Skip to content

chore(deps-dev): bump @tinacms/app from 2.5.10 to 2.5.11 - #223

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tinacms/app-2.5.11
Open

chore(deps-dev): bump @tinacms/app from 2.5.10 to 2.5.11#223
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tinacms/app-2.5.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps @tinacms/app from 2.5.10 to 2.5.11.

Release notes

Sourced from @​tinacms/app's releases.

@​tinacms/app@​2.5.11

Patch Changes

  • #7429 7df6e04 Thanks @​wicksipedia! - Switching a rich-text field to raw markdown no longer blanks the whole admin.

    Two things could take the editing session down. The raw editor arrives as a lazy chunk, so a failed fetch after a deploy or on a flaky connection tore the page down. It also serializes the field while rendering, so content it cannot represent threw with the chunk already loaded. Applying inline code and then bolding a word inside it was enough. Either way you got a blank page: no message, no way back, and unsaved work in the other fields gone with it.

    The failure now stays inside the field it came from. You get the thrown message, which for the formatting case names what to undo, and a button back to the rich-text editor.

  • #7218 4499dcb Thanks @​wicksipedia! - Remove typescript from @tinacms/app's production dependencies.

    It was declared in both dependencies and devDependencies, but nothing in src/ imports it — the package ships raw source and is compiled by @tinacms/cli. Every TinaCMS user was installing a second copy of the TypeScript compiler (~23 MB) for nothing. It remains a devDependency for type-checking.

  • #7388 17931b7 Thanks @​brookjeynes-ssw! - feat: add announcements banner

  • #7216 cf75e5b Thanks @​wicksipedia! - Collapse three icon libraries into lucide-react (~85 MB).

    tinacms declared react-icons (84 MB), lucide-react (32 MB) and @heroicons/react as production dependencies, so every user installed all three. Icon usage is entirely internal admin chrome — there is no icon-picker, no icon schema field type, and no dynamic whole-set import — so react-icons and @heroicons/react have been removed in favour of lucide-react, which was already the de-facto house set.

    Not a breaking change for user content, schemas, or plugins: ScreenPlugin.Icon is typed any, and CloudConfigOptions is not publicly exported. The internal IconType prop type is now lucide's LucideIcon.

    Six icons have no exact lucide counterpart and were substituted: BsCheckCircleFill/BsExclamationOctagonFillCircleCheck/OctagonAlert (lucide is outline-only), MdSyncProblemRefreshCwOff, TbLogsScrollText, BiRenameSquarePen, MdOutlineDataSaverOffInfo.

  • #7327 5050709 Thanks @​brookjeynes-ssw! - feat: when WorkOS is enabled, use a redirect-based workflow for authentication

  • #7216 cf75e5b Thanks @​wicksipedia! - Drop @headlessui/react (~50 MB).

    Headless UI v2 pulls in the entire React Aria stack (react-aria 34.8 MB, react-stately 9.4 MB, @internationalized/*) — about 50 MB installed — to provide components Radix already covers. tinacms was shipping three headless component libraries at once (@radix-ui/* in 22 files, @headlessui/react in 11, @ariakit/react in 1).

    The 11 Headless UI files now use Radix (Popover, DropdownMenu) and local state, consolidating on the library that was already the majority. No new dependencies were added.

    Transition/TransitionChild are replaced by a small local equivalent with the same prop API (show, appear, enter*/leave*). It uses element.getAnimations({ subtree: true }) so a parent transition with no classes of its own still waits for its children to finish leaving before unmounting.

  • #7214 bd4df92 Thanks @​wicksipedia! - Stop shipping the monaco-editor package (~73 MB).

    Every import of monaco-editor in shipped source was types-only. The editor itself has always been fetched from a CDN at runtime by @monaco-editor/loader, so the 73 MB installed on every user's disk was never executed — and was a different version (0.31.0) from the one that actually runs (0.55.1, the loader's default).

    monaco-editor is a required peer dependency of @monaco-editor/react, and npm 7+ auto-installs required peers, so removing it from our dependencies was not enough on its own. @tinacms/app now uses @monaco-editor/loader directly — the same loader @monaco-editor/react wraps, so the CDN and editor version are unchanged — and monaco-editor is kept as a devDependency for its types.

    The copy of the raw editor in packages/tinacms was dead code: nothing imported it, it was not exported, and its parseMDX/stringifyMDX were stubs returning empty values. The live raw editor lives in @tinacms/app and is injected into tinacms as the rawEditor prop. It has been deleted, letting tinacms drop both monaco packages entirely.

    No behaviour change: raw MDX mode still loads the same editor from the same CDN.

  • Updated dependencies [d7a1641, f014558, 17931b7, cf75e5b, 5050709, cf75e5b, bd4df92, 566f977, 064b78e, a0e0d2e, 2860f56, 5f14d96, b6199da, ece366b, 4a19d66, 4b7d9b9, 5112e60, 8c8e297]:

    • tinacms@3.12.0
    • @​tinacms/mdx@​2.2.0
Changelog

Sourced from @​tinacms/app's changelog.

2.5.11

Patch Changes

  • #7429 7df6e04 Thanks @​wicksipedia! - Switching a rich-text field to raw markdown no longer blanks the whole admin.

    Two things could take the editing session down. The raw editor arrives as a lazy chunk, so a failed fetch after a deploy or on a flaky connection tore the page down. It also serializes the field while rendering, so content it cannot represent threw with the chunk already loaded. Applying inline code and then bolding a word inside it was enough. Either way you got a blank page: no message, no way back, and unsaved work in the other fields gone with it.

    The failure now stays inside the field it came from. You get the thrown message, which for the formatting case names what to undo, and a button back to the rich-text editor.

  • #7218 4499dcb Thanks @​wicksipedia! - Remove typescript from @tinacms/app's production dependencies.

    It was declared in both dependencies and devDependencies, but nothing in src/ imports it — the package ships raw source and is compiled by @tinacms/cli. Every TinaCMS user was installing a second copy of the TypeScript compiler (~23 MB) for nothing. It remains a devDependency for type-checking.

  • #7388 17931b7 Thanks @​brookjeynes-ssw! - feat: add announcements banner

  • #7216 cf75e5b Thanks @​wicksipedia! - Collapse three icon libraries into lucide-react (~85 MB).

    tinacms declared react-icons (84 MB), lucide-react (32 MB) and @heroicons/react as production dependencies, so every user installed all three. Icon usage is entirely internal admin chrome — there is no icon-picker, no icon schema field type, and no dynamic whole-set import — so react-icons and @heroicons/react have been removed in favour of lucide-react, which was already the de-facto house set.

    Not a breaking change for user content, schemas, or plugins: ScreenPlugin.Icon is typed any, and CloudConfigOptions is not publicly exported. The internal IconType prop type is now lucide's LucideIcon.

    Six icons have no exact lucide counterpart and were substituted: BsCheckCircleFill/BsExclamationOctagonFillCircleCheck/OctagonAlert (lucide is outline-only), MdSyncProblemRefreshCwOff, TbLogsScrollText, BiRenameSquarePen, MdOutlineDataSaverOffInfo.

  • #7327 5050709 Thanks @​brookjeynes-ssw! - feat: when WorkOS is enabled, use a redirect-based workflow for authentication

  • #7216 cf75e5b Thanks @​wicksipedia! - Drop @headlessui/react (~50 MB).

    Headless UI v2 pulls in the entire React Aria stack (react-aria 34.8 MB, react-stately 9.4 MB, @internationalized/*) — about 50 MB installed — to provide components Radix already covers. tinacms was shipping three headless component libraries at once (@radix-ui/* in 22 files, @headlessui/react in 11, @ariakit/react in 1).

    The 11 Headless UI files now use Radix (Popover, DropdownMenu) and local state, consolidating on the library that was already the majority. No new dependencies were added.

    Transition/TransitionChild are replaced by a small local equivalent with the same prop API (show, appear, enter*/leave*). It uses element.getAnimations({ subtree: true }) so a parent transition with no classes of its own still waits for its children to finish leaving before unmounting.

  • #7214 bd4df92 Thanks @​wicksipedia! - Stop shipping the monaco-editor package (~73 MB).

    Every import of monaco-editor in shipped source was types-only. The editor itself has always been fetched from a CDN at runtime by @monaco-editor/loader, so the 73 MB installed on every user's disk was never executed — and was a different version (0.31.0) from the one that actually runs (0.55.1, the loader's default).

    monaco-editor is a required peer dependency of @monaco-editor/react, and npm 7+ auto-installs required peers, so removing it from our dependencies was not enough on its own. @tinacms/app now uses @monaco-editor/loader directly — the same loader @monaco-editor/react wraps, so the CDN and editor version are unchanged — and monaco-editor is kept as a devDependency for its types.

    The copy of the raw editor in packages/tinacms was dead code: nothing imported it, it was not exported, and its parseMDX/stringifyMDX were stubs returning empty values. The live raw editor lives in @tinacms/app and is injected into tinacms as the rawEditor prop. It has been deleted, letting tinacms drop both monaco packages entirely.

    No behaviour change: raw MDX mode still loads the same editor from the same CDN.

  • Updated dependencies [d7a1641, f014558, 17931b7, cf75e5b, 5050709, cf75e5b, bd4df92, 566f977, 064b78e, a0e0d2e, 2860f56, 5f14d96, b6199da, ece366b, 4a19d66, 4b7d9b9, 5112e60, 8c8e297]:

    • tinacms@3.12.0
    • @​tinacms/mdx@​2.2.0
Commits
  • 7e8818b Version Packages (#7287)
  • 17931b7 feat: add announcements banner (#7388)
  • 7df6e04 fix(@​tinacms/app): stop a failed raw markdown editor blanking the whole admin...
  • d7a1641 refactor: facilitate token refresh through tinacloud (#7304)
  • cf75e5b 🐛 Consolidate duplicate UI libraries — 3 icon libs → lucide, headless-UI → Ra...
  • 4499dcb 🐛 Remove typescript from @​tinacms/app's production dependencies (~23 MB) (#7218)
  • bd4df92 🐛 Stop shipping monaco-editor — 73 MB of never-executed code (#7214)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@tinacms/app](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/app) from 2.5.10 to 2.5.11.
- [Release notes](https://github.com/tinacms/tinacms/releases)
- [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/app/CHANGELOG.md)
- [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/app@2.5.11/packages/@tinacms/app)

---
updated-dependencies:
- dependency-name: "@tinacms/app"
  dependency-version: 2.5.11
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants