Skip to content
This repository was archived by the owner on Sep 25, 2026. It is now read-only.

chore: Bump @tiptap/starter-kit from 3.30.0 to 3.31.3 - #792

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/starter-kit-3.31.3
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/starter-kit-3.31.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 18, 2026

Copy link
Copy Markdown
Contributor

Bumps @tiptap/starter-kit from 3.30.0 to 3.31.3.

Release notes

Sourced from @​tiptap/starter-kit's releases.

v3.31.3

@​tiptap/extension-collaboration-caret

Patch Changes

  • Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

  • Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

@​tiptap/pm

Patch Changes

  • Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

@​tiptap/core

Patch Changes

  • Fix freezes in framework-based node views on iOS and Android

v3.31.0

@​tiptap/react

Minor Changes

  • e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

@​tiptap/core

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

  • Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/starter-kit's changelog.

3.31.3

Patch Changes

  • @​tiptap/extension-dropcursor@​3.31.3
  • @​tiptap/extension-gapcursor@​3.31.3
  • @​tiptap/extension-list-item@​3.31.3
  • @​tiptap/extension-list-keymap@​3.31.3
  • @​tiptap/core@​3.31.3
  • @​tiptap/extension-blockquote@​3.31.3
  • @​tiptap/extension-bold@​3.31.3
  • @​tiptap/extension-bullet-list@​3.31.3
  • @​tiptap/extension-code@​3.31.3
  • @​tiptap/extension-code-block@​3.31.3
  • @​tiptap/extension-document@​3.31.3
  • @​tiptap/extension-hard-break@​3.31.3
  • @​tiptap/extension-heading@​3.31.3
  • @​tiptap/extension-horizontal-rule@​3.31.3
  • @​tiptap/extension-italic@​3.31.3
  • @​tiptap/extension-link@​3.31.3
  • @​tiptap/extension-list@​3.31.3
  • @​tiptap/extension-ordered-list@​3.31.3
  • @​tiptap/extension-paragraph@​3.31.3
  • @​tiptap/extension-strike@​3.31.3
  • @​tiptap/extension-text@​3.31.3
  • @​tiptap/extension-underline@​3.31.3
  • @​tiptap/extensions@​3.31.3
  • @​tiptap/pm@​3.31.3

3.31.2

Patch Changes

  • Updated dependencies [c56b4c9]
    • @​tiptap/pm@​3.31.2
    • @​tiptap/core@​3.31.2
    • @​tiptap/extension-blockquote@​3.31.2
    • @​tiptap/extension-code-block@​3.31.2
    • @​tiptap/extension-horizontal-rule@​3.31.2
    • @​tiptap/extension-link@​3.31.2
    • @​tiptap/extension-list@​3.31.2
    • @​tiptap/extensions@​3.31.2
    • @​tiptap/extension-bold@​3.31.2
    • @​tiptap/extension-code@​3.31.2
    • @​tiptap/extension-document@​3.31.2
    • @​tiptap/extension-hard-break@​3.31.2
    • @​tiptap/extension-heading@​3.31.2
    • @​tiptap/extension-italic@​3.31.2
    • @​tiptap/extension-paragraph@​3.31.2
    • @​tiptap/extension-strike@​3.31.2

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@tiptap/starter-kit](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/starter-kit) from 3.30.0 to 3.31.3.
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.31.3/packages/starter-kit/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.31.3/packages/starter-kit)

---
updated-dependencies:
- dependency-name: "@tiptap/starter-kit"
  dependency-version: 3.31.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 18, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 18, 2026 17:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Sep 18, 2026
@milosh86 milosh86 closed this Sep 25, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/tiptap/starter-kit-3.31.3 branch September 25, 2026 13:18
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant