Skip to content

chore(deps): bump the production-dependencies group with 40 updates - #1322

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-cdf451e9cf
Open

chore(deps): bump the production-dependencies group with 40 updates#1322
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-cdf451e9cf

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown

Bumps the production-dependencies group with 40 updates:

Package From To
@apollo/client 3.14.1 4.2.12
@dnd-kit/sortable 8.0.0 10.0.0
@hookform/resolvers 3.10.0 5.9.1
@tiptap/extension-image 3.23.6 3.30.5
@tiptap/extension-link 3.23.6 3.30.5
@tiptap/extension-placeholder 3.23.6 3.30.5
@tiptap/extension-youtube 3.23.6 3.30.5
@tiptap/react 3.23.6 3.30.5
@tiptap/starter-kit 3.23.6 3.30.5
bcryptjs 2.4.3 3.0.3
date-fns 3.6.0 4.4.0
dompurify 3.4.7 3.4.14
framer-motion 12.40.0 13.1.1
graphql 16.14.0 17.0.2
graphql-ws 5.16.2 6.2.1
i18next 24.2.3 26.4.0
jose 6.2.3 6.2.10
lucide-react 0.462.0 1.35.0
next 15.5.19 16.3.3
pg 8.21.0 8.23.0
pino 9.14.0 10.3.1
puppeteer 24.43.1 25.9.0
react 18.3.1 19.2.8
react-big-calendar 1.19.4 1.20.0
react-dom 18.3.1 19.2.8
react-hook-form 7.76.1 7.86.0
react-i18next 15.7.4 17.0.12
react-icons 5.6.0 5.7.0
react-intersection-observer 10.0.3 11.0.1
react-virtualized-auto-sizer 1.0.26 2.0.3
react-window 1.8.11 2.3.0
recharts 2.15.4 3.10.1
tailwind-merge 2.6.1 3.6.0
uuid 14.0.1 14.0.2
video.js 8.23.7 8.24.0
web-vitals 4.2.4 6.2.1
y-websocket 3.0.0 3.1.0
yjs 13.6.31 13.6.32
zod 3.25.76 4.4.3
zustand 5.0.14 5.0.15

Updates @apollo/client from 3.14.1 to 4.2.12

Release notes

Sourced from @​apollo/client's releases.

@​apollo/client@​4.2.12

Patch Changes

@​apollo/client@​4.2.11

Patch Changes

  • #13398 3dd3e9a Thanks @​phryneas! - Fix type signature of some DocumentationTypes to fix their display in our documentation.

  • #13392 d4f0771 Thanks @​jerelmiller! - Add a development-only warning when a network result is written to the cache but reading the query back from the cache returns a partial result. This usually points at a merge or read function that did not repair missing fields in the cache, which prevents Apollo Client from applying the cache result to the data received by the network.

@​apollo/client@​4.2.10

Patch Changes

  • #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

  • #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

  • #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

  • #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

@​apollo/client@​4.2.9

Patch Changes

  • #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

  • #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

@​apollo/client@​4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

@​apollo/client@​4.2.7

Patch Changes

@​apollo/client@​4.2.6

Patch Changes

  • #13315 a406cc9 Thanks @​fallintoplace! - Prevent relay multipart subscriptions from issuing a fetch request after serializing the request body fails.

  • #13307 abd0781 Thanks @​wolfie! - Speed up cache writes by avoiding a full AST visit of every written field to detect @stream. The check now runs only when the result carries stream info, and only inspects the field node's own directives. As a result, fields that merely contain @stream on a nested field are no longer treated as streamed themselves and now overwrite existing lists like regular fields instead of merging chunk-wise.

@​apollo/client@​4.2.5

Patch Changes

... (truncated)

Changelog

Sourced from @​apollo/client's changelog.

4.2.12

Patch Changes

4.2.11

Patch Changes

  • #13398 3dd3e9a Thanks @​phryneas! - Fix type signature of some DocumentationTypes to fix their display in our documentation.

  • #13392 d4f0771 Thanks @​jerelmiller! - Add a development-only warning when a network result is written to the cache but reading the query back from the cache returns a partial result. This usually points at a merge or read function that did not repair missing fields in the cache, which prevents Apollo Client from applying the cache result to the data received by the network.

4.2.10

Patch Changes

  • #13385 bfb674e Thanks @​jerelmiller! - Fix accidental widening of the client.mutate return type when optimisticResponse was present.

  • #13382 365373e Thanks @​jerelmiller! - Fix result types widened when a query's variables had constant types (e.g. TypedDocumentNode<Data, { type: "main" }>). This caused options such as returnPartialData or errorPolicy to be reported as their widened types (e.g. boolean, ErrorPolicy) instead of the value that was passed which returned the wrong data and dataState types.

  • #13382 365373e Thanks @​jerelmiller! - Fix issue where unknown options were permitted by TypeScript when passed alongside a valid option to APIs with modern signatures.

  • #13383 5840f50 Thanks @​jerelmiller! - Update the return type of refetch, fetchMore and useLazyQuery's execute function on the provided errorPolicy. Previously these APIs all used the default type which typed data as TData | undefined and error as ErrorLike | undefined.

4.2.9

Patch Changes

  • #13364 2f383e7 Thanks @​atharv-sys32! - Fix a bug where GraphQL variable default values were not applied during cache reads when variables with defaults were explicitly set to undefined. This caused @include/@skip directives to throw "Invalid variable referenced" errors when the variable was passed as undefined instead of being omitted entirely.

  • #13367 2b39cc8 Thanks @​jerelmiller! - Fix an issue where some @export queries would not react to cache updates when the fields keyed by exported variables were updated.

4.2.8

Patch Changes

  • #13349 501a33b Thanks @​jerelmiller! - Prevent the setTimeout in connectToDevtools that shows the devtools suggestion from firing when the user agent does not match Chrome or Firefox. This check was previously done inside the setTimeout which meant the timer was scheduled for environments where we'd never show the message anyways. For test environments, this could cause flaky tests when that setTimeout outlived the tests and ran after any virtual DOM was torn down and removed.

4.2.7

Patch Changes

4.2.6

Patch Changes

... (truncated)

Commits
  • a4a170f Version Packages (#13411)
  • 56ca81b Fix UTF-8 decoding across multipart chunks (#13400)
  • b124349 Speed up CI (#13410)
  • ba511be Version Packages (#13401)
  • d4f0771 Warn when rereading a partial cache result after a write (#13392)
  • 3dd3e9a Fix type signature of some DocumentationTypes to fix their display in our d...
  • 4947447 Version Packages (#13389)
  • bfb674e Fix client.mutate return type when optimisticResponse is provided (#13385)
  • 5840f50 Update return types for refetch, fetchMore and useLazyQuery execute o...
  • 365373e Fix widening of default options types when variables contain constant types (...
  • Additional commits viewable in compare view

Updates @dnd-kit/sortable from 8.0.0 to 10.0.0

Changelog

Sourced from @​dnd-kit/sortable's changelog.

10.0.0

Patch Changes

9.0.0

Patch Changes

Commits

Updates @hookform/resolvers from 3.10.0 to 5.9.1

Release notes

Sourced from @​hookform/resolvers's releases.

v5.9.1

5.9.1 (2026-08-17)

Bug Fixes

  • isNameInFieldArray fails to recognise bracket-notation array paths causing nested errors overwriting (#876) (f18ddfb)

v5.9.0

5.9.0 (2026-08-15)

Features

v5.8.0

5.8.0 (2026-08-13)

Features

v5.7.1

5.7.1 (2026-08-02)

Bug Fixes

  • ata-validator peer dependency version (#871) (827f20b)

v5.7.0

5.7.0 (2026-08-02)

Features

v5.6.0

5.6.0 (2026-08-01)

Features

  • improve all resovlers drops validation errors for special root field names (b011a5f)

v5.5.8

5.5.8 (2026-08-01)

... (truncated)

Commits
  • f18ddfb fix: isNameInFieldArray fails to recognise bracket-notation array paths causi...
  • c8159ae feat: update joi to v18 (#873)
  • a5100ab feat: support Vest 6
  • 28ec539 fix(vest)!: support Vest 6 (#874)
  • 827f20b fix: ata-validator peer dependency version (#871)
  • 4cfba18 feat: support vine v4 (#867)
  • 58d2e2d remove dead image
  • b011a5f feat: improve all resovlers drops validation errors for special root field names
  • 5483a03 improve all resolvers (#870)
  • 2f28787 fix: Zod resolver drops validation errors for special root field names (#869)
  • Additional commits viewable in compare view

Updates @tiptap/extension-image from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/extension-image's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-image's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • 546b655: Fix resizable images staying hidden when the image is cached or fails to load.
  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2

3.30.1

Patch Changes

  • Updated dependencies [abc8828]
    • @​tiptap/core@​3.30.1

3.30.0

Patch Changes

  • Updated dependencies [0247d39]
  • Updated dependencies [51909d3]
  • Updated dependencies [3099eef]
    • @​tiptap/core@​3.30.0

3.29.2

Patch Changes

... (truncated)

Commits
  • b0c188b chore(release): release new stable release (#8261)
  • 55f59e4 chore(release): release new stable release (#8260)
  • db790a7 chore(release): release new stable release (#8216)
  • f434577 chore: migrate over to vite+ for tooling (#8151)
  • cef2c9a chore(release): release new stable release (#8190)
  • 546b655 fix(extension-image): reveal resizable node view when the image is already ca...
  • 4c4933d chore(release): release new stable release (#8181)
  • 7901bc2 chore(release): release new stable release (#8142)
  • 5158212 chore(release): release new stable release (#8132)
  • 896564a chore(release): release new stable release (#8128)
  • Additional commits viewable in compare view

Updates @tiptap/extension-link from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/extension-link's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-link's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
    • @​tiptap/pm@​3.30.2

3.30.1

Patch Changes

  • Updated dependencies [abc8828]
    • @​tiptap/core@​3.30.1
    • @​tiptap/pm@​3.30.1

3.30.0

Patch Changes

  • Updated dependencies [0247d39]
  • Updated dependencies [58a8953]
  • Updated dependencies [51909d3]
  • Updated dependencies [3099eef]
    • @​tiptap/core@​3.30.0

... (truncated)

Commits
  • b0c188b chore(release): release new stable release (#8261)
  • 55f59e4 chore(release): release new stable release (#8260)
  • db790a7 chore(release): release new stable release (#8216)
  • f434577 chore: migrate over to vite+ for tooling (#8151)
  • cef2c9a chore(release): release new stable release (#8190)
  • 4c4933d chore(release): release new stable release (#8181)
  • 7901bc2 chore(release): release new stable release (#8142)
  • 2036090 test(extension-link): guard non-link click selection with enableClickSelectio...
  • 5158212 chore(release): release new stable release (#8132)
  • 896564a chore(release): release new stable release (#8128)
  • Additional commits viewable in compare view

Updates @tiptap/extension-placeholder from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-placeholder's changelog.

3.30.5

Patch Changes

  • @​tiptap/extensions@​3.30.5

3.30.4

Patch Changes

  • @​tiptap/extensions@​3.30.4

3.30.3

Patch Changes

  • @​tiptap/extensions@​3.30.3

3.30.2

Patch Changes

  • @​tiptap/extensions@​3.30.2

3.30.1

Patch Changes

  • @​tiptap/extensions@​3.30.1

3.30.0

Patch Changes

  • @​tiptap/extensions@​3.30.0

3.29.2

Patch Changes

  • @​tiptap/extensions@​3.29.2

3.29.1

Patch Changes

  • @​tiptap/extensions@​3.29.1

3.29.0

... (truncated)

Commits

Updates @tiptap/extension-youtube from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/extension-youtube's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-youtube's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4

3.30.3

Patch Changes

  • 7b26402: YouTube live URLs (/live/<id>) now embed the video.
  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2

3.30.1

Patch Changes

  • Updated dependencies [abc8828]
    • @​tiptap/core@​3.30.1

3.30.0

Patch Changes

  • Updated dependencies [0247d39]
  • Updated dependencies [51909d3]
  • Updated dependencies [3099eef]
    • @​tiptap/core@​3.30.0

3.29.2

Patch Changes

... (truncated)

Commits

Updates @tiptap/react from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/react's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/react's changelog.

3.30.5

Patch Changes

  • Updated dependencies [d0d499b]
    • @​tiptap/core@​3.30.5
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • Updated dependencies [01d7af8]
    • @​tiptap/core@​3.30.4
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

  • 1cb7ad3: Fix ReactNodeViewRenderer crash when contentComponent is not available
  • Updated dependencies [965a880]
    • @​tiptap/core@​3.30.3
    • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

  • Updated dependencies [3dffed5]
  • Updated dependencies [214a140]
    • @​tiptap/core@​3.30.2
    • @​tiptap/pm@​3.30.2

3.30.1

Patch Changes

  • Updated dependencies [abc8828]
    • @​tiptap/core@​3.30.1
    • @​tiptap/pm@​3.30.1

3.30.0

Minor Changes

  • 3099eef: New Decorations API

    Finally the decorations API is here! Even though Decorations itself are nothing new in ProseMirror, the new API makes it much easier to use them in Tiptap without leaving your extensions.

... (truncated)

Commits
  • b0c188b chore(release): release new stable release (#8261)
  • 55f59e4 chore(release): release new stable release (#8260)
  • db790a7 chore(release): release new stable release (#8216)
  • f434577 chore: migrate over to vite+ for tooling (#8151)
  • 1cb7ad3 fix(react): prevent crash when ReactNodeViewRenderer returns early (#7670)
  • cef2c9a chore(release): release new stable release (#8190)
  • 4c4933d chore(release): release new stable release (#8181)
  • 7901bc2 chore(release): release new stable release (#8142)
  • 3099eef feat(core): add Decorations API with framework widget renderers (#7902)
  • 31e176c fix(react): avoid stale position when syncing node view selection (#8165)
  • Additional commits viewable in compare view

Updates @tiptap/starter-kit from 3.23.6 to 3.30.5

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

  • Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

  • Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

  • YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

  • Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

  • Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

  • Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.30.5

Patch Changes

@dependabot
chore(deps): bump the production-dependencies group with 40 updates
38afaf0 
Bumps the production-dependencies group with 40 updates:

| Package | From | To |
| --- | --- | --- |
| [@apollo/client](https://github.com/apollographql/apollo-client) | `3.14.1` | `4.2.12` |
| [@dnd-kit/sortable](https://github.com/clauderic/dnd-kit/tree/HEAD/packages/sortable) | `8.0.0` | `10.0.0` |
| [@hookform/resolvers](https://github.com/react-hook-form/resolvers) | `3.10.0` | `5.9.1` |
| [@tiptap/extension-image](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-image) | `3.23.6` | `3.30.5` |
| [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link) | `3.23.6` | `3.30.5` |
| [@tiptap/extension-placeholder](https://github.com/ueberdosis/tiptap/tree/HEAD/packages-deprecated/extension-placeholder) | `3.23.6` | `3.30.5` |
| [@tiptap/extension-youtube](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-youtube) | `3.23.6` | `3.30.5` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.23.6` | `3.30.5` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.23.6` | `3.30.5` |
| [bcryptjs](https://github.com/dcodeIO/bcrypt.js) | `2.4.3` | `3.0.3` |
| [date-fns](https://github.com/date-fns/date-fns) | `3.6.0` | `4.4.0` |
| [dompurify](https://github.com/cure53/DOMPurify) | `3.4.7` | `3.4.14` |
| [framer-motion](https://github.com/motiondivision/motion) | `12.40.0` | `13.1.1` |
| [graphql](https://github.com/graphql/graphql-js) | `16.14.0` | `17.0.2` |
| [graphql-ws](https://github.com/enisdenjo/graphql-ws) | `5.16.2` | `6.2.1` |
| [i18next](https://github.com/i18next/i18next) | `24.2.3` | `26.4.0` |
| [jose](https://github.com/panva/jose) | `6.2.3` | `6.2.10` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `0.462.0` | `1.35.0` |
| [next](https://github.com/vercel/next.js) | `15.5.19` | `16.3.3` |
| [pg](https://github.com/brianc/node-postgres/tree/HEAD/packages/pg) | `8.21.0` | `8.23.0` |
| [pino](https://github.com/pinojs/pino) | `9.14.0` | `10.3.1` |
| [puppeteer](https://github.com/puppeteer/puppeteer) | `24.43.1` | `25.9.0` |
| [react](https://github.com/react/react/tree/HEAD/packages/react) | `18.3.1` | `19.2.8` |
| [react-big-calendar](https://github.com/bigcalendar/react-big-calendar) | `1.19.4` | `1.20.0` |
| [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `18.3.1` | `19.2.8` |
| [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.76.1` | `7.86.0` |
| [react-i18next](https://github.com/i18next/react-i18next) | `15.7.4` | `17.0.12` |
| [react-icons](https://github.com/react-icons/react-icons) | `5.6.0` | `5.7.0` |
| [react-intersection-observer](https://github.com/thebuilder/react-intersection-observer) | `10.0.3` | `11.0.1` |
| [react-virtualized-auto-sizer](https://github.com/bvaughn/react-virtualized-auto-sizer) | `1.0.26` | `2.0.3` |
| [react-window](https://github.com/bvaughn/react-window) | `1.8.11` | `2.3.0` |
| [recharts](https://github.com/recharts/recharts) | `2.15.4` | `3.10.1` |
| [tailwind-merge](https://github.com/dcastil/tailwind-merge) | `2.6.1` | `3.6.0` |
| [uuid](https://github.com/uuidjs/uuid) | `14.0.1` | `14.0.2` |
| [video.js](https://github.com/videojs/video.js) | `8.23.7` | `8.24.0` |
| [web-vitals](https://github.com/GoogleChrome/web-vitals) | `4.2.4` | `6.2.1` |
| [y-websocket](https://github.com/yjs/y-websocket) | `3.0.0` | `3.1.0` |
| [yjs](https://github.com/yjs/yjs) | `13.6.31` | `13.6.32` |
| [zod](https://github.com/colinhacks/zod) | `3.25.76` | `4.4.3` |
| [zustand](https://github.com/pmndrs/zustand) | `5.0.14` | `5.0.15` |


Updates `@apollo/client` from 3.14.1 to 4.2.12
- [Release notes](https://github.com/apollographql/apollo-client/releases)
- [Changelog](https://github.com/apollographql/apollo-client/blob/main/CHANGELOG.md)
- [Commits](https://github.com/apollographql/apollo-client/compare/v3.14.1...@apollo/client@4.2.12)

Updates `@dnd-kit/sortable` from 8.0.0 to 10.0.0
- [Release notes](https://github.com/clauderic/dnd-kit/releases)
- [Changelog](https://github.com/clauderic/dnd-kit/blob/@dnd-kit/sortable@10.0.0/packages/sortable/CHANGELOG.md)
- [Commits](https://github.com/clauderic/dnd-kit/commits/@dnd-kit/sortable@10.0.0/packages/sortable)

Updates `@hookform/resolvers` from 3.10.0 to 5.9.1
- [Release notes](https://github.com/react-hook-form/resolvers/releases)
- [Commits](react-hook-form/resolvers@v3.10.0...v5.9.1)

Updates `@tiptap/extension-image` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-image/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-image)

Updates `@tiptap/extension-link` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-link)

Updates `@tiptap/extension-placeholder` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages-deprecated/extension-placeholder/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages-deprecated/extension-placeholder)

Updates `@tiptap/extension-youtube` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/extension-youtube/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/extension-youtube)

Updates `@tiptap/react` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/react)

Updates `@tiptap/starter-kit` from 3.23.6 to 3.30.5
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/starter-kit)

Updates `bcryptjs` from 2.4.3 to 3.0.3
- [Release notes](https://github.com/dcodeIO/bcrypt.js/releases)
- [Commits](dcodeIO/bcrypt.js@2.4.3...v3.0.3)

Updates `date-fns` from 3.6.0 to 4.4.0
- [Release notes](https://github.com/date-fns/date-fns/releases)
- [Commits](date-fns/date-fns@v3.6.0...v4.4.0)

Updates `dompurify` from 3.4.7 to 3.4.14
- [Release notes](https://github.com/cure53/DOMPurify/releases)
- [Commits](cure53/DOMPurify@3.4.7...3.4.14)

Updates `framer-motion` from 12.40.0 to 13.1.1
- [Changelog](https://github.com/motiondivision/motion/blob/main/CHANGELOG.md)
- [Commits](motiondivision/motion@v12.40.0...v13.1.1)

Updates `graphql` from 16.14.0 to 17.0.2
- [Release notes](https://github.com/graphql/graphql-js/releases)
- [Commits](graphql/graphql-js@v16.14.0...v17.0.2)

Updates `graphql-ws` from 5.16.2 to 6.2.1
- [Release notes](https://github.com/enisdenjo/graphql-ws/releases)
- [Changelog](https://github.com/enisdenjo/graphql-ws/blob/master/CHANGELOG.md)
- [Commits](enisdenjo/graphql-ws@v5.16.2...v6.2.1)

Updates `i18next` from 24.2.3 to 26.4.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/i18next@v24.2.3...v26.4.0)

Updates `jose` from 6.2.3 to 6.2.10
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v6.2.3...v6.2.10)

Updates `lucide-react` from 0.462.0 to 1.35.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.35.0/packages/lucide-react)

Updates `next` from 15.5.19 to 16.3.3
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.19...v16.3.3)

Updates `pg` from 8.21.0 to 8.23.0
- [Changelog](https://github.com/brianc/node-postgres/blob/master/CHANGELOG.md)
- [Commits](https://github.com/brianc/node-postgres/commits/pg@8.23.0/packages/pg)

Updates `pino` from 9.14.0 to 10.3.1
- [Release notes](https://github.com/pinojs/pino/releases)
- [Commits](pinojs/pino@v9.14.0...v10.3.1)

Updates `puppeteer` from 24.43.1 to 25.9.0
- [Release notes](https://github.com/puppeteer/puppeteer/releases)
- [Changelog](https://github.com/puppeteer/puppeteer/blob/main/CHANGELOG.md)
- [Commits](puppeteer/puppeteer@puppeteer-v24.43.1...puppeteer-v25.9.0)

Updates `react` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react)

Updates `react-big-calendar` from 1.19.4 to 1.20.0
- [Release notes](https://github.com/bigcalendar/react-big-calendar/releases)
- [Changelog](https://github.com/bigcalendar/react-big-calendar/blob/master/CHANGELOG.md)
- [Commits](bigcalendar/react-big-calendar@v1.19.4...v1.20.0)

Updates `react-dom` from 18.3.1 to 19.2.8
- [Release notes](https://github.com/react/react/releases)
- [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md)
- [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom)

Updates `react-hook-form` from 7.76.1 to 7.86.0
- [Release notes](https://github.com/react-hook-form/react-hook-form/releases)
- [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md)
- [Commits](react-hook-form/react-hook-form@v7.76.1...v7.86.0)

Updates `react-i18next` from 15.7.4 to 17.0.12
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](i18next/react-i18next@v15.7.4...v17.0.12)

Updates `react-icons` from 5.6.0 to 5.7.0
- [Release notes](https://github.com/react-icons/react-icons/releases)
- [Commits](react-icons/react-icons@v5.6.0...v5.7.0)

Updates `react-intersection-observer` from 10.0.3 to 11.0.1
- [Release notes](https://github.com/thebuilder/react-intersection-observer/releases)
- [Commits](thebuilder/react-intersection-observer@v10.0.3...v11.0.1)

Updates `react-virtualized-auto-sizer` from 1.0.26 to 2.0.3
- [Release notes](https://github.com/bvaughn/react-virtualized-auto-sizer/releases)
- [Changelog](https://github.com/bvaughn/react-virtualized-auto-sizer/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-virtualized-auto-sizer@1.0.26...2.0.3)

Updates `react-window` from 1.8.11 to 2.3.0
- [Release notes](https://github.com/bvaughn/react-window/releases)
- [Changelog](https://github.com/bvaughn/react-window/blob/main/CHANGELOG.md)
- [Commits](bvaughn/react-window@1.8.11...2.3.0)

Updates `recharts` from 2.15.4 to 3.10.1
- [Release notes](https://github.com/recharts/recharts/releases)
- [Changelog](https://github.com/recharts/recharts/blob/main/CHANGELOG.md)
- [Commits](recharts/recharts@v2.15.4...v3.10.1)

Updates `tailwind-merge` from 2.6.1 to 3.6.0
- [Release notes](https://github.com/dcastil/tailwind-merge/releases)
- [Commits](dcastil/tailwind-merge@v2.6.1...v3.6.0)

Updates `uuid` from 14.0.1 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v14.0.1...v14.0.2)

Updates `video.js` from 8.23.7 to 8.24.0
- [Release notes](https://github.com/videojs/video.js/releases)
- [Changelog](https://github.com/videojs/video.js/blob/main/CHANGELOG.md)
- [Commits](videojs/video.js@v8.23.7...v8.24.0)

Updates `web-vitals` from 4.2.4 to 6.2.1
- [Changelog](https://github.com/GoogleChrome/web-vitals/blob/main/CHANGELOG.md)
- [Commits](GoogleChrome/web-vitals@v4.2.4...v6.2.1)

Updates `y-websocket` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/yjs/y-websocket/releases)
- [Commits](yjs/y-websocket@v3.0.0...v3.1.0)

Updates `yjs` from 13.6.31 to 13.6.32
- [Release notes](https://github.com/yjs/yjs/releases)
- [Commits](yjs/yjs@v13.6.31...v13.6.32)

Updates `zod` from 3.25.76 to 4.4.3
- [Release notes](https://github.com/colinhacks/zod/releases)
- [Commits](colinhacks/zod@v3.25.76...v4.4.3)

Updates `zustand` from 5.0.14 to 5.0.15
- [Release notes](https://github.com/pmndrs/zustand/releases)
- [Commits](pmndrs/zustand@v5.0.14...v5.0.15)

---
updated-dependencies:
- dependency-name: "@apollo/client"
  dependency-version: 4.2.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@dnd-kit/sortable"
  dependency-version: 10.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@hookform/resolvers"
  dependency-version: 5.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extension-image"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extension-placeholder"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extension-youtube"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/react"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.30.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bcryptjs
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: date-fns
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: dompurify
  dependency-version: 3.4.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: framer-motion
  dependency-version: 13.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: graphql
  dependency-version: 17.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: graphql-ws
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: i18next
  dependency-version: 26.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: jose
  dependency-version: 6.2.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: lucide-react
  dependency-version: 1.35.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: next
  dependency-version: 16.3.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: pg
  dependency-version: 8.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pino
  dependency-version: 10.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: puppeteer
  dependency-version: 25.9.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-big-calendar
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-dom
  dependency-version: 19.2.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-hook-form
  dependency-version: 7.86.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-i18next
  dependency-version: 17.0.12
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-icons
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: react-intersection-observer
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-virtualized-auto-sizer
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: react-window
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: recharts
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: tailwind-merge
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: video.js
  dependency-version: 8.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: web-vitals
  dependency-version: 6.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: y-websocket
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: yjs
  dependency-version: 13.6.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: zod
  dependency-version: 4.4.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: zustand
  dependency-version: 5.0.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants