Bump plotly.js-dist-min from 3.7.0 to 4.1.1

[dependabot]

Bumps plotly.js-dist-min from 3.7.0 to 4.1.1.

Release notes

Sourced from plotly.js-dist-min's releases.

v4.1.1

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

v4.1.0

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

v4.0.0

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
• When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

• Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
  • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
• Breaking: Drop support for MathJax v2 [#7898]
  • MathJax v3 and v4 are now supported in plotly.js
• Remove config attributes showLink, linkText, sendData, showSources, and showEditInChartStudio, as well as trace attribute stream, since all of these were associated with Chart Studio and are no longer needed [#7812]
• Remove all *src attributes, as well as layout.hidesources attribute, from the schema [#7829]
• Remove internal trace._fullInput property and other dead code related to the removed transforms feature. No user-facing changes expected [#7834]

Changed

... (truncated)

Changelog

Sourced from plotly.js-dist-min's changelog.

[4.1.1] -- 2026-09-14

Changed

• Update maplibre-gl to v6 to address CVE-2026-85061 [#8035]
  • maplibre-gl v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.

Fixed

• Box and lasso selection of scattermap points are now supported on a rotated or pitched map [#8035]

[4.1.0] -- 2026-09-08

Added

• Add an opt-in modebar button for downloading Plotly figures as JSON [#7990, #8022], with thanks to @​gokul-debugger for the contribution!
• Add legend.groupdoubleclick to set the group behavior for a legend double-click [#7997], with thanks to @​rascal-sl for the contribution!

Changed

• Increase default double-click delay threshold to 500ms (from 300) [#8014]

Fixed

• Correct the showspikes axis attribute description to clarify that it applies for all hovermode values except when hovermode is false [#7981], with thanks for @​CAOShurong for the contribution!
• Update country-iso-search to v0.1.2 to fix issue with UTF-8 characters being decoded incorrectly [#7994]
• Compile TypeScript files under src/ to JavaScript during packaging to fix Node resolution [#8000]
• Include type defs in appropriate partial bundles [#8001]
• Add TypeScript declarations for the modular lib/ entry points [#8009]
• Handle regex enum values when generating schema types [#8010]
• Include trace-contributed layout attributes in generated types [#8020]
• Resolve the per-point marker color for hover labels in scattergl, quiver traces [#8027]

[4.0.0] -- 2026-08-24

Added

• Add minscale, maxscale geo plot attributes [#7371], with thanks to @​mojoaxel for the contribution!
• Enable TypeScript compatibility within the library and start exporting types [#7680]
• Add quiver trace type to visualize vector fields using arrows [#7710, #7945], with thanks to @​degzhaus for the contribution!
• Use dashed markers in legend for shape traces with dash configured [#7845]
• Add direction attribute to the Sankey trace, controlling the flow direction along the orientation axis [#7870], with thanks to @​wf-r for the contribution!
  • forward keeps sources on the left (horizontal) or top (vertical)
  • reversed moves them to the right or bottom
• Add sort option to Sankey links and nodes [#7873], with thanks to @​adamreeve for the contribution!
• Add support for MathJax v4 [#7898]
• Add top-level xPixel and yPixel keys to hover and click event data, corresponding to the pixel position of the cursor relative to the top-left corner of the graph div [#7966]
• When hoveranywhere is enabled, emit a plotly_unhover event when the cursor leaves the plot area [#7966]

Removed

• Breaking: Remove scattermapbox, choroplethmapbox, densitymapbox trace types, the mapbox subplot, and the mapboxAccessToken config option [#7860]
  • These traces have been deprecated since v3. Use the equivalent *map traces going forward.
• Breaking: Drop support for MathJax v2 [#7898]
  • MathJax v3 and v4 are now supported in plotly.js

... (truncated)

Commits

• 0aabc3c 4.1.1
• b246393 updates for release v4.1.1
• 57e8cb5 Merge pull request #8037 from Lexachoc/doc-spikethickness-fix
• 08f0c6a Delete draftlogs/8037_fix.md
• e8f6a7d Merge pull request #8035 from plotly/cam/8031/upgrade-maplibre-v6
• f3d750b Remove errant space
• 67f45d7 Address PR feedback
• c69a597 update schema
• bcb3c6d add draftlog
• 139595d fix spikethickness description
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by aborrmann, a new releaser for plotly.js-dist-min since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.