@@ -11,6 +11,13 @@ where X.Y.Z is the semver of most recent plotly.js release.
 
 ## [X.Y.Z] -- UNRELEASED
 
+### Changed
+- Update `maplibre-gl` to v6 to address [CVE-2026-85061](https://github.com/advisories/GHSA-jrc7-96c5-q579) [[#8035](https://github.com/plotly/plotly.js/pull/8035)]
+  - `maplibre-gl` v6 dropped WebGL1 support, so some older browsers won't be able to use the map traces. Safari 15, Chrome 56, Firefox 51 and later are now required for the map traces.
+
+### Fixed
+- Box and lasso selection of `scattermap` points are now supported on a rotated or pitched map [[#8035](https://github.com/plotly/plotly.js/pull/8035)]
+
 
 ## [4.1.0] -- 2026-09-08
 
 
@@ -9,7 +9,7 @@ authors:
 - family-names: "Samimi"
   given-names: "Mojtaba"
 title: "Open source Plotly charting library"
-version: 4.1.0
+version: 4.1.1
 doi: 10.5281/zenodo.13964707
-date-released: 2026-09-08
+date-released: 2026-09-14
 url: "https://github.com/plotly/plotly.js"
@@ -62,7 +62,7 @@ You may also consider using [`plotly.js-dist`](https://www.npmjs.com/package/plo
 
 ```html
 <head>
-    <script src="https://cdn.plot.ly/plotly-4.1.0.min.js" charset="utf-8"></script>
+    <script src="https://cdn.plot.ly/plotly-4.1.1.min.js" charset="utf-8"></script>
 </head>
 <body>
     <div id="gd"></div>
@@ -79,7 +79,7 @@ You may also consider using [`plotly.js-dist`](https://www.npmjs.com/package/plo
 Alternatively, you may consider using [native ES6 import](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Guide/Modules) in the script tag.
 ```html
 <script type="module">
-    import "https://cdn.plot.ly/plotly-4.1.0.min.js"
+    import "https://cdn.plot.ly/plotly-4.1.1.min.js"
     Plotly.newPlot("gd", [{ y: [1, 2, 3] }])
 </script>
 ```
@@ -89,7 +89,7 @@ Fastly supports Plotly.js with free CDN service. Read more at <https://www.fastl
 ### Un-minified versions are also available on CDN
 While non-minified source files may contain characters outside UTF-8, it is recommended that you specify the `charset` when loading those bundles.
 ```html
-<script src="https://cdn.plot.ly/plotly-4.1.0.js" charset="utf-8"></script>
+<script src="https://cdn.plot.ly/plotly-4.1.1.js" charset="utf-8"></script>
 ```
 
 > Please note that as of v2 the "plotly-latest" outputs (e.g. https://cdn.plot.ly/plotly-latest.min.js) will no longer be updated on the CDN, and will stay at the last v1 patch v1.58.5. Therefore, to use the CDN with plotly.js v2 and higher, you must specify an exact plotly.js version.