Skip to content

chore(deps): bump @tiptap/core from 3.30.4 to 3.30.5 - #8648

Merged
usirin merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/core-3.30.5
Sep 20, 2026
Merged

usirin merged 1 commit into
mainfrom
dependabot/npm_and_yarn/tiptap/core-3.30.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2026 •

Copy link
Copy Markdown
Contributor

Bumps @tiptap/core from 3.30.4 to 3.30.5.

Release notes

Sourced from @​tiptap/core's releases.

v3.30.5

@​tiptap/core

Patch Changes

  • Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
Changelog

Sourced from @​tiptap/core's changelog.

3.30.5

Patch Changes

  • d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
    • @​tiptap/pm@​3.30.5
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 8, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tiptap/core-3.30.5 branch from 2b86d50 to 8a90851 Compare September 9, 2026 00:09
@github-actions

github-actions Bot commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

heal-ci: ROUTED — PR #8648 @ 8a90851 → author

Scheduled stall sweep: this pull request classifies as linkage-refused, stranded 294 minute(s) at head 8a908512d15bcbf20d527ddf5366363e7526ab57.

Detection only — this run merged nothing, re-ran nothing and spawned nothing. What to do about the flag is a driver decision; /fabrika:heal-ci 8648 reads the full diagnosis.

Posted by the heal-ci-sweep workflow (#6146). The suppression key <pr>:<class>:<head> rides in the marker below, matched over the whole comment history: no further note lands here until this pull request changes class or gains a new head commit.

Bumps [@tiptap/core](https://github.com/ueberdosis/tiptap/tree/HEAD/packages/core) from 3.30.4 to 3.30.5.
- [Release notes](https://github.com/ueberdosis/tiptap/releases)
- [Changelog](https://github.com/ueberdosis/tiptap/blob/v3.30.5/packages/core/CHANGELOG.md)
- [Commits](https://github.com/ueberdosis/tiptap/commits/v3.30.5/packages/core)

---
updated-dependencies:
- dependency-name: "@tiptap/core"
  dependency-version: 3.30.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/tiptap/core-3.30.5 branch from 8a90851 to 459dcd8 Compare September 17, 2026 19:03
@github-actions

Copy link
Copy Markdown
Contributor

heal-ci: ROUTED — PR #8648 @ 459dcd8 → author

Scheduled stall sweep: this pull request classifies as linkage-refused, stranded 155 minute(s) at head 459dcd8ec92e773493a09010e053ae96b4aba9da.

Detection only — this run merged nothing, re-ran nothing and spawned nothing. What to do about the flag is a driver decision; /fabrika:heal-ci 8648 reads the full diagnosis.

Posted by the heal-ci-sweep workflow (#6146). The suppression key <pr>:<class>:<head> rides in the marker below, matched over the whole comment history: no further note lands here until this pull request changes class or gains a new head commit.

@usirin
usirin added this pull request to the merge queue Sep 20, 2026
Merged via the queue into main with commit 989e5dc Sep 20, 2026
42 checks passed
@usirin
usirin deleted the dependabot/npm_and_yarn/tiptap/core-3.30.5 branch September 20, 2026 21:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant