Skip to content

chore(web): bump Tiptap and DOMPurify dependencies - #805

Open
hejsztynx wants to merge 2 commits into
mainfrom
@ksienkiewicz/chore-bump-tiptap-3.31.3
Open

hejsztynx wants to merge 2 commits into
mainfrom
@ksienkiewicz/chore-bump-tiptap-3.31.3

Conversation

@hejsztynx

@hejsztynx hejsztynx commented Sep 22, 2026

Copy link
Copy Markdown
Collaborator

Summary

Closes #802

Bumped tiptap and dompurify dependencies in the library package to their current latest versions.

All web tests pass.

Test Plan

Reinstall dependencies, build and run the example-web app.

Compatibility

OS Implemented
iOS
Android
Web

Checklist

  • E2E tests are passing
  • Required E2E tests have been added (if applicable)

Copilot AI lite review requested due to automatic review settings September 22, 2026 14:53

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

Update the docs workspace lockfile so the vulnerable DOMPurify version is no longer installed.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 1 High severity

Open (1)
What changed in this PR

Updates Tiptap and DOMPurify to patched versions and refreshes the root lockfile.

Changes:

  • Bumps Tiptap packages to 3.31.3.
  • Bumps DOMPurify to 3.4.15.
  • Refreshes related dependencies.
File Summary
package.json Updates direct dependency versions; the docs workspace still resolves DOMPurify 3.4.11.
yarn.lock Locks updated root dependencies and transitive packages.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread package.json
@hejsztynx hejsztynx changed the title chore: bump Tiptap and DOMPurify dependencies chore(web): bump Tiptap and DOMPurify dependencies Sep 22, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

HIGH level tiptap package advisory

2 participants