Skip to content

chore(deps): bump the patch-and-minor group across 1 directory with 30 updates - #267

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/patch-and-minor-1c3be13fd6
Closed

chore(deps): bump the patch-and-minor group across 1 directory with 30 updates#267
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/patch-and-minor-1c3be13fd6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 30 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.117.1 0.122.0
hono 4.13.2 4.13.5
@types/node 26.2.0 26.4.0
@types/pg 8.21.0 8.23.1
@tiptap/core 3.30.1 3.30.5
@tiptap/extension-code-block-lowlight 3.30.1 3.30.5
@tiptap/extension-details 3.30.1 3.30.5
@tiptap/extension-document 3.30.1 3.30.5
@tiptap/extension-highlight 3.30.1 3.30.5
@tiptap/extension-image 3.30.1 3.30.5
@tiptap/extension-link 3.30.1 3.30.5
@tiptap/extension-paragraph 3.30.1 3.30.5
@tiptap/extension-placeholder 3.30.1 3.30.5
@tiptap/extension-table 3.30.1 3.30.5
@tiptap/extension-table-cell 3.30.1 3.30.5
@tiptap/extension-table-header 3.30.1 3.30.5
@tiptap/extension-table-row 3.30.1 3.30.5
@tiptap/extension-task-item 3.30.1 3.30.5
@tiptap/extension-task-list 3.30.1 3.30.5
@tiptap/extension-text 3.30.1 3.30.5
@tiptap/extension-underline 3.30.1 3.30.5
@tiptap/pm 3.30.1 3.30.5
@tiptap/react 3.30.1 3.30.5
@tiptap/starter-kit 3.30.1 3.30.5
@tiptap/suggestion 3.30.1 3.30.5
dompurify 3.4.13 3.4.14
lucide-react 1.31.0 1.35.0
next 16.3.1 16.3.3
@types/react-dom 19.2.4 19.2.5
eslint-config-next 16.3.1 16.3.3

Updates @anthropic-ai/sdk from 0.117.1 to 0.122.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.122.0

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

  • client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
  • client: use configured logger for SSE parse errors (80eeaf7)
  • sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
  • tools: let read return a view_range of a file over the size cap (#427) (56b3260)
  • uploads: default bare Blob filename on skills endpoints (#422) (e111649)
  • webhooks: require headers to be passed to unwrap() (3230804)

Chores

  • internal: codegen related update (c2f327a)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
  • document TypeScript 5.0 as the minimum supported version (788e721)

sdk: v0.121.0

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

  • tools: keep the tool runner going on pause_turn (#288) (f040dc9)
  • types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.122.0 (2026-08-27)

Full Changelog: sdk-v0.121.0...sdk-v0.122.0

Features

  • api: beta files/skills namespaces use GA shapes; drop dated beta header pins (45d693a)

Bug Fixes

  • client: classify cross-realm DOMException abort/timeout errors correctly (1bd6395)
  • client: use configured logger for SSE parse errors (80eeaf7)
  • sessions: make event accumulator forward-compatible with new event types (#410) (2d084fd)
  • tools: let read return a view_range of a file over the size cap (#427) (56b3260)
  • uploads: default bare Blob filename on skills endpoints (#422) (e111649)
  • webhooks: require headers to be passed to unwrap() (3230804)

Chores

  • internal: codegen related update (c2f327a)

Documentation

  • api: clarify pagination on the organization rate-limit list endpoints (d6015b9)
  • document TypeScript 5.0 as the minimum supported version (788e721)

0.121.0 (2026-08-26)

Full Changelog: sdk-v0.120.0...sdk-v0.121.0

Features

  • api: add updates thinking display mode (beta) (22274ea)
  • api: add missing anthropic-beta values (0779f02)
  • api: add support for Organization API endpoints (8b61e7a)
  • helpers: support Standard Schema for structured outputs and tools (7880078)

Bug Fixes

  • tools: keep the tool runner going on pause_turn (#288) (f040dc9)
  • types: don't reference NodeJS.ProcessEnv from published types (#367) (fd38dfd)

Chores

  • docs: clarify skill version latest support and memory version retention (7405a69)

... (truncated)

Commits
  • 7f3898c chore: release main
  • 956ccb5 docs(api): clarify pagination on the organization rate-limit list endpoints
  • 2131d80 fix(tools): let read return a view_range of a file over the size cap (#427)
  • f830c8f fix(aws,bedrock): prefer env credentials over AWS_PROFILE (#436)
  • 4d50ddf test(ecosystem): expect cross-realm timeout errors to classify correctly
  • acdd669 fix(client): classify cross-realm DOMException abort/timeout errors correctly
  • 0a14622 test(tools): pin that read, edit and the memory tool preserve CRLF and CR lin...
  • 17035de docs: document TypeScript 5.0 as the minimum supported version
  • 2f95d8a fix(client): use configured logger for SSE parse errors
  • 33f5103 feat(api): beta files/skills namespaces use GA shapes; drop dated beta header...
  • Additional commits viewable in compare view

Updates hono from 4.13.2 to 4.13.5

Release notes

Sourced from hono's releases.

v4.13.5

Security fixes

This release includes fixes for the following security issues:

Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials

Affects: Cache Middleware and applications behind a proxy, WAF, or logging layer that inspects query strings. Fixes query parsing that did not stop at the URL fragment, so a ? after a # was treated as the start of a query string and the application could read parameters that the other component never saw. GHSA-crvj-82cr-hjcx

Incomplete fix for CVE-2026-39408: toSSG() still writes files outside the output directory

Affects: toSSG() for Static Site Generation. Fixes a path normalization gap where consecutive parent-directory segments in ssgParams values were not fully collapsed, bypassing the containment check added in 4.12.12. GHSA-gqvv-2mrq-wpjv

Unbounded dot-notation nesting in parseBody() can cause memory exhaustion

Affects: parseBody() when dot-notation parsing is enabled. Fixes unbounded expansion of dot-separated field names, where a small request body could allocate a disproportionately large object graph and concurrent requests could exhaust the heap. GHSA-g6gw-c38x-mqfc

Users who use Cache Middleware, deploy behind a proxy or WAF that inspects query strings, use Static Site Generation, or use parseBody({ dot: true }) are strongly encouraged to upgrade to this version.

v4.13.4

What's Changed

  • fix(request): handle params on unmatched requests in honojs/hono#5268
  • fix(jsx/dom): execute previous ref cleanup when ref prop changes on re-render in honojs/hono#5264
  • fix(reg-exp-router): associate wildcard middleware with matching routes in honojs/hono#5266
  • perf(router): share null object creation in honojs/hono#5267
  • fix(etag): match If-None-Match tags with optional whitespace before the comma in honojs/hono#5222
  • fix(client): skip undefined header and cookie values in honojs/hono#5244
  • fix(client): skip an undefined entry inside a query array in honojs/hono#5272
  • fix(client): skip an undefined entry inside a form array in honojs/hono#5280
  • fix(client): support custom buildSearchParams and filter undefined query in $ws() bin honojs/hono#5256
  • fix(accepts): support wildcard media types and specificity ordering in defaultMatch in honojs/hono#5255
  • fix(client): omit empty query delimiter in honojs/hono#5283
  • fix(request): drop stale content length for cloned FormData in honojs/hono#5282
  • fix(request): serialize cached JSON body in cloneRawRequest in honojs/hono#5288
  • fix(cookie): allow parsing signed cookies with empty string values in honojs/hono#5246
  • fix(utils/stream): do not let abort listeners crash abort() in honojs/hono#5274

Full Changelog: honojs/hono@v4.13.3...v4.13.4

v4.13.3

What's Changed

  • fix(client): prevent URL corruption when replaceUrlParam contains $ replacement tokens in honojs/hono#5227
  • fix(etag): copy pending stream bytes in honojs/hono#5239
  • fix(etag): avoid skipping headers when filtering 304 response headers in honojs/hono#5234
  • fix(cors): append Origin to Vary header on OPTIONS preflight in honojs/hono#5235
  • docs(context): add custom headers append option example to Context JSDoc in honojs/hono#5248
  • fix(trie-router): match suffix wildcard routes in honojs/hono#5236

... (truncated)

Commits
  • 06880c4 4.13.5
  • 531e9c5 Merge commit from fork
  • 3a67f7f Merge commit from fork
  • 9c28d72 Merge commit from fork
  • 017000d 4.13.4
  • 5e5b83d fix(utils/stream): do not let abort listeners crash abort() (#5274)
  • 241ae4c fix(cookie): allow parsing signed cookies with empty string values (#5246)
  • c409d85 fix(request): serialize cached JSON body in cloneRawRequest (#5288)
  • 612b59c fix(request): drop stale content length for cloned FormData (#5282)
  • 73794bd fix(client): omit empty query delimiter (#5283)
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates @types/pg from 8.21.0 to 8.23.1

Commits

Updates @tiptap/core from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/core's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.30.5

Patch Changes

  • d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • 01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • 965a880: Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • 3dffed5: Keep mixed JSX children as separate siblings in DOM output.
  • 214a140: Fixed a bug where editor.chain and editor.can can not be accessed on editor initialization
    • @​tiptap/pm@​3.30.2
Commits

Updates @tiptap/extension-code-block-lowlight from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-code-block-lowlight's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-code-block-lowlight's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/extension-code-block@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4
    • @​tiptap/extension-code-block@​3.30.4
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3
    • @​tiptap/extension-code-block@​3.30.3
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
    • @​tiptap/extension-code-block@​3.30.2
    • @​tiptap/pm@​3.30.2
Commits

Updates @tiptap/extension-details from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-details's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-details's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/extension-text-style@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4
    • @​tiptap/extension-text-style@​3.30.4
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [4ae6ea0]
  • Updated dependencies [965a880]
    • @​tiptap/extension-text-style@​3.30.3
    • @​tiptap/core@​3.30.3
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
    • @​tiptap/extension-text-style@​3.30.2
    • @​tiptap/pm@​3.30.2
Commits

Updates @tiptap/extension-document from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-document's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-document's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
Commits

Updates @tiptap/extension-highlight from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-highlight's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-highlight's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
Commits

Updates @tiptap/extension-image from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-image's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-image's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • 546b655: Fix resizable images staying hidden when the image is cached or fails to load.
  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
Commits
  • b0c188b chore(release): release new stable release (#8261)
  • 55f59e4 chore(release): release new stable release (#8260)
  • db790a7 chore(release): release new stable release (#8216)
  • f434577 chore: migrate over to vite+ for tooling (#8151)
  • cef2c9a chore(release): release new stable release (#8190)
  • 546b655 fix(extension-image): reveal resizable node view when the image is already ca...
  • See full diff in compare view

Updates @tiptap/extension-link from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-link's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-link's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
    • @​tiptap/pm@​3.30.2
Commits

Updates @tiptap/extension-paragraph from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-paragraph's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-paragraph's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
Commits

Updates @tiptap/extension-placeholder from 3.30.1 to 3.30.5

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/patch-and-minor-1c3be13fd6 branch 4 times, most recently from e9221a4 to 09359ec Compare August 31, 2026 04:01
@dependabot
chore(deps): bump the patch-and-minor group across 1 directory with 3…
fb0e032 
…0 updates

Bumps the patch-and-minor group with 30 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@anthropic-ai/sdk](https://github.com/anthropics/anthropic-sdk-typescript) | `0.117.1` | `0.122.0` |
| [hono](https://github.com/honojs/hono) | `4.13.2` | `4.13.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.2.0` | `26.4.0` |
| [@types/pg](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/pg) | `8.21.0` | `8.23.1` |
| [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-code-block-lowlight](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-code-block-lowlight) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-details](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-details) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-document](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-document) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-highlight](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-highlight) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-image](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-image) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-paragraph](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-paragraph) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-placeholder](https://github.com/ueberdosis/tiptap/tree/HEAD/packages-deprecated/extension-placeholder) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-table](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-table-cell](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-cell) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-table-header](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-header) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-table-row](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-table-row) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-task-item](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-task-item) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-task-list](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-task-list) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-text](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-text) | `3.30.1` | `3.30.5` |
| [@tiptap/extension-underline](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-underline) | `3.30.1` | `3.30.5` |
| [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.30.1` | `3.30.5` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.30.1` | `3.30.5` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.30.1` | `3.30.5` |
| [@tiptap/suggestion](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/suggestion) | `3.30.1` | `3.30.5` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.13` | `3.4.14` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.31.0` | `1.35.0` |
| [next](https://github.com/vercel/next.js) | `16.3.1` | `16.3.3` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` |
| [eslint-config-next](https://github.com/vercel/next.js/tree/HEAD/packages/eslint-config-next) | `16.3.1` | `16.3.3` |



Updates `@anthropic-ai/sdk` from 0.117.1 to 0.122.0
- [Release notes](https://github.com/anthropics/anthropic-sdk-typescript/releases)
- [Changelog](https://github.com/anthropics/anthropic-sdk-typescript/blob/main/CHANGELOG.md)
- [Commits](anthropics/anthropic-sdk-typescript@sdk-v0.117.1...sdk-v0.122.0)

Updates `hono` from 4.13.2 to 4.13.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.13.2...v4.13.5)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/pg` from 8.21.0 to 8.23.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/pg)

Updates `@tiptap/core` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/core)

Updates `@tiptap/extension-code-block-lowlight` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-code-block-lowlight/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-code-block-lowlight)

Updates `@tiptap/extension-details` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-details/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-details)

Updates `@tiptap/extension-document` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-document/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-document)

Updates `@tiptap/extension-highlight` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-highlight/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-highlight)

Updates `@tiptap/extension-image` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-image/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-image)

Updates `@tiptap/extension-link` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-link)

Updates `@tiptap/extension-paragraph` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-paragraph/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-paragraph)

Updates `@tiptap/extension-placeholder` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages-deprecated/extension-placeholder/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages-deprecated/extension-placeholder)

Updates `@tiptap/extension-table` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-table/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-table)

Updates `@tiptap/extension-table-cell` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-table-cell)

Updates `@tiptap/extension-table-header` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-table-header)

Updates `@tiptap/extension-table-row` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-table-row)

Updates `@tiptap/extension-task-item` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-task-item)

Updates `@tiptap/extension-task-list` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-task-list)

Updates `@tiptap/extension-text` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-text/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-text)

Updates `@tiptap/extension-underline` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-underline/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-underline)

Updates `@tiptap/pm` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/pm/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/pm)

Updates `@tiptap/react` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/react)

Updates `@tiptap/starter-kit` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/starter-kit)

Updates `@tiptap/suggestion` from 3.30.1 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/suggestion/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/suggestion)

Updates `dompurify` from 3.4.13 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.13...3.4.14)

Updates `lucide-react` from 1.31.0 to 1.35.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.35.0/packages/lucide-react)

Updates `next` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v16.3.1...v16.3.3)

Updates `@types/react-dom` from 19.2.4 to 19.2.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `eslint-config-next` from 16.3.1 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](https://github.com/vercel/next.js/commits/v16.3.3/packages/eslint-config-next)

---
updated-dependencies:
- dependency-name: "@anthropic-ai/sdk"
  dependency-version: 0.120.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/core"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-code-block-lowlight"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-details"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-document"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-highlight"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-image"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-paragraph"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-placeholder"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-table"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-table-cell"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-table-header"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-table-row"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-task-item"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-task-list"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-text"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/extension-underline"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/pm"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/react"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@tiptap/suggestion"
  dependency-version: 3.30.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/node"
  dependency-version: 26.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/pg"
  dependency-version: 8.23.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: eslint-config-next
  dependency-version: 16.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: hono
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: lucide-react
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/patch-and-minor-1c3be13fd6 branch from 09359ec to fb0e032 Compare August 31, 2026 08:55
@dependabot @github

dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 1, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/patch-and-minor-1c3be13fd6 branch September 1, 2026 02:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants