Skip to content

build(deps): bump the web-deps group across 1 directory with 11 updates - #93

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-deps-b31cf6fa30
Open

build(deps): bump the web-deps group across 1 directory with 11 updates#93
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/web/web-deps-b31cf6fa30

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Bumps the web-deps group with 11 updates in the /web directory:

Package From To
@tiptap/extension-placeholder 3.27.1 3.29.0
@tiptap/pm 3.27.1 3.29.0
@tiptap/react 3.27.1 3.29.0
@tiptap/starter-kit 3.27.1 3.29.0
next 15.5.20 15.5.21
react 19.2.7 19.2.8
react-dom 19.2.7 19.2.8
@playwright/test 1.61.1 1.62.0
@types/node 22.20.0 22.20.1
autoprefixer 10.5.2 10.5.4
postcss 8.5.16 8.5.23

Updates @tiptap/extension-placeholder from 3.27.1 to 3.29.0

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

  • Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor inserting extra empty paragraphs (a regression introduced in prosemirror-view 1.42.0).

@​tiptap/extension-hard-break

Patch Changes

  • Fixed a bug where inserted hard breaks would not scroll the view on insertion via commands.

@​tiptap/extension-code-block

Patch Changes

  • Fixed a bug where pressing ArrowUp in a code block that is the first node in the document did nothing, leaving no way to insert content above it. A new default block is now inserted above the code block, mirroring the existing ArrowDown behavior. The behavior can be disabled via the new exitOnArrowUp option.

@​tiptap/extension-table

Patch Changes

  • Fix inserting a table with an empty cell or header (e.g. via insertContent/insertContentAt) throwing RangeError: Invalid content for node tableCell/tableHeader: <>. Empty <td>/<th> elements are now backfilled with the cell's default block content, matching the behavior you already get from setContent.

... (truncated)

Changelog

Sourced from @​tiptap/extension-placeholder's changelog.

3.29.0

Patch Changes

  • @​tiptap/extensions@​3.29.0

3.28.0

Patch Changes

  • @​tiptap/extensions@​3.28.0

3.27.4

Patch Changes

  • Updated dependencies [d2983cd]
    • @​tiptap/extensions@​3.27.4

3.27.3

Patch Changes

  • Updated dependencies [76a76da]
    • @​tiptap/extensions@​3.27.3

3.27.2

Patch Changes

  • @​tiptap/extensions@​3.27.2
Commits
  • 1afef87 chore(release): release new stable release (#8087)
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • See full diff in compare view

Updates @tiptap/pm from 3.27.1 to 3.29.0

Release notes

Sourced from @​tiptap/pm's releases.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

  • Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor inserting extra empty paragraphs (a regression introduced in prosemirror-view 1.42.0).

@​tiptap/extension-hard-break

Patch Changes

  • Fixed a bug where inserted hard breaks would not scroll the view on insertion via commands.

@​tiptap/extension-code-block

Patch Changes

  • Fixed a bug where pressing ArrowUp in a code block that is the first node in the document did nothing, leaving no way to insert content above it. A new default block is now inserted above the code block, mirroring the existing ArrowDown behavior. The behavior can be disabled via the new exitOnArrowUp option.

@​tiptap/extension-table

Patch Changes

  • Fix inserting a table with an empty cell or header (e.g. via insertContent/insertContentAt) throwing RangeError: Invalid content for node tableCell/tableHeader: <>. Empty <td>/<th> elements are now backfilled with the cell's default block content, matching the behavior you already get from setContent.

... (truncated)

Changelog

Sourced from @​tiptap/pm's changelog.

3.29.0

Patch Changes

  • e150ee0: Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor inserting extra empty paragraphs (a regression introduced in prosemirror-view 1.42.0).

3.28.0

3.27.4

3.27.3

3.27.2

Patch Changes

  • ceebb31: Updated all ProseMirror packages to the latest publicly available versions
Commits
  • 1afef87 chore(release): release new stable release (#8087)
  • e150ee0 fix(pm): bump prosemirror-model to ^1.25.11 to fix paste adding empty paragra...
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • ceebb31 Update ProseMirror packages (#7960)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • See full diff in compare view

Updates @tiptap/react from 3.27.1 to 3.29.0

Release notes

Sourced from @​tiptap/react's releases.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

  • Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor inserting extra empty paragraphs (a regression introduced in prosemirror-view 1.42.0).

@​tiptap/extension-hard-break

Patch Changes

  • Fixed a bug where inserted hard breaks would not scroll the view on insertion via commands.

@​tiptap/extension-code-block

Patch Changes

  • Fixed a bug where pressing ArrowUp in a code block that is the first node in the document did nothing, leaving no way to insert content above it. A new default block is now inserted above the code block, mirroring the existing ArrowDown behavior. The behavior can be disabled via the new exitOnArrowUp option.

@​tiptap/extension-table

Patch Changes

  • Fix inserting a table with an empty cell or header (e.g. via insertContent/insertContentAt) throwing RangeError: Invalid content for node tableCell/tableHeader: <>. Empty <td>/<th> elements are now backfilled with the cell's default block content, matching the behavior you already get from setContent.

... (truncated)

Changelog

Sourced from @​tiptap/react's changelog.

3.29.0

Patch Changes

  • 6a26a03: Fixed useEditorState not re-rendering components when editor.setEditable() changes the editor's editable state, since that call only emits an update event and never a transaction.
  • Updated dependencies [d26840f]
  • Updated dependencies [e150ee0]
  • Updated dependencies [935e63f]
  • Updated dependencies [b4c5a2d]
  • Updated dependencies [a963d48]
  • Updated dependencies [51f45b6]
  • Updated dependencies [0f63969]
  • Updated dependencies [9acaa65]
    • @​tiptap/core@​3.29.0
    • @​tiptap/pm@​3.29.0

3.28.0

Patch Changes

  • 8614730: Batch React node view portal store notifications that happen in the same microtask to avoid nested update depth warnings when many node views mount together.
  • 1ecf814: Bind onMount and onUnmount event handlers when initializing an Editor with useEditor hook.
    • @​tiptap/core@​3.28.0
    • @​tiptap/pm@​3.28.0

3.27.4

Patch Changes

  • 2c2720e: Add a use client directive so @tiptap/react can be imported from React Server Components without crashing. Core symbols re-exported through @tiptap/react now cross the client boundary too, so import them from @tiptap/core directly in server code.
    • @​tiptap/core@​3.27.4
    • @​tiptap/pm@​3.27.4

3.27.3

Patch Changes

  • Updated dependencies [023f98c]
    • @​tiptap/core@​3.27.3
    • @​tiptap/pm@​3.27.3

3.27.2

Patch Changes

  • 13dfad1: Change prop types of the Tiptap component so that either the editor or the instance fields are required
  • Updated dependencies [ceebb31]
    • @​tiptap/pm@​3.27.2
    • @​tiptap/core@​3.27.2
Commits
  • 1afef87 chore(release): release new stable release (#8087)
  • 6a26a03 fix(react): update useEditorState when editable changes (#7498) (#8113)
  • a963d48 Revert "revert: undo unintended NodeView getPos changes (#8105)" (#8106)
  • 3a942d8 revert: undo unintended NodeView getPos changes (#8105)
  • 6a33b7b test(ReactNodeViewRenderer): add test for getPos returning undefined during m...
  • ddd43a8 fix(NodeView): update getPos() to return undefined instead of throwing during...
  • c5f4b57 chore(release): release new stable release (#8038)
  • 8614730 fix(react): batch node view portal notifications (#8035)
  • 1ecf814 fix(react): bind onMount and onUnmount handlers when creating editor (#8079)
  • 24263ec chore(release): publish a new stable version
  • Additional commits viewable in compare view

Updates @tiptap/starter-kit from 3.27.1 to 3.29.0

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

  • Bump prosemirror-model to ^1.25.11, fixing pasting content copied from the editor inserting extra empty paragraphs (a regression introduced in prosemirror-view 1.42.0).

@​tiptap/extension-hard-break

Patch Changes

  • Fixed a bug where inserted hard breaks would not scroll the view on insertion via commands.

@​tiptap/extension-code-block

Patch Changes

  • Fixed a bug where pressing ArrowUp in a code block that is the first node in the document did nothing, leaving no way to insert content above it. A new default block is now inserted above the code block, mirroring the existing ArrowDown behavior. The behavior can be disabled via the new exitOnArrowUp option.

@​tiptap/extension-table

Patch Changes

  • Fix inserting a table with an empty cell or header (e.g. via insertContent/insertContentAt) throwing RangeError: Invalid content for node tableCell/tableHeader: <>. Empty <td>/<th> elements are now backfilled with the cell's default block content, matching the behavior you already get from setContent.

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.29.0

Patch Changes

  • Updated dependencies [d26840f]
  • Updated dependencies [e150ee0]
  • Updated dependencies [c999bd6]
  • Updated dependencies [935e63f]
  • Updated dependencies [48f25af]
  • Updated dependencies [b4c5a2d]
  • Updated dependencies [a963d48]
  • Updated dependencies [51f45b6]
  • Updated dependencies [0f63969]
  • Updated dependencies [2834eb3]
  • Updated dependencies [9acaa65]
    • @​tiptap/core@​3.29.0
    • @​tiptap/pm@​3.29.0
    • @​tiptap/extension-hard-break@​3.29.0
    • @​tiptap/extension-code-block@​3.29.0
    • @​tiptap/extension-link@​3.29.0
    • @​tiptap/extension-blockquote@​3.29.0
    • @​tiptap/extension-bold@​3.29.0
    • @​tiptap/extension-code@​3.29.0
    • @​tiptap/extension-document@​3.29.0
    • @​tiptap/extension-heading@​3.29.0
    • @​tiptap/extension-horizontal-rule@​3.29.0
    • @​tiptap/extension-italic@​3.29.0
    • @​tiptap/extension-list@​3.29.0
    • @​tiptap/extension-paragraph@​3.29.0
    • @​tiptap/extension-strike@​3.29.0
    • @​tiptap/extension-text@​3.29.0
    • @​tiptap/extension-underline@​3.29.0
    • @​tiptap/extensions@​3.29.0
    • @​tiptap/extension-list-item@​3.29.0
    • @​tiptap/extension-list-keymap@​3.29.0
    • @​tiptap/extension-bullet-list@​3.29.0
    • @​tiptap/extension-ordered-list@​3.29.0
    • @​tiptap/extension-dropcursor@​3.29.0
    • @​tiptap/extension-gapcursor@​3.29.0

3.28.0

Patch Changes

  • Updated dependencies [c1254c1]
    • @​tiptap/extension-list@​3.28.0
    • @​tiptap/extension-list-item@​3.28.0
    • @​tiptap/extension-list-keymap@​3.28.0
    • @​tiptap/extension-bullet-list@​3.28.0
    • @​tiptap/extension-ordered-list@​3.28.0

... (truncated)

Commits
  • 1afef87 chore(release): release new stable release (#8087)
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • See full diff in compare view

Updates next from 15.5.20 to 15.5.21

Release notes

Sourced from next's releases.

v15.5.21

This release contains security fixes for the following advisories:

High:

Moderate:

Commits
  • e26f6ff v15.5.21
  • 7f5deeb [15.x] Improve performance of checking valid MPA form submissions
  • 57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
  • e3e5666 [15.x] Set correct origin for internal redirects in custom server
  • 35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
  • 062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
  • 577c9dc [15.x] fix(incremental-cache): byte-exact fetch cache key for binary bodies
  • 530d4fa [15.x] fix(next/image): improve performance of detectContentType()
  • 8fabaf3 [15.x] Performance improvements when decoding React Server function payloads
  • ff12a61 [15.x] Validate server reference IDs during manifest lookup
  • Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Commits

Updates @playwright/test from 1.61.1 to 1.62.0

Release notes

Sourced from @​playwright/test's releases.

v1.62.0

🧱 New component testing model

Component testing moves to a stories and galleries model. A story wraps your component in one specific scenario — hard-coded props, mock data, providers — and a gallery page that you serve renders stories on demand. The new fixtures.mount() fixture navigates to the gallery, mounts a story by id, and returns a Locator scoped to the story's root element:

test('click should expand', async ({ mount }) => {
  const component = await mount('components/Expandable/Stateful');
  await component.getByRole('button').click();
  await expect(component.getByTestId('expanded')).toHaveValue('true');
});

Pass a story type as a template argument to type-check its props, and use update(props) / unmount() on the returned locator to re-render or tear down within a test.

🛑 Cancel operations with AbortSignal

Most operations and web-first assertions now accept a signal option that takes an AbortSignal, letting you cancel long-running actions, navigations, waits, and assertions:

const controller = new AbortController();
setTimeout(() => controller.abort(), 1000);
await page.getByRole('button', { name: 'Submit' }).click({ signal: controller.signal });
await expect(page.getByText('Done')).toBeVisible({ signal: controller.signal });

Providing a signal does not disable the default timeout; pass timeout: 0 to disable it.

🖼️ WebP screenshots

expect(page).toHaveScreenshot() and expect(locator).toHaveScreenshot() can now store snapshots in the WebP format — just give the snapshot a .webp name:

// Visual comparisons store the golden snapshot as lossless WebP.
await expect(page).toHaveScreenshot('homepage.webp');
// Standalone screenshots can trade quality for size with lossy WebP.
await page.screenshot({ path: 'homepage.webp', quality: 50 });

page.screenshot() and [locator.screenshot() (https://playwright.dev/docs/api/class-locator#locator-screenshot) also accept webp as a type, where quality 100 (the default) is lossless and lower values use lossy compression.

🧩 Custom test filtering with Reporter.preprocess()

New reporter.preprocess() hook runs after the configuration is resolved and before reporter.onBegin(), letting a reporter mark individual tests as skipped, excluded, fixed, or failing through a TestRun object:

</tr></table>

... (truncated)

Commits
  • e3950d9 chore: mark v1.62.0 (#41981)
  • f07e0f7 cherry-pick(#41940): docs: release notes for v1.62 (#41967)
  • 05a306c cherry-pick(#41964): Revert "feat(routeFromHar): add interceptAPIRequests opt...
  • 2934858 fix: correct pending navigation log spacing (#41949)
  • 4b0cc99 fix(test): unflake screencast backpressure test on slow macOS runner (#41951)
  • bbbae6d test: fixme WebSocket locale test in Chromium 150 (#41944)
  • 15c4f55 fix(mcp): identify downloads explicitly (#41933)
  • f5fa967 fix(network): request.postData() returns null for empty string body override ...
  • 0edafe4 fix(mcp): launch the Chrome profile that has the extension installed (#41939)
  • 244a1ff feat(firefox): roll to r1538 (#41938)
  • Additional commits viewable in compare view

Updates @types/node from 22.20.0 to 22.20.1

Commits

Updates autoprefixer from 10.5.2 to 10.5.4

Release notes

Sourced from autoprefixer's releases.

10.5.4

10.5.3

Changelog

Sourced from autoprefixer's changelog.

10.5.4

10.5.3

Commits

Updates postcss from 8.5.16 to 8.5.23

Release notes

Sourced from postcss's releases.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Changelog

Sourced from postcss's changelog.

8.5.23

  • Do not load source map without opts.from for security reasons.

8.5.22

8.5.21

8.5.20

8.5.19

  • Fixed cleaning before for new nodes inserted to Root (by @​MahinAnowar).

8.5.18

  • Restricted loading previous source maps file to the opts.from folder for security reasons (use unsafeMap: true to disable the check).

8.5.17

  • Fixed Maximum call stack size exceeded error.
  • Fixed Prototype hijacking for postcss.fromJSON().
  • Fixed Input#origin() for unmapped end position (by @​chatman-media).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the web-deps group across 1 directory with 11 updates
7ff0aa1 
Bumps the web-deps group with 11 updates in the /web directory:

| Package | From | To |
| --- | --- | --- |
| [@tiptap/extension-placeholder](https://github.com/ueberdosis/tiptap/tree/HEAD/packages-deprecated/extension-placeholder) | `3.27.1` | `3.29.0` |
| [@tiptap/pm](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/pm) | `3.27.1` | `3.29.0` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.27.1` | `3.29.0` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.27.1` | `3.29.0` |
| [next](https://github.com/vercel/next.js) | `15.5.20` | `15.5.21` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` |
| [@playwright/test](https://github.com/microsoft/playwright) | `1.61.1` | `1.62.0` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `22.20.0` | `22.20.1` |
| [autoprefixer](https://github.com/postcss/autoprefixer) | `10.5.2` | `10.5.4` |
| [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.23` |



Updates `@tiptap/extension-placeholder` from 3.27.1 to 3.29.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages-deprecated/extension-placeholder/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.0/packages-deprecated/extension-placeholder)

Updates `@tiptap/pm` from 3.27.1 to 3.29.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/pm/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.0/packages/pm)

Updates `@tiptap/react` from 3.27.1 to 3.29.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.0/packages/react)

Updates `@tiptap/starter-kit` from 3.27.1 to 3.29.0
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.29.0/packages/starter-kit)

Updates `next` from 15.5.20 to 15.5.21
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.20...v15.5.21)

Updates `react` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-dom` from 19.2.7 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `@playwright/test` from 1.61.1 to 1.62.0
- [Release notes](https://github.com/microsoft/playwright/releases)
- [Commits](microsoft/playwright@v1.61.1...v1.62.0)

Updates `@types/node` from 22.20.0 to 22.20.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `autoprefixer` from 10.5.2 to 10.5.4
- [Release notes](https://github.com/postcss/autoprefixer/releases)
- [Changelog](https://github.com/postcss/autoprefixer/blob/main/CHANGELOG.md)
- [Commits](postcss/autoprefixer@10.5.2...10.5.4)

Updates `postcss` from 8.5.16 to 8.5.23
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.23)

---
updated-dependencies:
- dependency-name: "@tiptap/extension-placeholder"
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-deps
- dependency-name: "@tiptap/pm"
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-deps
- dependency-name: "@tiptap/react"
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-deps
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: web-deps
- dependency-name: next
  dependency-version: 15.5.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-deps
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-deps
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: web-deps
- dependency-name: "@playwright/test"
  dependency-version: 1.62.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: web-deps
- dependency-name: "@types/node"
  dependency-version: 22.20.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-deps
- dependency-name: autoprefixer
  dependency-version: 10.5.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-deps
- dependency-name: postcss
  dependency-version: 8.5.23
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: web-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants