Upgrading @tiptap/extension-text-align 2 to 3
Breaking2.27.3 → 3.32.2Breaking2Security11Platform2New41Changed146Fixed192
Fetching 151 releases from GitHub…40 / 151
BreakingUpgrade verdict
2 breaking changes and 2 platform requirement changes and 11 security fixes.
In plain terms
- Extending a link mark now stops at links with a different URL; pass an empty object to get the old behavior.
- When using the Tiptap React component you must now pass either an editor or an instance prop.
- The blockquote package now expects your app to provide the ProseMirror packages, avoiding duplicate copies in your bundle.
- Updates the @tiptap/pm dependency to 3.22.4.
Must act Top 5 of 15 that need code or config changes
What you must change
Breaking2
extendMarkRange now defaults to the first mark's attributes of the given type, so extendMarkRange('link') no longer extends to adjacent links with different hrefs.
extendMarkRangeChanges prop types of the Tiptap component so that either the
editor or the instance field is required.TiptapeditorinstanceSecurity11
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Prevents extra CSS declarations from being rendered from editor content.
Fixes a bug that allowed potentially unsafe color values from other collaboration clients; unsafe colors are now ignored.
Bumps prosemirror-view to ^1.42.3, fixing an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript.
prosemirror-viewFixes a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the event loop.
Prevents untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
mergeAttributesEscapes HTML string renderer text content and attribute values to prevent injected markup from untrusted content.
Platform2
Adds @tiptap/pm as a peer dependency so bundlers resolve ProseMirror packages from the app instead of duplicating prosemirror-model.
@tiptap/pmprosemirror-model@tiptap/extension-blockquoteUpdates the @tiptap/pm dependency to 3.22.4.
@tiptap/pmAPI changes
Generated by DepDelta from published .d.ts files. Not mixed with prose notes.
- removed:
default TextAlign - removed:
export * from './text-align' - added:
const TextAlign: Extension<TextAlignOptions, any> - added:
const default: Extension<TextAlignOptions, any> - added:
declare module '@tiptap/core' - added:
interface TextAlignOptions - added:
property TextAlignOptions.alignments: string[] - added:
property TextAlignOptions.defaultAlignment: string | null - added:
property TextAlignOptions.types: string[]
- removed:
const TextAlign: Extension<TextAlignOptions, any> - removed:
declare module '@tiptap/core' - removed:
interface TextAlignOptions - removed:
property TextAlignOptions.alignments: string[] - removed:
property TextAlignOptions.defaultAlignment: string | null - removed:
property TextAlignOptions.types: string[]