Skip to content

chore: bump the editor-dependencies group across 1 directory with 16 updates - #3076

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/editor-dependencies-bb5bde3ff5
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/editor-dependencies-bb5bde3ff5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the editor-dependencies group with 16 updates in the / directory:

Package From To
react 19.2.5 19.2.8
react-dom 19.2.5 19.2.8
@tiptap/core 3.29.2 3.31.3
@tiptap/extension-bold 3.29.2 3.31.3
@tiptap/extension-code 3.29.2 3.31.3
@tiptap/extension-italic 3.29.2 3.31.3
@tiptap/extension-strike 3.29.2 3.31.3
@tiptap/extension-text 3.29.2 3.31.3
@tiptap/extension-underline 3.29.2 3.31.3
@tiptap/extensions 3.29.2 3.31.3
@tiptap/pm 3.29.2 3.31.3
prosemirror-transform 1.12.0 1.12.1
prosemirror-view 1.42.2 1.42.3
yjs 13.6.30 13.6.32
@tiptap/react 3.29.2 3.31.3
prosemirror-changeset 2.4.1 2.4.2

Updates react from 19.2.5 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

Changelog

Sourced from react's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react since your current version.


Updates react-dom from 19.2.5 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

19.2.7 (June 1st, 2026)

React Server Components

19.2.6 (May 6th, 2026)

React Server Components

Changelog

Sourced from react-dom's changelog.

19.3.0 (September 9, 2026)

New React Features

New React DOM Features

  • browser(): a new react-dom API that returns a usable which errors during server rendering and resolves in the browser. use(browser()) inside a <Suspense> boundary marks a subtree as browser-only without reporting a recoverable error (@​gnoff: #37143, #37241)
    • Added an onBrowserBailout option to the react-dom/server APIs to observe when a subtree defers to the browser (@​gnoff #37193)

Notable changes

All Changes

React

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for react-dom since your current version.


Updates @tiptap/core from 3.29.2 to 3.31.3

Release notes

Sourced from @​tiptap/core's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.31.3

Patch Changes

  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2

3.31.1

Patch Changes

  • cd32a2f: Fix freezes in framework-based node views on iOS and Android
    • @​tiptap/pm@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/pm@​3.31.0

3.30.6

Patch Changes

  • 9f844ab: Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.
    • @​tiptap/pm@​3.30.6

3.30.5

Patch Changes

  • d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • 01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-bold from 3.29.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-bold's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-bold's changelog.

3.31.3

Patch Changes

  • @​tiptap/core@​3.31.3

3.31.2

Patch Changes

  • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/core@​3.31.0

3.30.6

Patch Changes

  • Updated dependencies [9f844ab]
    • @​tiptap/core@​3.30.6

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-code from 3.29.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-code's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-code's changelog.

3.31.3

Patch Changes

  • @​tiptap/core@​3.31.3

3.31.2

Patch Changes

  • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/core@​3.31.0

3.30.6

Patch Changes

  • Updated dependencies [9f844ab]
    • @​tiptap/core@​3.30.6

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-italic from 3.29.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-italic's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-italic's changelog.

3.31.3

Patch Changes

  • @​tiptap/core@​3.31.3

3.31.2

Patch Changes

  • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/core

@dependabot dependabot Bot added the npm dependencies Bumps dependencies label Sep 9, 2026
@vercel

vercel Bot commented Sep 9, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
blocknote Error Error Sep 14, 2026 9:07am UTC
blocknote-website Error Error Sep 14, 2026 9:07am UTC

Request Review

…updates

Bumps the editor-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.5` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.5` | `19.2.8` |
| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-bold](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-bold) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-code](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-code) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-italic](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-italic) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-strike](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-strike) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-text](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-text) | `3.29.2` | `3.31.3` |
| [@tiptap/extension-underline](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-underline) | `3.29.2` | `3.31.3` |
| [@tiptap/extensions](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension) | `3.29.2` | `3.31.3` |
| [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.29.2` | `3.31.3` |
| [prosemirror-transform](https://github.com/prosemirror/prosemirror-transform) | `1.12.0` | `1.12.1` |
| [prosemirror-view](https://github.com/prosemirror/prosemirror-view) | `1.42.2` | `1.42.3` |
| [yjs](https://github.com/yjs/yjs) | `13.6.30` | `13.6.32` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.29.2` | `3.31.3` |
| [prosemirror-changeset](https://github.com/prosemirror/prosemirror-changeset) | `2.4.1` | `2.4.2` |



Updates `react` from 19.2.5 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.5 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@tiptap/core` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/core)

Updates `@tiptap/extension-bold` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-bold/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-bold)

Updates `@tiptap/extension-code` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-code/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-code)

Updates `@tiptap/extension-italic` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-italic/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-italic)

Updates `@tiptap/extension-strike` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-strike/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-strike)

Updates `@tiptap/extension-text` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-text/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-text)

Updates `@tiptap/extension-underline` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-underline/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-underline)

Updates `@tiptap/extensions` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension)

Updates `@tiptap/pm` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/pm/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/pm)

Updates `prosemirror-transform` from 1.12.0 to 1.12.1
- [Changelog](https://github.com/ProseMirror/prosemirror-transform/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-transform/commits)

Updates `prosemirror-view` from 1.42.2 to 1.42.3
- [Changelog](https://github.com/ProseMirror/prosemirror-view/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-view/commits)

Updates `yjs` from 13.6.30 to 13.6.32
- [Release notes](https://github.com/yjs/yjs/releases)
- [Commits](yjs/yjs@v13.6.30...v13.6.32)

Updates `@tiptap/react` from 3.29.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/react)

Updates `prosemirror-changeset` from 2.4.1 to 2.4.2
- [Changelog](https://github.com/ProseMirror/prosemirror-changeset/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prosemirror/prosemirror-changeset/commits)

---
updated-dependencies:
- dependency-name: "@tiptap/core"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-bold"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-code"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-italic"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-strike"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-text"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extension-underline"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/extensions"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/pm"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: "@tiptap/react"
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: editor-dependencies
- dependency-name: prosemirror-changeset
  dependency-version: 2.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
- dependency-name: prosemirror-transform
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
- dependency-name: prosemirror-view
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
- dependency-name: yjs
  dependency-version: 13.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: editor-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/editor-dependencies-bb5bde3ff5 branch from 3ac1bec to 3863bc6 Compare September 14, 2026 09:02
@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 8ce03cbb-3bc8-452e-9c12-52452db7d758

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/editor-dependencies-bb5bde3ff5 branch September 15, 2026 10:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

npm dependencies Bumps dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants