Security patch release for @excalidraw/excalidraw@0.18.x, addressing upstream Mermaid XSS vulnerability CVE-2025-54881 / GHSA-7rqq-prvp-x9jh. Backports Mermaid XSS mitigation by updating @excalidraw/mermaid-to-excalidraw to 2.2.2 Pins @types/d3-dispatch for compatibility with the 0.18.x TypeScript version
Excalidraw Library 0.18.0 (2025-03-11) Highlights Command palette #7804 Multiplayer undo / redo #7348 Editable element stats #6382 Text element wrapping #7999 Font picker with more fonts #8012 Font for Chinese, Japanese, and Korean #8530 Font subsetting for SVG export #8384 Elbow arrows #8299, #8952 Flowcharts #8329 Scene search #8438 Image cropping #8613 Element linking #8812 Breaking changes Dep…
patch release
patch release
patch release
patch release
patch release
0.17.4 patch release (backported)
Fixes Keep customData when converting to ExcalidrawElement. #7656 Umd build for browser since it was breaking in v0.17.0 #7349. Also make sure that when using Vite, the process.env.IS_PREACT is set as "true" (string) and not a boolean. define: { "process.env.IS_PREACT": JSON.stringify("true"), } Disable caching bounds for arrow labels #7343 Bounds cached prematurely resulting in incorrectly render…
v0.17.0 (2023-11-14) Features Added support for disabling image tool (also disabling image insertion in general, though keeps support for importing from .excalidraw files) #6320. For disabling image you need to set 👇 UIOptions.tools = { image: false } Support excalidrawAPI prop for accessing the Excalidraw API #7251. Export getCommonBounds helper from the package #7247. Support frames via programm…