CodeIssuesPull RequestsActionsSecurityInsights
✨ AI
More
Settings

deps: bump the minor-and-patch group across 1 directory with 26 updates #3838

OpenXLccantynz wants to mergedependabot/npm_and_yarn/minor-and-patch-20a6c3fbcdmain↑1opened 29d agoLive: 0 editing
ccantynzcommented 29d ago

Originally written by @dependabot[bot] on GitHub.
Imported from https://github.com/ccantynz-alt/MarcoReid.com/pull/105


Bumps the minor-and-patch group with 24 updates in the / directory:

Package From To
@anthropic-ai/sdk 0.104.2 0.115.0
@prisma/adapter-pg 7.8.0 7.9.1
@prisma/client 7.8.0 7.9.1
@tailwindcss/postcss 4.3.1 4.3.3
@tiptap/extension-highlight 3.26.1 3.29.2
@tiptap/extension-placeholder 3.26.1 3.29.2
@tiptap/extension-typography 3.26.1 3.29.2
@tiptap/pm 3.26.1 3.29.2
@tiptap/react 3.26.1 3.29.2
@tiptap/starter-kit 3.26.1 3.29.2
next 16.2.9 16.2.12
next-auth 4.24.14 4.24.15
react 19.2.7 19.2.8
@types/react 19.2.17 19.2.18
react-dom 19.2.7 19.2.8
@types/react-dom 19.2.3 19.2.4
stripe 22.2.1 22.4.0
@eslint/eslintrc 3.3.5 3.3.6
@next/bundle-analyzer 16.2.9 16.2.12
@playwright/test 1.61.0 1.62.1
eslint 10.5.0 10.8.0
eslint-config-next 16.2.9 16.2.12
prisma 7.8.0 7.9.1
tsx 4.22.4 4.23.1

Updates @anthropic-ai/sdk from 0.104.2 to 0.115.0

Release notes

Sourced from @​anthropic-ai/sdk's releases.

sdk: v0.115.0

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

sdk: v0.114.0

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

sdk: v0.113.0

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

sdk: v0.112.5

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

sdk: v0.112.4

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

... (truncated)

Changelog

Sourced from @​anthropic-ai/sdk's changelog.

0.115.0 (2026-07-24)

Full Changelog: sdk-v0.114.0...sdk-v0.115.0

Features

  • api: add claude-opus-5 model (cdd3606)
  • api: add tool addition/removal blocks and tool_change events (cdd3606)
  • api: expand client-side fallback credit token types and add server-side fallbacks default option (cdd3606)

Bug Fixes

  • client: release abort listeners when requests settle (#1129) (b85e902)

0.114.0 (2026-07-23)

Full Changelog: sdk-v0.113.0...sdk-v0.114.0

Features

  • api: add new stop reason 'model_context_window_exceeded' (1ec71c1)

0.113.0 (2026-07-22)

Full Changelog: sdk-v0.112.5...sdk-v0.113.0

Features

  • api: add support for Managed Agents model effort, initial session events, and threads delta streaming (83fef1e)

0.112.5 (2026-07-21)

Full Changelog: sdk-v0.112.4...sdk-v0.112.5

Chores

  • api: add support for new refusal category (479efe8)
  • internal: codegen related update (830fb74)

0.112.4 (2026-07-20)

Full Changelog: sdk-v0.112.3...sdk-v0.112.4

Bug Fixes

  • aws: preserve AWS options and auth mode across withOptions() (#214) (3f7665c)

Chores

... (truncated)

Commits
  • 3b45cd3 chore: release main
  • f298e9a feat(api): add claude-opus-5 model
  • ce8e54b fix(client): release abort listeners when requests settle (#1129)
  • 2d314b4 chore: release main
  • 3d051df feat(api): add new stop reason 'model_context_window_exceeded'
  • 4414d47 chore: release main
  • 1ec5566 feat(api): add support for Managed Agents model effort, initial session event...
  • c58a55b chore: release main
  • 2fb7da5 chore(api): add support for new refusal category
  • d6ffc3c chore(internal): codegen related update
  • Additional commits viewable in compare view

Updates @prisma/adapter-pg from 7.8.0 to 7.9.1

Release notes

Sourced from @​prisma/adapter-pg's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:

# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab

2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):

echo 'source <(tab pnpm zsh)' >> ~/.zshrc # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish # fish
tab pnpm powershell > ~/.tab-pnpm.ps1 # PowerShell (then dot-source it from $PROFILE)

@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @​AmirSa12 (#28351) — thank you!

https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.

</tr></table> 

... (truncated)

Commits

Updates @prisma/client from 7.8.0 to 7.9.1

Release notes

Sourced from @​prisma/client's releases.

7.9.1

Today, we're issuing a patch release to resolve a security advisory in a transitive dependency of Prisma CLI (via @prisma/dev).

This fixes prisma/prisma#29780.

It does not actually affect @prisma/dev or Prisma CLI so no urgent action is required, but it is recommended to upgrade nevertheless to avoid false positives from security scanners.

7.9.0

Today, we are excited to share the 7.9.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

Tab completions for the Prisma CLI

Typing out CLI commands from memory is now optional. Prisma ships shell tab completions for bash, zsh, fish, and PowerShell, covering commands, subcommands, options, flags, and even option values.

Setting it up. Most projects run Prisma through a package manager, so completions are enabled through @bomb.sh/tab's package-manager integration — install it once, then source the completion for your package manager and shell:

# 1. Install @bomb.sh/tab globally
npm install -g @bomb.sh/tab

2. Wire up your package manager + shell (pnpm shown; swap in npm / yarn / bun):

echo 'source <(tab pnpm zsh)' >> ~/.zshrc # zsh
echo 'source <(tab pnpm bash)' >> ~/.bashrc # bash
tab pnpm fish > ~/.config/fish/completions/pnpm.fish # fish
tab pnpm powershell > ~/.tab-pnpm.ps1 # PowerShell (then dot-source it from $PROFILE)

@bomb.sh/tab delegates to any locally-installed CLI that ships completions, so pnpm prisma <TAB>, pnpm exec prisma <TAB>, yarn prisma <TAB>, and bun x prisma <TAB> all complete Prisma's commands, options, and values — no per-project setup. (npx and bunx don't support completion themselves; use npm exec and bun x.)

If instead you have Prisma installed globally on your PATH, source its own completion directly: source <(prisma complete zsh) (or the bash / fish / powershell variant).

This is built on @bomb.sh/tab, the same completion library that powers other CLIs in the ecosystem — including Cloudflare, Nuxt, and Vitest — so the package-manager completions you enable for Prisma work for those tools too. A wonderful community contribution from @​AmirSa12 (#28351) — thank you!

https://github.com/user-attachments/assets/1f916a60-ee4d-40be-bb7d-74035d48ca83

Prisma ORM, ready for AI agents

Coding agents are now a first-class audience for Prisma, and 7.9.0 brings the first wave of work to make Prisma projects safe and productive for them to work in.

Agent skills installed with prisma init (#29689)

prisma init now installs the prisma/skills catalog into freshly scaffolded projects. Agents such as Claude Code, Cursor, Codex, and Windsurf start out with current, version-relevant Prisma knowledge instead of relying on whatever happened to be in their training data. The install is best-effort and never blocks scaffolding; opt out at any time with --no-skills.

</tr></table> 

... (truncated)

Commits
  • b829850 ci: upgrade pnpm to 11 to restore pnpm audit (#29725)
  • 280fd56 fix(client): mask each quoted string in maskQuery independently (#29723)
  • 4da3774 fix(client): reject invalid raw dates (#29697)
  • a7cec97 chore(deps): update engines to 7.9.0-1.e922089b7d7502aff4249d5da3420f6fa55fc6...
  • 58f8439 fix(client): pin pg-protocol in prisma-client-imports-postgres e2e test (#29687)
  • 918cf5d fix(client): improve adapter-related Prisma 7 error messages (#29624)
  • 93da6ea ci(e2e): shard client e2e suite across 3 jobs to fix chronic timeouts (#29619)
  • 3937779 fix: remove duplicate 'the the' in test comments (#29610)
  • fda8fbc chore(deps): bump @​prisma/dev to 0.24.9 (resolves hono GHSA-92pp-h63x-v22m) (...
  • 0036baf fix(client-engine-runtime): surface unmapped driver errors as user-facing P20...
  • See full diff in compare view

Updates @tailwindcss/postcss from 4.3.1 to 4.3.3

Release notes

Sourced from @​tailwindcss/postcss's releases.

v4.3.3

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

v4.3.2

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Changelog

Sourced from @​tailwindcss/postcss's changelog.

[4.3.3] - 2026-07-16

Fixed

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF]bg-white) (#20298)
  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)

[4.3.2] - 2026-06-26

Fixed

  • Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
  • Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
  • Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
  • Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
  • Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
  • Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
  • Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
  • Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
  • Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
  • Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
  • Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
  • Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
  • Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)
Commits

Updates @tiptap/extension-highlight from 3.26.1 to 3.29.2

Release notes

Sourced from @​tiptap/extension-highlight's releases.

v3.29.2

@​tiptap/react

Patch Changes

  • Fixed the caret jumping back to the previous block when pressing Enter inside a React node view.

@​tiptap/extension-find-and-replace

Patch Changes

  • Ensure only the active find-and-replace result keeps the current-result highlight while navigating matches.

v3.29.1

@​tiptap/react

Patch Changes

  • 6d901e7: Fix caret placement after splitting a block rendered with a React NodeView.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-highlight's changelog.

3.29.2

Patch Changes

  • @​tiptap/core@​3.29.2

3.29.1

Patch Changes

  • @​tiptap/core@​3.29.1

3.29.0

Patch Changes

  • Updated dependencies [d26840f]
  • Updated dependencies [935e63f]
  • Updated dependencies [b4c5a2d]
  • Updated dependencies [a963d48]
  • Updated dependencies [51f45b6]
  • Updated dependencies [0f63969]
  • Updated dependencies [9acaa65]
    • @​tiptap/core@​3.29.0

3.28.0

Patch Changes

  • @​tiptap/core@​3.28.0

3.27.4

Patch Changes

  • @​tiptap/core@​3.27.4

3.27.3

Patch Changes

  • Updated dependencies [023f98c]
    • @​tiptap/core@​3.27.3

3.27.2

Patch Changes

  • @​tiptap/core@​3.27.2

... (truncated)

Commits
  • 5158212 chore(release): release new stable release (#8132)
  • 896564a chore(release): release new stable release (#8128)
  • 1afef87 chore(release): release new stable release (#8087)
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • ed5488a chore(release): publish a new stable version (#7955)
  • 2f38887 chore(release): publish a new stable version (#7936)
  • Additional commits viewable in compare view

Updates @tiptap/extension-placeholder from 3.26.1 to 3.29.2

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.29.2

@​tiptap/react

Patch Changes

  • Fixed the caret jumping back to the previous block when pressing Enter inside a React node view.

@​tiptap/extension-find-and-replace

Patch Changes

  • Ensure only the active find-and-replace result keeps the current-result highlight while navigating matches.

v3.29.1

@​tiptap/react

Patch Changes

  • 6d901e7: Fix caret placement after splitting a block rendered with a React NodeView.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-placeholder's changelog.

3.29.2

Patch Changes

  • @​tiptap/extensions@​3.29.2

3.29.1

Patch Changes

  • @​tiptap/extensions@​3.29.1

3.29.0

Patch Changes

  • @​tiptap/extensions@​3.29.0

3.28.0

Patch Changes

  • @​tiptap/extensions@​3.28.0

3.27.4

Patch Changes

  • Updated dependencies [d2983cd]
    • @​tiptap/extensions@​3.27.4

3.27.3

Patch Changes

  • Updated dependencies [76a76da]
    • @​tiptap/extensions@​3.27.3

3.27.2

Patch Changes

  • @​tiptap/extensions@​3.27.2

3.27.1

Patch Changes

  • Updated dependencies [2be3fb9]
    • @​tiptap/extensions@​3.27.1

... (truncated)

Commits
  • 5158212 chore(release): release new stable release (#8132)
  • 896564a chore(release): release new stable release (#8128)
  • 1afef87 chore(release): release new stable release (#8087)
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • ed5488a chore(release): publish a new stable version (#7955)
  • 2f38887 chore(release): publish a new stable version (#7936)
  • Additional commits viewable in compare view

Updates @tiptap/extension-typography from 3.26.1 to 3.29.2

Release notes

Sourced from @​tiptap/extension-typography's releases.

v3.29.2

@​tiptap/react

Patch Changes

  • Fixed the caret jumping back to the previous block when pressing Enter inside a React node view.

@​tiptap/extension-find-and-replace

Patch Changes

  • Ensure only the active find-and-replace result keeps the current-result highlight while navigating matches.

v3.29.1

@​tiptap/react

Patch Changes

  • 6d901e7: Fix caret placement after splitting a block rendered with a React NodeView.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection highlight over the emptied document instead of a text cursor. deleteSelection now collapses the selection to a cursor.
  • Fix input rules crashing when the matched text spans an inline atom node like a mention.
  • Node view getPos() now returns undefined instead of throwing when the position cannot be resolved yet, for example when React 19 renders a node view component while the editor view is still updating.
  • Fixed onContentError throwing when calling editor.commands from inside the handler on initial load with invalid content. The editor now has a usable state (seeded from the stripped fallback document) before onContentError fires.
  • Fix editor.$pos() returning the wrong node inside container nodes, for example the list item instead of the list.
  • Add insertDefaultBlock to insert the default textblock allowed at a position. It accepts an optional position, attributes, content, and selection-update option.
  • Updated dependencies [e9942fc]
    • @​tiptap/pm@​3.29.0

@​tiptap/extension-find-and-replace

Minor Changes

  • Added a new @tiptap/extension-find-and-replace extension. It searches the document for a term, highlights all matches with decorations, and replaces the current or all matches. Supports case-sensitive, whole-word, and RE2-compatible regex search, plus commands to jump between results. Regex search avoids catastrophic backtracking but does not support lookarounds or backreferences.

@​tiptap/pm

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-typography's changelog.

3.29.2

Patch Changes

  • @​tiptap/core@​3.29.2

3.29.1

Patch Changes

  • @​tiptap/core@​3.29.1

3.29.0

Patch Changes

  • Updated dependencies [d26840f]
  • Updated dependencies [935e63f]
  • Updated dependencies [b4c5a2d]
  • Updated dependencies [a963d48]
  • Updated dependencies [51f45b6]
  • Updated dependencies [0f63969]
  • Updated dependencies [9acaa65]
    • @​tiptap/core@​3.29.0

3.28.0

Patch Changes

  • @​tiptap/core@​3.28.0

3.27.4

Patch Changes

  • @​tiptap/core@​3.27.4

3.27.3

Patch Changes

  • Updated dependencies [023f98c]
    • @​tiptap/core@​3.27.3

3.27.2

Patch Changes

  • @​tiptap/core@​3.27.2

... (truncated)

Commits
  • 5158212 chore(release): release new stable release (#8132)
  • 896564a chore(release): release new stable release (#8128)
  • 1afef87 chore(release): release new stable release (#8087)
  • c5f4b57 chore(release): release new stable release (#8038)
  • 24263ec chore(release): publish a new stable version
  • 24d6aba chore(release): publish a new stable version (#8002)
  • a14683f chore(release): publish a new stable version (#7963)
  • 06b4274 fix(extension-file-handler): add consumePasteEvent option to prevent duplicat...
  • ed5488a chore(release): publish a new stable version (#7955)
  • 2f38887 chore(release): publish a new stable version (#7936)
  • Additional commits viewable in compare view

Updates @tiptap/pm from 3.26.1 to 3.29.2

Release notes

Sourced from @​tiptap/pm's releases.

v3.29.2

@​tiptap/react

Patch Changes

  • Fixed the caret jumping back to the previous block when pressing Enter inside a React node view.

@​tiptap/extension-find-and-replace

Patch Changes

  • Ensure only the active find-and-replace result keeps the current-result highlight while navigating matches.

v3.29.1

@​tiptap/react

Patch Changes

  • 6d901e7: Fix caret placement after splitting a block rendered with a React NodeView.

v3.29.0

@​tiptap/extension-ruby-text

Minor Changes

  • Add official RubyText extension for HTML ruby text annotations with non-editable annotations and mark-based document storage. The click-to-edit annotation editor can be replaced with a custom element via the renderAnnotationEditor option.

@​tiptap/core

Patch Changes

  • Fix a TypeScript build error in isAndroid() where comparing navigator.platform against the literal 'Android' with === could fail to compile under some lib.dom.d.ts typings ("types have no overlap"). Switched to the same .includes() pattern already used by isiOS(), which is not affected by this TypeScript narrowing issue. No runtime behavior change.
  • Fixed a bug where deleting an AllSelection (for example right after Ctrl/Cmd+A) left a lingering "phantom" selection high...

    Description has been truncated

ccantynzcommented 29d ago

Originally written by @dependabot[bot] on GitHub.


Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

ccantynzcommented 26d ago

Originally written by @dependabot[bot] on GitHub.


Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

gluecron[bot]🤖 botcommented 19d ago

This PR has gone quiet

No activity for 7+ days. Is this still in progress?

  • Author: keep working / mark draft / close.
  • Reviewers: review or unassign yourself.
  • Maintainers: close if no longer relevant.
gluecron[bot]🤖 botcommented 12d ago

This PR has gone quiet

No activity for 7+ days. Is this still in progress?

  • Author: keep working / mark draft / close.
  • Reviewers: review or unassign yourself.
  • Maintainers: close if no longer relevant.
gluecron[bot]🤖 botcommented 5d ago

This PR has gone quiet

No activity for 7+ days. Is this still in progress?

  • Author: keep working / mark draft / close.
  • Reviewers: review or unassign yourself.
  • Maintainers: close if no longer relevant.

Files changed

Side-by-side diff for dependabot/npm_and_yarn/minor-and-patch-20a6c3fbcd → main.

View diff →

Cross-repo impact

See what breaks downstream if this PR merges.

Analyze →
Risk score:ℹ MEDIUM (4/10)dd7e568
Touches 2 file(s) with 1085 added and 572 removed across 0 owner(s). Includes a new dependency. No tests were added for the new code.
See full signal breakdown
  • files changed: 2
  • lines added/removed: 1085 / 572
  • distinct owners touched: 0
  • schema migration touched: no
  • locked / sensitive path touched: no
  • adds new dependency: yes
  • bumps major dependency: no
  • tests added for new code: no
  • diff-minus-test ratio: 1.00
How is this calculated? The score is a transparent sum of weighted signals — see src/lib/pr-risk.ts computePrRiskScore.

Gate checks

All 6 checks passed
GateTestDisabled in settingsSkipped
Secret scanFound 4 secrets (0 critical)Passed
Security scanStatic rules ran (8 checks, no AI required) — no static findings. AI review unavailable: The platform's AI balance is exhausted, so AI generation is temporarily unavailable. Nothing was lost. You can queue this as a repair for the internal agent from the repository's Health page, or try again once the balance is restored.Skipped
Merge checkFast-forward merge possiblePassed
CINo CI workflows are configured for this repositorySkipped
AI ReviewAIAI review approvedPassed
c comment · e edit title · m merge · a approve · r request changes · ? shortcuts