Merge pull request #8040 from plotly/release-v4.1.1

Chore: release 4.1.1

Author: KoolADE85

CHANGELOG.md

@@ -11,6 +11,13 @@ where X.Y.Z is the semver of most recent plotly.js release.
 
 ## [X.Y.Z] -- UNRELEASED
 
+### Changed
+- Update `maplibre-gl` to v6 to address [CVE-2026-85061](https://github.com/advisories/GHSA-jrc7-96c5-q579) [[#8035](https://github.com/plotly/plotly.js/pull/8035)]
+  - `maplibre-gl` v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.
+
+### Fixed
+- Box and lasso selection of `scattermap` points are now supported on a rotated or pitched map [[#8035](https://github.com/plotly/plotly.js/pull/8035)]
+
 
 ## [4.1.0] -- 2026-09-08
 

CITATION.cff

@@ -9,7 +9,7 @@ authors:
 - family-names: "Samimi"
   given-names: "Mojtaba"
 title: "Open source Plotly charting library"
-version: 4.1.0
+version: 4.1.1
 doi: 10.5281/zenodo.13964707
-date-released: 2026-09-08
+date-released: 2026-09-14
 url: "https://github.com/plotly/plotly.js"

README.md

@@ -62,7 +62,7 @@ You may also consider using [`plotly.js-dist`](https://www.npmjs.com/package/plo
 
 ```html
 <head>
-    <script src="https://cdn.plot.ly/plotly-4.1.0.min.js" charset="utf-8"></script>
+    <script src="https://cdn.plot.ly/plotly-4.1.1.min.js" charset="utf-8"></script>
 </head>
 <body>
     <div id="gd"></div>
@@ -79,7 +79,7 @@ You may also consider using [`plotly.js-dist`](https://www.npmjs.com/package/plo
 Alternatively, you may consider using [native ES6 import](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules) in the script tag.
 ```html
 <script type="module">
-    import "https://cdn.plot.ly/plotly-4.1.0.min.js"
+    import "https://cdn.plot.ly/plotly-4.1.1.min.js"
     Plotly.newPlot("gd", [{ y: [1, 2, 3] }])
 </script>
 ```
@@ -89,7 +89,7 @@ Fastly supports Plotly.js with free CDN service. Read more at <https://www.fastl
 ### Un-minified versions are also available on CDN
 While non-minified source files may contain characters outside UTF-8, it is recommended that you specify the `charset` when loading those bundles.
 ```html
-<script src="https://cdn.plot.ly/plotly-4.1.0.js" charset="utf-8"></script>
+<script src="https://cdn.plot.ly/plotly-4.1.1.js" charset="utf-8"></script>
 ```
 
 > Please note that as of v2 the "plotly-latest" outputs (e.g. https://cdn.plot.ly/plotly-latest.min.js) will no longer be updated on the CDN, and will stay at the last v1 patch v1.58.5. Therefore, to use the CDN with plotly.js v2 and higher, you must specify an exact plotly.js version.

dist/README.md

@@ -43,12 +43,12 @@ The main plotly.js bundles weight in at:
 
 | plotly.js | plotly.min.js | plotly.min.js + gzip | plotly-with-meta.js |
 |-----------|---------------|----------------------|---------------------|
-| 9.57 MB | 4.29 MB | 1.33 MB | 9.92 MB |
+| 10.1 MB | 4.82 MB | 1.48 MB | 10.5 MB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-4.1.0.js
+> https://cdn.plot.ly/plotly-4.1.1.js
 
-> https://cdn.plot.ly/plotly-4.1.0.min.js
+> https://cdn.plot.ly/plotly-4.1.1.min.js
 
 
 #### npm packages
@@ -91,12 +91,12 @@ The `basic` partial bundle contains trace modules `bar`, `pie` and `scatter`.
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 2.93 MB | 1.18 MB | 397 kB |
+| 2.94 MB | 1.19 MB | 398 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-basic-4.1.0.js
+> https://cdn.plot.ly/plotly-basic-4.1.1.js
 
-> https://cdn.plot.ly/plotly-basic-4.1.0.min.js
+> https://cdn.plot.ly/plotly-basic-4.1.1.min.js
 
 
 #### npm packages
@@ -114,12 +114,12 @@ The `cartesian` partial bundle contains trace modules `bar`, `box`, `contour`, `
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 3.69 MB | 1.49 MB | 499 kB |
+| 3.71 MB | 1.5 MB | 500 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-cartesian-4.1.0.js
+> https://cdn.plot.ly/plotly-cartesian-4.1.1.js
 
-> https://cdn.plot.ly/plotly-cartesian-4.1.0.min.js
+> https://cdn.plot.ly/plotly-cartesian-4.1.1.min.js
 
 
 #### npm packages
@@ -137,12 +137,12 @@ The `geo` partial bundle contains trace modules `choropleth`, `scatter` and `sca
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 3.37 MB | 1.38 MB | 467 kB |
+| 3.39 MB | 1.4 MB | 467 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-geo-4.1.0.js
+> https://cdn.plot.ly/plotly-geo-4.1.1.js
 
-> https://cdn.plot.ly/plotly-geo-4.1.0.min.js
+> https://cdn.plot.ly/plotly-geo-4.1.1.min.js
 
 
 #### npm packages
@@ -160,12 +160,12 @@ The `gl3d` partial bundle contains trace modules `cone`, `isosurface`, `mesh3d`,
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 4.43 MB | 1.74 MB | 561 kB |
+| 4.44 MB | 1.75 MB | 562 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-gl3d-4.1.0.js
+> https://cdn.plot.ly/plotly-gl3d-4.1.1.js
 
-> https://cdn.plot.ly/plotly-gl3d-4.1.0.min.js
+> https://cdn.plot.ly/plotly-gl3d-4.1.1.min.js
 
 
 #### npm packages
@@ -183,12 +183,12 @@ The `gl2d` partial bundle contains trace modules `parcoords`, `scatter`, `scatte
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 3.67 MB | 1.47 MB | 498 kB |
+| 3.68 MB | 1.49 MB | 498 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-gl2d-4.1.0.js
+> https://cdn.plot.ly/plotly-gl2d-4.1.1.js
 
-> https://cdn.plot.ly/plotly-gl2d-4.1.0.min.js
+> https://cdn.plot.ly/plotly-gl2d-4.1.1.min.js
 
 
 #### npm packages
@@ -206,12 +206,12 @@ The `map` partial bundle contains trace modules `choroplethmap`, `densitymap`, `
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 4.9 MB | 2.42 MB | 734 kB |
+| 5.39 MB | 2.96 MB | 887 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-map-4.1.0.js
+> https://cdn.plot.ly/plotly-map-4.1.1.js
 
-> https://cdn.plot.ly/plotly-map-4.1.0.min.js
+> https://cdn.plot.ly/plotly-map-4.1.1.min.js
 
 
 #### npm packages
@@ -229,12 +229,12 @@ The `finance` partial bundle contains trace modules `bar`, `candlestick`, `funne
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 3.18 MB | 1.28 MB | 432 kB |
+| 3.2 MB | 1.3 MB | 432 kB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-finance-4.1.0.js
+> https://cdn.plot.ly/plotly-finance-4.1.1.js
 
-> https://cdn.plot.ly/plotly-finance-4.1.0.min.js
+> https://cdn.plot.ly/plotly-finance-4.1.1.min.js
 
 
 #### npm packages
@@ -252,12 +252,12 @@ The `strict` partial bundle contains trace modules `bar`, `barpolar`, `box`, `ca
 
 | Raw size | Minified size | Minified + gzip size |
 |------|-----------------|------------------------|
-| 10.4 MB | 4.64 MB | 1.43 MB |
+| 10.9 MB | 5.16 MB | 1.58 MB |
 
 #### CDN links
-> https://cdn.plot.ly/plotly-strict-4.1.0.js
+> https://cdn.plot.ly/plotly-strict-4.1.1.js
 
-> https://cdn.plot.ly/plotly-strict-4.1.0.min.js
+> https://cdn.plot.ly/plotly-strict-4.1.1.min.js
 
 
 #### npm packages

dist/plot-schema.json

@@ -14051,7 +14051,7 @@
           ]
         },
         "spikethickness": {
-          "description": "Sets the width (in px) of the zero line.",
+          "description": "Sets the spike line width in pixels.",
           "dflt": 3,
           "editType": "none",
           "valType": "number"
@@ -15300,7 +15300,7 @@
           ]
         },
         "spikethickness": {
-          "description": "Sets the width (in px) of the zero line.",
+          "description": "Sets the spike line width in pixels.",
           "dflt": 3,
           "editType": "none",
           "valType": "number"