Skip to content

chore: bump @tiptap/core from 3.29.2 to 3.31.3 - #3070

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/core-3.31.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/core-3.31.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor

Bumps @tiptap/core from 3.29.2 to 3.31.3.

Release notes

Sourced from @​tiptap/core's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.31.3

Patch Changes

  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2

3.31.1

Patch Changes

  • cd32a2f: Fix freezes in framework-based node views on iOS and Android
    • @​tiptap/pm@​3.31.1

3.31.0

Patch Changes

  • @​tiptap/pm@​3.31.0

3.30.6

Patch Changes

  • 9f844ab: Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.
    • @​tiptap/pm@​3.30.6

3.30.5

Patch Changes

  • d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
    • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

  • 01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
    • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

... (truncated)

Commits

@dependabot dependabot Bot added the npm dependencies Bumps dependencies label Sep 8, 2026
@vercel

vercel Bot commented Sep 8, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
blocknote Error Error Sep 14, 2026 8:41am UTC
blocknote-website Error Error Sep 14, 2026 8:41am UTC

Request Review

@coderabbitai

coderabbitai Bot commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 584d9679-83a6-4148-b32c-21e2b858e4db

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@nperez0111

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) from 3.29.2 to 3.31.3.
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/core)

---
updated-dependencies:
- dependency-name: "@tiptap/core"
  dependency-version: 3.31.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

npm dependencies Bumps dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant