Skip to content

build(deps): Bump the production-dependencies group with 5 updates#143

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d3ed8d800d
Open

build(deps): Bump the production-dependencies group with 5 updates#143
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/production-dependencies-d3ed8d800d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 2, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 5 updates:

Package From To
@tightknitai/slack-block-kit-validator 0.1.9 0.1.10
@tiptap/extension-link 3.26.1 3.27.1
@tiptap/react 3.26.1 3.27.1
@tiptap/starter-kit 3.26.1 3.27.1
nanoid 5.1.11 5.1.16

Updates @tightknitai/slack-block-kit-validator from 0.1.9 to 0.1.10

Release notes

Sourced from @​tightknitai/slack-block-kit-validator's releases.

slack-block-kit-validator: v0.1.10

0.1.10 (2026-07-01)

Features

  • add data_table block support and surface-rule drift check (ENG-5108) (#55) (68ba572)
Changelog

Sourced from @​tightknitai/slack-block-kit-validator's changelog.

0.1.10 (2026-07-01)

Features

  • add data_table block support and surface-rule drift check (ENG-5108) (#55) (68ba572)
Commits
  • 6e94146 chore(main): release slack-block-kit-validator 0.1.10 (#56)
  • 68ba572 feat: add data_table block support and surface-rule drift check (ENG-5108) (#55)
  • See full diff in compare view

Updates @tiptap/extension-link from 3.26.1 to 3.27.1

Release notes

Sourced from @​tiptap/extension-link's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

  • a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
  • @​tiptap/core@​3.27.1
    • @​tiptap/extension-collaboration@​3.27.1
    • @​tiptap/extension-node-range@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

  • a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

  • a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

  • 6270b99: Ordered lists now support the type attribute (a, A, i, I).

    The <ol> type attribute is now fully preserved through the HTML round-trip:

    • type="a" → lowercase alphabetical markers
    • type="A" → uppercase alphabetical markers
    • type="i" → lowercase roman numeral markers
    • type="I" → uppercase roman numeral markers

    Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

    Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

    Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

    Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-link's changelog.

3.27.1

Patch Changes

  • @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

3.27.0

Patch Changes

  • 24051bd: Fix isAllowedUri accepting unknown protocols whose name contains a hyphen (e.g. unknown-protocol://test). The hyphen is a valid scheme character per RFC 3986, but the regex was built from a template literal where \- collapsed to -, leaving the terminator class [^a-z+.-:] to parse .-: as a character range that excluded 0-9 and / rather than -. With the proper double-escape, the regex correctly excludes - and unknown hyphenated schemes are rejected again.
  • Updated dependencies [0d0094d]
  • Updated dependencies [795033c]
  • Updated dependencies [0e0c4f9]
  • Updated dependencies [6d12bb9]
    • @​tiptap/core@​3.27.0
    • @​tiptap/pm@​3.27.0
Commits
  • ed5488a chore(release): publish a new stable version (#7955)
  • 2f38887 chore(release): publish a new stable version (#7936)
  • 9e7fc4c chore: add bugs field to all package.json files (#7946)
  • 24051bd fix(extension-link): escape backslash in isAllowedUri regex so hyphens are re...
  • See full diff in compare view

Updates @tiptap/react from 3.26.1 to 3.27.1

Release notes

Sourced from @​tiptap/react's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

  • a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
  • @​tiptap/core@​3.27.1
    • @​tiptap/extension-collaboration@​3.27.1
    • @​tiptap/extension-node-range@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

  • a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

  • a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

  • 6270b99: Ordered lists now support the type attribute (a, A, i, I).

    The <ol> type attribute is now fully preserved through the HTML round-trip:

    • type="a" → lowercase alphabetical markers
    • type="A" → uppercase alphabetical markers
    • type="i" → lowercase roman numeral markers
    • type="I" → uppercase roman numeral markers

    Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

    Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

    Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

    Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/react's changelog.

3.27.1

Patch Changes

  • @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

3.27.0

Patch Changes

  • Updated dependencies [0d0094d]
  • Updated dependencies [795033c]
  • Updated dependencies [0e0c4f9]
  • Updated dependencies [6d12bb9]
    • @​tiptap/core@​3.27.0
    • @​tiptap/pm@​3.27.0
Commits

Updates @tiptap/starter-kit from 3.26.1 to 3.27.1

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

  • a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
  • @​tiptap/core@​3.27.1
    • @​tiptap/extension-collaboration@​3.27.1
    • @​tiptap/extension-node-range@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

  • a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

  • a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
  • @​tiptap/core@​3.27.1
    • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

  • 6270b99: Ordered lists now support the type attribute (a, A, i, I).

    The <ol> type attribute is now fully preserved through the HTML round-trip:

    • type="a" → lowercase alphabetical markers
    • type="A" → uppercase alphabetical markers
    • type="i" → lowercase roman numeral markers
    • type="I" → uppercase roman numeral markers

    Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

    Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

    Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

    Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.27.1

Patch Changes

  • Updated dependencies [a16901d]
  • Updated dependencies [2be3fb9]
    • @​tiptap/extension-list@​3.27.1
    • @​tiptap/extensions@​3.27.1
    • @​tiptap/extension-list-item@​3.27.1
    • @​tiptap/extension-list-keymap@​3.27.1
    • @​tiptap/extension-bullet-list@​3.27.1
    • @​tiptap/extension-ordered-list@​3.27.1
    • @​tiptap/extension-dropcursor@​3.27.1
    • @​tiptap/extension-gapcursor@​3.27.1
    • @​tiptap/core@​3.27.1
    • @​tiptap/extension-blockquote@​3.27.1
    • @​tiptap/extension-bold@​3.27.1
    • @​tiptap/extension-code@​3.27.1
    • @​tiptap/extension-code-block@​3.27.1
    • @​tiptap/extension-document@​3.27.1
    • @​tiptap/extension-hard-break@​3.27.1
    • @​tiptap/extension-heading@​3.27.1
    • @​tiptap/extension-horizontal-rule@​3.27.1
    • @​tiptap/extension-italic@​3.27.1
    • @​tiptap/extension-link@​3.27.1
    • @​tiptap/extension-paragraph@​3.27.1
    • @​tiptap/extension-strike@​3.27.1
    • @​tiptap/extension-text@​3.27.1
    • @​tiptap/extension-underline@​3.27.1
    • @​tiptap/pm@​3.27.1

3.27.0

Patch Changes

  • Updated dependencies [0d0094d]
  • Updated dependencies [795033c]
  • Updated dependencies [24051bd]
  • Updated dependencies [0e0c4f9]
  • Updated dependencies [6d12bb9]
    • @​tiptap/extension-list@​3.27.0
    • @​tiptap/core@​3.27.0
    • @​tiptap/extension-link@​3.27.0
    • @​tiptap/extension-list-item@​3.27.0
    • @​tiptap/extension-list-keymap@​3.27.0
    • @​tiptap/extension-bullet-list@​3.27.0
    • @​tiptap/extension-ordered-list@​3.27.0
    • @​tiptap/extension-blockquote@​3.27.0
    • @​tiptap/extension-bold@​3.27.0
    • @​tiptap/extension-code@​3.27.0

... (truncated)

Commits

Updates nanoid from 5.1.11 to 5.1.16

Release notes

Sourced from nanoid's releases.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Changelog

Sourced from nanoid's changelog.

5.1.16

5.1.15

  • Fixed random pool corruption on big ID sizes.

5.1.14

  • Fixed npm package size regression.

5.1.13

  • Fixed npm package size regression.

5.1.12

  • Moved to npm Provenance and Staged Publishing.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@tightknitai/slack-block-kit-validator](https://github.com/TightknitAI/slack-block-kit-validator) | `0.1.9` | `0.1.10` |
| [@tiptap/extension-link](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/extension-link) | `3.26.1` | `3.27.1` |
| [@tiptap/react](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/react) | `3.26.1` | `3.27.1` |
| [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) | `3.26.1` | `3.27.1` |
| [nanoid](https://github.com/ai/nanoid) | `5.1.11` | `5.1.16` |


Updates `@tightknitai/slack-block-kit-validator` from 0.1.9 to 0.1.10
- [Release notes](https://github.com/TightknitAI/slack-block-kit-validator/releases)
- [Changelog](https://github.com/TightknitAI/slack-block-kit-validator/blob/main/CHANGELOG.md)
- [Commits](TightknitAI/slack-block-kit-validator@slack-block-kit-validator-v0.1.9...slack-block-kit-validator-v0.1.10)

Updates `@tiptap/extension-link` from 3.26.1 to 3.27.1
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/extension-link/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.27.1/packages/extension-link)

Updates `@tiptap/react` from 3.26.1 to 3.27.1
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/react/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.27.1/packages/react)

Updates `@tiptap/starter-kit` from 3.26.1 to 3.27.1
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/main/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.27.1/packages/starter-kit)

Updates `nanoid` from 5.1.11 to 5.1.16
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@5.1.11...5.1.16)

---
updated-dependencies:
- dependency-name: "@tightknitai/slack-block-kit-validator"
  dependency-version: 0.1.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: "@tiptap/extension-link"
  dependency-version: 3.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/react"
  dependency-version: 3.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.27.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nanoid
  dependency-version: 5.1.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 2, 2026
@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Held for manual review: @tightknitai/slack-block-kit-validator, @tiptap/extension-link, @tiptap/react, @tiptap/starter-kit, nanoid is on the security-sensitive auto-merge exclusion list. Verify the changelog and source diff before merging.

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
block-kitchen acfae2c Commit Preview URL

Branch Preview URL
Jul 02 2026, 04:43 PM

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants