Fix CVE-2026-71436 by updating mermaid to patched version

.rebase/CHANGELOG.md

@@ -13,6 +13,13 @@ https://github.com/che-incubator/che-code/pull/791
 - code/test/monaco/package.json
 ---
 
+#### @sbouchet
+https://github.com/che-incubator/che-code/pull/797
+
+- code/extensions/mermaid-markdown-features/package.json
+- code/extensions/markdown-language-features/package.json
+---
+
 #### @rnikitenko
 https://github.com/che-incubator/che-code/commit/177a26a8ef76ea41a26eb6ac0ef9d6006b9af53e
 

.rebase/override/code/extensions/markdown-language-features/package.json

@@ -0,0 +1,5 @@
+{
+    "dependencies": {
+        "mermaid": "^11.17.1"
+    }
+}

.rebase/override/code/extensions/mermaid-markdown-features/package.json

@@ -0,0 +1,5 @@
+{
+    "dependencies": {
+        "mermaid": "^11.17.1"
+    }
+}

code/extensions/markdown-language-features/package.json

@@ -904,7 +904,7 @@
     "highlight.js": "^11.8.0",
     "katex": "^0.16.33",
     "markdown-it": "^14.2.0",
-    "mermaid": "^11.15.0",
+    "mermaid": "^11.17.1",
     "morphdom": "^2.7.7",
     "picomatch": "^2.3.2",
     "punycode": "^2.3.1",

code/extensions/mermaid-markdown-features/package.json

@@ -261,7 +261,7 @@
     "@mermaid-js/layout-tidy-tree": "^0.2.0",
     "@mermaid-js/mermaid-zenuml": "^0.2.0",
     "dompurify": "^3.4.10",
-    "mermaid": "^11.15.0"
+    "mermaid": "^11.17.1"
   },
   "overrides": {
     "lodash-es": "4.18.1",

rebase.sh

@@ -519,6 +519,8 @@ resolve_conflicts() {
       apply_package_changes_by_path "$conflictingFile"
     elif [[ "$conflictingFile" == "code/extensions/markdown-language-features/package.json" ]]; then
       apply_package_changes_by_path "$conflictingFile"
+    elif [[ "$conflictingFile" == "code/extensions/mermaid-markdown-features/package.json" ]]; then
+      apply_package_changes_by_path "$conflictingFile"
     elif [[ "$conflictingFile" == "code/src/vs/platform/workspaces/common/workspaceIdentifier.ts" ]]; then
       apply_changes_multi_line "$conflictingFile"
     else