notes](https://github.com/maplibre/maplibre-gl-js/releases)
- [Changelog](https://github.com/maplibre/maplibre-gl-js/blob/main/CHANGELOG.md)
- [Commits](maplibre/maplibre-gl-js@v4.7.1...v6.9.0)

Updates `plotly.js` from 3.6.0 to 4.1.1
- [Release notes](https://github.com/plotly/plotly.js/releases)
- [Changelog](https://github.com/plotly/plotly.js/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.js@v3.6.0...v4.1.1)

---
updated-dependencies:
- dependency-name: maplibre-gl
  dependency-version: 6.9.0
  dependency-type: indirect
- dependency-name: plotly.js
  dependency-version: 4.1.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 16, 2026
@camdecoster
camdecoster merged commit d7ef3fd into main Sep 16, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-d63e62b580 branch September 16, 2026 13:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant