Skip to content

chore(deps): bump echarts from 5.6.0 to 6.0.0#1618

Open
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/staging/echarts-6.0.0
Open

chore(deps): bump echarts from 5.6.0 to 6.0.0#1618
dependabot[bot] wants to merge 1 commit intostagingfrom
dependabot/npm_and_yarn/staging/echarts-6.0.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 10, 2026

Bumps echarts from 5.6.0 to 6.0.0.

Release notes

Sourced from echarts's releases.

6.0.0

  • [Feature] [theme] New theme for ECharts 6.0. #20865 #21097 #21114 (Ovilia)
  • [Feature] [chord] New chord series. #20522 (Ovilia)
  • [Feature] [matrix&calendar] New matrix coordinate system. And all series and components (including other coordinate systems, such as grid(Cartesian), geo, polar, etc.) are supported to be declaratively laid out in the cells of matrix and calendar coordinate system. #19807 #21093 (Ovilia) #21005 #21108 (100pah)
  • [Feature] [custom] Support reusable custom series. #20226 (Ovilia)
  • [Feature] [cartesian] Introduce new layout mechanism to avoid Cartesian (i.e., grid component) axis labels and axis names overflowing the canvas, prevent axis names from overlapping with axis labels, and make them the default. #21059 (100pah) #19534 (robin-gerling) #16825 (konrad-amtenbrink)
  • [Feature] [scatter] Support jittering for scatter series. #19941 #21067 (Ovilia)
  • [Feature] [axis] Support break on the axis. #19459 (Ovilia) #20857 (100pah)
  • [Feature] [theme] Support dynamically registering and switching themes. #20705 (Ovilia)
  • [Feature] [roam] Roaming infrastructure enhancement - support users specifying roaming area by roamTrigger; support clip on geo and series.map; support cursor style change when hovering on the roaming area; support preserveAspect on geo, series.map and series.graph; fix the percent base of center on geo, series.map, series.graph and series.tree; enhance the behavior for roaming area overlapping. #19807#issuecomment-2974437299 (100pah)
  • [Feature] [thumbnail] Support thumbnail for the graph series. #19807#issuecomment-3013454598 (100pah) #17471 (Lruler)
  • [Feature] [marker] Support z option for markPoint/markLine/markArea. #21117 (sz-p)
  • [Feature] [marker] Support z2 option for markPoint/markLine/markArea. #20782 (sz-p)
  • [Feature] [stack] Support reversing the stack order. #20998 (Justin-ZS)
  • [Feature] [sankey] Support roaming for sankey series. #20321 (Ovilia)
  • [Feature] [custom] Support compoundPath in custom series renderItem. #20402 #21040 (Ovilia)
  • [Feature] [marker] Support relativeTo option for specifying the relative target of marker position. #20166 #21042 (Ovilia)
  • [Feature] [axis] Support tooltip for angleAxis label. #20986 (plainheart)
  • [Feature] [tooltip] Support displayTransition option to control whether to enable the tooltip display transition. #20966 (jqqin)
  • [Feature] [visualMap] Support unboundedRange option. #21113 (100pah)
  • [Feature] [legend] Support triggerEvent option. #18164 #20907 (sz-p)
  • [Feature] [custom] Support tooltipDisabled for custom series. #20447 (Ovilia)
  • [Feature] [i18n] Add Norwegian Bokmål (nb-NO) translation. #20792 (joakimono)
  • [Feature] [i18n] Add Greek (EL) translation. #21119 (tassosgeo)
  • [Fix] [label] Fix label rich style does not inherit the plain label style. #20977 (plainheart) #21016 (100pah)
  • [Fix] [label] Fix label layout margin. #21103 (100pah)
  • [Fix] [dataZoom] Fix data shape distribution for time axis. #16978 (andrearoota) #21043 #21039 (Ovilia)
  • [Fix] [tooltip] Fix null value item on category axis should be able to show tooltip. #20777 (Justin-ZS)
  • [Fix] [visualMap] Fix some text style can't work on visualMap. #20961 (plainheart)
  • [Fix] [dataZoom] Restrict range on brushEnd. #20814 (mortalYoung)
  • [Fix] [heatmap] Fix labels not in calendar range are unexpectedly displayed. #20699 (plainheart)
  • [Fix] [series] Fix mismatched dimension index. #20682 (Justin-ZS)
  • [Fix] [bar] Fix polar bar should update roundCap when changes. #20582 (Ovilia)
  • [Fix] [pie] Fix labelLine may be not removed and cause error when single label position is not in outside. #20906 (plainheart)
  • [Fix] [sankey] Fix browser crash when emphasis.focus is 'trajectory' with large data. #20959 (plainheart)
  • [Fix] [custom] Fix potential NPE when applying leave transition. #20920 (plainheart)
  • [Fix] [tooltip] Fix potential memory leakage by explicitly unbinding event listeners. #21087 (seaheart)
  • [Fix] [axis] [log] Fix incorrect rounding usage, and support data with big negative exponent. #21107 (SihongShen) #21120 (100pah)
  • [Fix] [axis] Fix extreme small numbers can not be displayed in Cartesian due to the inappropriate rounding precision. #21120 (100pah) (SihongShen)
  • [Fix] [dataZoom] Change moveHandler cursor to default. #20304 (ribeirompl)
  • [Fix] [tooltip] Fix style coord transform markers are not removed after the tooltip is disposed. #20987 (plainheart)
  • [Fix] [bar] Remove unused startValue option from the BarSeriesOption interface. #20901 (plainheart)
  • [Fix] [title] Fix title text style width type should not include string. #20800 (sz-p)
  • [Fix] [radar] Fix blur.itemStyle not working. #21081 (mustcanbedo) #21124 (Ovilia)
  • [Fix] [roam] Fix RoamControllerHost importing path. #20313 (Ovilia)
  • [Fix] [svg] Remove SVG support check in getSvgDataURL. #20760 (plainheart)
  • [Break] Breaking changes against v5.6.0:
    • The default theme has been changed, including the visual style and the default location settings of components and series. For example, the default legend position is now at the bottom of the canvas. The new default settings are more reasonble, but if they affect the existing usage, use echarts/theme/v5.js to restore the old visual style and location settings. See #20865.
    • The v5 echarts/src/theme/light.ts is now migrated to echarts/theme/rainbow.js.
    • The position of Cartesian axes might shift slightly if the axis names or labels previously overflowed the canvas or overlapped, as anti-overflow and anti-axisLabel-axisName-overlap mechanism are enabled by default. In most cases that changes will be indiscernible to the naked eye. But if any unreasonable change occurs, you can use option grid.outerBoundsMode: 'none' to disable the anti-overflow mechanism, and/or use option xAxis/yAxis.axisLabel.nameMoveOverlap: false to disable the anti-axisLabel-axisName-overlap mechanism. See #21059.

... (truncated)

Commits
  • 52104f7 Merge pull request #21132 from apache/release-dev
  • 5e02596 chore: release
  • 771c523 chore: add license headers and a script of pre-commit
  • 8d7f252 Merge pull request #21127 from apache/release-dev
  • 64f8d9c chore: release 6.0.0-rc.1
  • 65efa66 test: add mark as expected
  • 5365621 Merge pull request #21126 from apache/fix-16266
  • 9055fef test(scale): add missing test
  • 8a40d27 Merge branch 'release' into fix-16266
  • 18b5db2 fix(scale): Fix that extreme small numbers can not be displayed in Cartesian ...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [echarts](https://github.com/apache/echarts) from 5.6.0 to 6.0.0.
- [Release notes](https://github.com/apache/echarts/releases)
- [Commits](apache/echarts@5.6.0...6.0.0)

---
updated-dependencies:
- dependency-name: echarts
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 10, 2026
@vercel
Copy link
Copy Markdown

vercel bot commented Apr 10, 2026

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
falkordb-browser Ready Ready Preview, Comment Apr 10, 2026 8:20am

Request Review

@overcut-ai
Copy link
Copy Markdown

overcut-ai bot commented Apr 10, 2026

Completed Working on "Code Review"

✅ Review submitted successfully: COMMENT. Total comments: 1 across 1 files.

✅ Workflow completed successfully.


👉 View complete log

Copy link
Copy Markdown

@overcut-ai overcut-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Review Summary

Findings by severity

  • BLOCKER: 0
  • CRITICAL: 0
  • MAJOR: 1
  • MINOR: 0
  • SUGGESTION: 0
  • PRAISE: 0

Key themes

  • Major dependency upgrade risk: ECharts 6 introduces breaking default behavior changes that can silently affect chart rendering and interaction.
  • Regression confidence gap: The PR lacks explicit compatibility guardrails and representative regression coverage for chart behavior/visuals.

Recommended next steps

  1. Add/update representative chart regression tests (visual/snapshot/UI) that cover core chart types used in the app.
  2. Preserve legacy chart behavior where needed via explicit options or compatibility theme settings.
  3. Re-verify chart layouts/interactions after upgrade (legend position, axis/label overlap handling, and related defaults).

"date-fns": "^4.1.0",
"depcheck": "^1.4.7",
"echarts": "^5.6.0",
"echarts": "^6.0.0",
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[major]: This dependency bump moves ECharts to 6.x (with transitive zrender 6.x), and ECharts 6 includes breaking default behavior changes (notably theme defaults and cartesian layout/anti-overflow behavior) that can silently alter existing chart visuals/interactions. The PR does not include migration safeguards or regression validation updates, which creates significant risk of shipping unnoticed UI regressions.

Before merging, add/update representative chart regression coverage (visual/snapshot/UI tests) and explicitly pin legacy behavior where required (for example applying ECharts v5 compatibility theme or explicit chart options to preserve prior legend/axis layout semantics).

@github-actions
Copy link
Copy Markdown

🔒 Trivy Security Scan Results


Report Summary

┌───────────────────────────────────────────────────────────────────────────┬──────────┬─────────────────┐
│                                  Target                                   │   Type   │ Vulnerabilities │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ falkordb/falkordb-browser:test (alpine 3.22.3)                            │  alpine  │        2        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@falkordb/text-to-cypher/package.json                    │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@img/colour/package.json                                 │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@img/sharp-libvips-linux-x64/package.json                │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@img/sharp-libvips-linuxmusl-x64/package.json            │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@img/sharp-linux-x64/package.json                        │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@img/sharp-linuxmusl-x64/package.json                    │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@js-temporal/polyfill/package.json                       │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@next/env/package.json                                   │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/bloom/package.json                                │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/client/dist/package.json                          │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/client/package.json                               │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/json/package.json                                 │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/search/package.json                               │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@redis/time-series/package.json                          │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/@swc/helpers/package.json                                │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/client-only/package.json                                 │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/cluster-key-slot/package.json                            │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/detect-libc/package.json                                 │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/falkordb/package.json                                    │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/jsbi/package.json                                        │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/lodash/package.json                                      │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/dist/compiled/@edge-runtime/cookies/package.json    │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/dist/compiled/@edge-runtime/ponyfill/package.json   │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/dist/compiled/@edge-runtime/primitives/package.json │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/dist/compiled/react-is/package.json                 │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/dist/compiled/regenerator-runtime/package.json      │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/next/package.json                                        │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/react-dom/package.json                                   │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/react/package.json                                       │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/redis/package.json                                       │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/semver/package.json                                      │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/sharp/package.json                                       │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/node_modules/styled-jsx/package.json                                  │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ app/package.json                                                          │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ opt/yarn-v1.22.22/package.json                                            │ node-pkg │        0        │
├───────────────────────────────────────────────────────────────────────────┼──────────┼─────────────────┤
│ usr/local/lib/node_modules/corepack/package.json                          │ node-pkg │        0        │
└───────────────────────────────────────────────────────────────────────────┴──────────┴─────────────────┘
Legend:
- '-': Not scanned
- '0': Clean (no security findings detected)


For OSS Maintainers: VEX Notice
--------------------------------
If you're an OSS maintainer and Trivy has detected vulnerabilities in your project that you believe are not actually exploitable, consider issuing a VEX (Vulnerability Exploitability eXchange) statement.
VEX allows you to communicate the actual status of vulnerabilities in your project, improving security transparency and reducing false positives for your users.
Learn more and start using VEX: https://trivy.dev/docs/v0.69/guide/supply-chain/vex/repo#publishing-vex-documents

To disable this notice, set the TRIVY_DISABLE_VEX_NOTICE environment variable.


falkordb/falkordb-browser:test (alpine 3.22.3)
==============================================
Total: 2 (HIGH: 2, CRITICAL: 0)

┌────────────┬────────────────┬──────────┬────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────┐
│  Library   │ Vulnerability  │ Severity │ Status │ Installed Version │ Fixed Version │                          Title                          │
├────────────┼────────────────┼──────────┼────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────┤
│ libcrypto3 │ CVE-2026-28390 │ HIGH     │ fixed  │ 3.5.5-r0          │ 3.5.6-r0      │ openssl: OpenSSL: Denial of Service due to NULL pointer │
│            │                │          │        │                   │               │ dereference in CMS...                                   │
│            │                │          │        │                   │               │ https://avd.aquasec.com/nvd/cve-2026-28390              │
├────────────┤                │          │        │                   │               │                                                         │
│ libssl3    │                │          │        │                   │               │                                                         │
│            │                │          │        │                   │               │                                                         │
│            │                │          │        │                   │               │                                                         │
└────────────┴────────────────┴──────────┴────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────┘

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants