Skip to content

chore(deps): bump @tiptap/core, @tiptap/extension-image, @tiptap/extension-link, @tiptap/extension-placeholder, @tiptap/react and @tiptap/starter-kit - #672

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-43029d7267
Closed

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-43029d7267

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps @tiptap/core to 3.31.3 and updates ancestor dependencies @tiptap/core, @tiptap/extension-image, @tiptap/extension-link, @tiptap/extension-placeholder, @tiptap/react and @tiptap/starter-kit. These dependencies need to be updated together.

Updates @tiptap/core from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/core's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.31.3

Patch Changes

  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2

3.31.1

Patch Changes

  • cd32a2f: Fix freezes in framework-based node views on iOS and Android
    • @​tiptap/pm@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/pm@​3.31.0

3.30.6

Patch Changes

  • 9f844ab: Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.
    • @​tiptap/pm@​3.30.6

3.30.5

Patch Changes

  • d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • 01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-image from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-image's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-image's changelog.

3.31.3

Patch Changes

  • @​tiptap/core@​3.31.3

3.31.2

Patch Changes

  • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/core@​3.31.0

3.30.6

Patch Changes

  • Updated dependencies [9f844ab]
    • @​tiptap/core@​3.30.6

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-link from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-link's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-link's changelog.

3.31.3

Patch Changes

  • @​tiptap/core@​3.31.3
  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2
    • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1
    • @​tiptap/pm@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/core@​3.31.0
  • @​tiptap/pm@​3.31.0

3.30.6

Patch Changes

  • Updated dependencies [9f844ab]
    • @​tiptap/core@​3.30.6
    • @​tiptap/pm@​3.30.6

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

... (truncated)

Commits

Updates @tiptap/extension-placeholder from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-placeholder's changelog.

3.31.3

Patch Changes

  • @​tiptap/extensions@​3.31.3

3.31.2

Patch Changes

  • @​tiptap/extensions@​3.31.2

3.31.1

Patch Changes

  • @​tiptap/extensions@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/extensions@​3.31.0

3.30.6

Patch Changes

  • @​tiptap/extensions@​3.30.6

3.30.5

Patch Changes

  • @​tiptap/extensions@​3.30.5

3.30.4

Patch Changes

  • @​tiptap/extensions@​3.30.4

3.30.3

Patch Changes

  • @​tiptap/extensions@​3.30.3

3.30.2

... (truncated)

Commits

Updates @tiptap/react from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/react's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/react's changelog.

3.31.3

Patch Changes

  • 99af46d: Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.
    • @​tiptap/core@​3.31.3
    • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2
    • @​tiptap/core@​3.31.2

3.31.1

Patch Changes

  • Updated dependencies [cd32a2f]
    • @​tiptap/core@​3.31.1
    • @​tiptap/pm@​3.31.1

3.31.0

Minor Changes

  • 4372d81: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

Patch Changes

  • @​tiptap/core@​3.31.0
  • @​tiptap/pm@​3.31.0

3.30.6

Patch Changes

  • afb3fcc: Reduce overhead in React node views on documents with many nodes.
  • Updated dependencies [9f844ab]
    • @​tiptap/core@​3.30.6
    • @​tiptap/pm@​3.30.6

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

... (truncated)

Commits
  • 35d2110 chore(release): release new stable release (#8311)
  • 99af46d fix(react): stop importing Editor through the package barrel (#8308)
  • f38fec0 chore(release): release new stable release (#8304)
  • bd35333 chore(release): release new stable release (#8297)
  • 0280f4a chore(release): release new stable release (#8292)
  • 4372d81 Refactor React node view selection tracking (#8289) (#8291)
  • 5302fda chore(release): release new stable release (#8264)
  • afb3fcc add new visual selection handler & refactored react node view selection handl...
  • b0c188b chore(release): release new stable release (#8261)
  • 55f59e4 chore(release): release new stable release (#8260)
  • Additional commits viewable in compare view

Updates @tiptap/starter-kit from 2.27.2 to 3.31.3

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.31.3

Patch Changes

  • @​tiptap/extension-dropcursor@​3.31.3
  • @​tiptap/extension-gapcursor@​3.31.3
  • @​tiptap/extension-list-item@​3.31.3
  • @​tiptap/extension-list-keymap@​3.31.3
  • @​tiptap/core@​3.31.3
  • @​tiptap/extension-blockquote@​3.31.3
  • @​tiptap/extension-bold@​3.31.3
  • @​tiptap/extension-bullet-list@​3.31.3
  • @​tiptap/extension-code@​3.31.3
  • @​tiptap/extension-code-block@​3.31.3
  • @​tiptap/extension-document@​3.31.3
  • @​tiptap/extension-hard-break@​3.31.3
  • @​tiptap/extension-heading@​3.31.3
  • @​tiptap/extension-horizontal-rule@​3.31.3
  • @​tiptap/extension-italic@​3.31.3
  • @​tiptap/extension-link@​3.31.3
  • @​tiptap/extension-list@​3.31.3
  • @​tiptap/extension-ordered-list@​3.31.3
  • @​tiptap/extension-paragraph@​3.31.3
  • @​tiptap/extension-strike@​3.31.3
  • @​tiptap/extension-text@​3.31.3
  • @​tiptap/extension-underline@​3.31.3
  • @​tiptap/extensions@​3.31.3
  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2
    • @​tiptap/core@​3.31.2
    • @​tiptap/extension-blockquote@​3.31.2
    • @​tiptap/extension-code-block@​3.31.2
    • @​tiptap/extension-horizontal-rule@​3.31.2
    • @​tiptap/extension-link@​3.31.2
    • @​tiptap/extension-list@​3.31.2
    • @​tiptap/extensions@​3.31.2
    • @​tiptap/extension-bold@​3.31.2
    • @​tiptap/extension-code@​3.31.2
    • @​tiptap/extension-document@​3.31.2
    • @​tiptap/extension-hard-break@​3.31.2
    • @​tiptap/extension-heading@​3.31.2
    • @​tiptap/extension-italic@​3.31.2
    • @​tiptap/extension-paragraph@​3.31.2
    • @​tiptap/extension-strike@​3.31.2

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 2, 2026
…nsion-link, @tiptap/extension-placeholder, @tiptap/react and @tiptap/starter-kit

Bumps [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) to 3.31.3 and updates ancestor dependencies [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core), [@tiptap/extension-image](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-image), [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link), [@tiptap/extension-placeholder](https://github.com/ueberdosis/tiptap/tree/HEAD/packages-deprecated/extension-placeholder), [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) and [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit). These dependencies need to be updated together.


Updates `@tiptap/core` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/core)

Updates `@tiptap/extension-image` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-image/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-image)

Updates `@tiptap/extension-link` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/extension-link)

Updates `@tiptap/extension-placeholder` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages-deprecated/extension-placeholder/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages-deprecated/extension-placeholder)

Updates `@tiptap/react` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/react)

Updates `@tiptap/starter-kit` from 2.27.2 to 3.31.3
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/starter-kit)

---
updated-dependencies:
- dependency-name: "@tiptap/core"
  dependency-version: 3.31.0
  dependency-type: indirect
- dependency-name: "@tiptap/extension-image"
  dependency-version: 3.31.0
  dependency-type: direct:production
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.31.0
  dependency-type: direct:production
- dependency-name: "@tiptap/extension-placeholder"
  dependency-version: 3.31.0
  dependency-type: direct:production
- dependency-name: "@tiptap/react"
  dependency-version: 3.31.0
  dependency-type: direct:production
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.31.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-43029d7267 branch from a0e8540 to b82d8c2 Compare September 18, 2026 19:45
@dependabot @github

dependabot Bot commented on behalf of github Sep 19, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-43029d7267 branch September 19, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant