[dependabot]

Bumps maplibre-gl to 6.11.2 and updates ancestor dependency plotly.js. These dependencies need to be updated together.

Updates maplibre-gl from 4.7.1 to 6.11.2

Release notes

Sourced from maplibre-gl's releases.

v6.11.2

✨ Features and improvements

• Improve rendering performance by uploading each tile's projection data once per frame instead of before every draw call (#8545) (by @​birkskyum)
• Support multiple glyph variants in requests, caches, and atlases (#8488) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix Map#once(type, layerId, listener) unsubscribing on the first event that misses the layer instead of the first event that hits it (#8499) (by @​cherenkov)
• Remove hillshade gradient toward the poles (#8551) (by @​birkskyum)
• Fix camera settings being undone during camera movement with terrain or transformCameraUpdate (#8550) (by @​birkskyum)
• Fix zooming and panning with the pointer above the horizon moving the map in the opposite direction (#8544) (by @​birkskyum)
• Fix the camera jumping when a drag over terrain ends at a pitch above 84° (#8541) (by @​birkskyum)
• Ease the center elevation over terrain during easeTo and flyTo instead of holding it and jumping when the animation ends (#8543) (by @​johncarmack1984)
• Fix fitBounds and cameraForBounds throwing on the globe projection when the padding exceeds the viewport, instead of warning and returning undefined as on mercator (#8538) (by @​drakeo338)
• Keep raster tiles sharp at a fractional devicePixelRatio, where the canvas covered a different number of device pixels than its backing store held and the compositor rescaled it (#1590) (by @​zdila)

v6.11.1

🐞 Bug fixes

• Fix missing promoteId when merging queued updateData diffs in geojson source (#8500) (by @​cherenkov)
• Sanitize attribution with an allow list of tags and attributes rather than a list of known-dangerous ones (#8532) (by @​HarelM)
• Fix the camera jumping or bobbing around gestures over terrain, and ignoring terrain that loads after easeTo/flyTo (#8471) (by @​johncarmack1984)
• Stop sending a vector tile to the worker when it was dropped while its request was being transformed or while the worker was still starting up, which left the parsed tile in the worker for the lifetime of the map (#8516) (by @​cherenkov)

v6.11.0

✨ Features and improvements

• Fire a contextmenu map event on long press for touch devices (#373) (by @​kirthi-b)
• Transition paint, light and sky properties that read global-state from the value they had when the state changes, where they snapped to the new value while holding idle for the transition duration (#8395) (by @​avosa)
• Speed up cross-tile symbol matching for sources with promoteId by keying symbols on their feature id as well as their label (#8470, continues #7665) (by @​bradymadden97 and @​johncarmack1984)
• Add Map#calculateAnchoredCameraOptions to calculate camera options that place a geographic anchor at a screen position without moving the map (#8288) (by @​xavierjs)
• Skip the loaded-tile scan for constant symbol-height-offset layers when computing tile coverage (#8424) (by @​clement-igonet)
• Type and document that an addProtocol handler may return an ImageBitmap or HTMLImageElement for an image resource, so decoded pixels are not encoded and decoded again (#8515) (by @​MannXo)

🐞 Bug fixes

• Fade the globe atmosphere in with the camera's altitude, so the sky keeps the horizon until the atmosphere takes over from space (#8464) (by @​birkskyum)
• Report worker script failures through the map error event (#8018) (by @​xavierjs)
• Fix slow panning and zooming in Firefox on macOS since 6.8.0 (#8468) (by @​timsluis and @​birkskyum)
• Keep source-specific tile LOD settings from changing internal terrain render-to-texture tile selection (#8048) (by @​DoFabien)
• Fix map.setSky() silently keeping the old sky and firing no error event when the value included a -transition key (#8375) (by @​Yasser-Ameur)
• Fix markers and popups misplaced after a projection change or by terrain that loads after the map settled. (#8433) (by @​patte)
• Insert sanitized attribution HTML as DOM nodes instead of re-parsing a serialized string (#8528) (by @​cherenkov)

v6.10.0

✨ Features and improvements

... (truncated)

Changelog

Sourced from maplibre-gl's changelog.

6.11.2

✨ Features and improvements

• Improve rendering performance by uploading each tile's projection data once per frame instead of before every draw call (#8545) (by @​birkskyum)
• Support multiple glyph variants in requests, caches, and atlases (#8488) (by @​NEKOYASAN)

🐞 Bug fixes

• Fix Map#once(type, layerId, listener) unsubscribing on the first event that misses the layer instead of the first event that hits it (#8499) (by @​cherenkov)
• Remove hillshade gradient toward the poles (#8551) (by @​birkskyum)
• Fix camera settings being undone during camera movement with terrain or transformCameraUpdate (#8550) (by @​birkskyum)
• Fix zooming and panning with the pointer above the horizon moving the map in the opposite direction (#8544) (by @​birkskyum)
• Fix the camera jumping when a drag over terrain ends at a pitch above 84° (#8541) (by @​birkskyum)
• Ease the center elevation over terrain during easeTo and flyTo instead of holding it and jumping when the animation ends (#8543) (by @​johncarmack1984)
• Fix fitBounds and cameraForBounds throwing on the globe projection when the padding exceeds the viewport, instead of warning and returning undefined as on mercator (#8538) (by @​drakeo338)
• Keep raster tiles sharp at a fractional devicePixelRatio, where the canvas covered a different number of device pixels than its backing store held and the compositor rescaled it (#1590) (by @​zdila)

6.11.1

🐞 Bug fixes

• Fix missing promoteId when merging queued updateData diffs in geojson source (#8500) (by @​cherenkov)
• Sanitize attribution with an allow list of tags and attributes rather than a list of known-dangerous ones (#8532) (by @​HarelM)
• Fix the camera jumping or bobbing around gestures over terrain, and ignoring terrain that loads after easeTo/flyTo (#8471) (by @​johncarmack1984)
• Stop sending a vector tile to the worker when it was dropped while its request was being transformed or while the worker was still starting up, which left the parsed tile in the worker for the lifetime of the map (#8516) (by @​cherenkov)

6.11.0

✨ Features and improvements

• Fire a contextmenu map event on long press for touch devices (#373) (by @​kirthi-b)
• Transition paint, light and sky properties that read global-state from the value they had when the state changes, where they snapped to the new value while holding idle for the transition duration (#8395) (by @​avosa)
• Speed up cross-tile symbol matching for sources with promoteId by keying symbols on their feature id as well as their label (#8470, continues #7665) (by @​bradymadden97 and @​johncarmack1984)
• Add Map#calculateAnchoredCameraOptions to calculate camera options that place a geographic anchor at a screen position without moving the map (#8288) (by @​xavierjs)
• Skip the loaded-tile scan for constant symbol-height-offset layers when computing tile coverage (#8424) (by @​clement-igonet)
• Type and document that an addProtocol handler may return an ImageBitmap or HTMLImageElement for an image resource, so decoded pixels are not encoded and decoded again (#8515) (by @​MannXo)

🐞 Bug fixes

• Fade the globe atmosphere in with the camera's altitude, so the sky keeps the horizon until the atmosphere takes over from space (#8464) (by @​birkskyum)
• Report worker script failures through the map error event (#8018) (by @​xavierjs)
• Fix slow panning and zooming in Firefox on macOS since 6.8.0 (#8468) (by @​timsluis and @​birkskyum)
• Keep source-specific tile LOD settings from changing internal terrain render-to-texture tile selection (#8048) (by @​DoFabien)
• Fix map.setSky() silently keeping the old sky and firing no error event when the value included a -transition key (#8375) (by @​Yasser-Ameur)
• Fix markers and popups misplaced after a projection change or by terrain that loads after the map settled. (#8433) (by @​patte)
• Insert sanitized attribution HTML as DOM nodes instead of re-parsing a serialized string (#8528) (by @​cherenkov)

6.10.0

... (truncated)

Commits

• acb7b72 Bump js version to 6.11.2 (#8555)
• d28f844 fix: Map#once with layerId unsubscribes only after a real hit (#8499)
• 99d0160 Support multiple glyph variants (#8488)
• 98268d3 Fix globe cameraForBoxAndBearing throwing when padding exceeds the viewport (...
• f560a83 Size the canvas to whole device pixels (#8513)
• 7a897d0 Remove hillshade gradient toward the poles (#8551)
• 0dff33a Fix camera settings being undone during camera movement (#8550)
• c2031bf GM2.8 Upload projection data once per tile instead of once per draw (#8545)
• 728a44c Fix zoom and drag above the horizon moving the map the wrong way (#8544)
• 3dfdce0 refactor: one method builds the mercator animation's end transform (#8546)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for maplibre-gl since your current version.

Updates plotly.js from 2.35.3 to 4.1.2

Release notes

Sourced from plotly.js's releases.

v4.1.2

Changed

• Use ResizeObserver for responsive chart resizing instead of listening for window resize events [#8017], with thanks to @​Lexachoc for the contribution!
• Describe config.toImageButtonOptions in the plot schema [#8066]

Fixed

• Fix modebar hover colors not updating after color or activecolor changes [#8024], with thanks to @​Lexachoc for the contribution!
• Correct the image export types: format now accepts full-json, width and height accept null, and ToImgopts.format, ToImgopts.width, ToImgopts.height and DownloadImgopts.filename are optional because toImage and downloadImage supply them [#8066]
• Pick the trace drawn last on a hover tie in scattergl and splom (matching scatter) [#8079]
• Allow typed arrays in the types for arrayOk number and color attributes [#8087]
• Redraw plots when a font that they use finishes loading [#8094]

v4.1.1

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

v4.1.0

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

v4.0.0

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]

... (truncated)

Changelog

Sourced from plotly.js's changelog.

[4.1.2] -- 2026-10-05

Changed

• Use ResizeObserver for responsive chart resizing instead of listening for window resize events [#8017], with thanks to @​Lexachoc for the contribution!
• Describe config.toImageButtonOptions in the plot schema [#8066]

Fixed

• Fix modebar hover colors not updating after color or activecolor changes [#8024], with thanks to @​Lexachoc for the contribution!
• Correct the image export types: format now accepts full-json, width and height accept null, and ToImgopts.format, ToImgopts.width, ToImgopts.height and DownloadImgopts.filename are optional because toImage and downloadImage supply them [#8066]
• Pick the trace drawn last on a hover tie in scattergl and splom (matching scatter) [#8079]
• Allow typed arrays in the types for arrayOk number and color attributes [#8087]
• Redraw plots when a font that they use finishes loading [#8094]

[4.1.1] -- 2026-09-14

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

[4.1.0] -- 2026-09-08

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

[4.0.0] -- 2026-08-24

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!

... (truncated)

Commits

• bea2af3 4.1.2
• 9a72399 chore: Updates for release v4.1.2
• dc94a20 chore: Update maplibre worker
• bf76578 chore: Update dependencies, drop extra-iterable
• 67cc7fa Merge pull request #8094 from plotly/cam/8089/replot-after-font-load
• c281d99 Be more general in font check
• b2aa6c2 Use promises for tracking font loading because of Safari limitations
• aa44890 Add draftlog
• dd658b1 Update internal GraphDiv type
• 351fe89 Add tests
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by camdecoster, a new releaser for plotly.js since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.