Skip to content

Upgrading @tiptap/extension-text-align 2 to 3

Breaking2.27.3 → 3.32.2Breaking2Security11Platform2New41Changed146Fixed192

Fetching 151 releases from GitHub…40 / 151
BreakingUpgrade verdict

2 breaking changes and 2 platform requirement changes and 11 security fixes.

  • Extending a link mark now stops at links with a different URL; pass an empty object to get the old behavior.
  • When using the Tiptap React component you must now pass either an editor or an instance prop.
  • The blockquote package now expects your app to provide the ProseMirror packages, avoiding duplicate copies in your bundle.
  • Updates the @tiptap/pm dependency to 3.22.4.
Top 5 of 15 that need code or config changes
Breaking2
extendMarkRange now defaults to the first mark's attributes of the given type, so extendMarkRange('link') no longer extends to adjacent links with different hrefs.
extendMarkRange
Changes prop types of the Tiptap component so that either the editor or the instance field is required.
Tiptapeditorinstance
Security11
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Fixes a bug that allowed potentially unsafe color values from other collaboration clients; unsafe colors are now ignored.
Bumps prosemirror-view to ^1.42.3, fixing an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript.
prosemirror-view
Fixes a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the event loop.
Prevents untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
mergeAttributes
Escapes HTML string renderer text content and attribute values to prevent injected markup from untrusted content.
Platform2
Adds @tiptap/pm as a peer dependency so bundlers resolve ProseMirror packages from the app instead of duplicating prosemirror-model.
@tiptap/pmprosemirror-model@tiptap/extension-blockquote
Updates the @tiptap/pm dependency to 3.22.4.
@tiptap/pm

Generated by DepDelta from published .d.ts files. Not mixed with prose notes.

  • removed: default TextAlign
  • removed: export * from './text-align'
  • added: const TextAlign: Extension<TextAlignOptions, any>
  • added: const default: Extension<TextAlignOptions, any>
  • added: declare module '@tiptap/core'
  • added: interface TextAlignOptions
  • added: property TextAlignOptions.alignments: string[]
  • added: property TextAlignOptions.defaultAlignment: string | null
  • added: property TextAlignOptions.types: string[]
  • removed: const TextAlign: Extension<TextAlignOptions, any>
  • removed: declare module '@tiptap/core'
  • removed: interface TextAlignOptions
  • removed: property TextAlignOptions.alignments: string[]
  • removed: property TextAlignOptions.defaultAlignment: string | null
  • removed: property TextAlignOptions.types: string[]