build(deps): bump the minor-and-patch group across 6 directories with 34 updates

[dependabot]

Bumps the minor-and-patch group with 30 updates in the / directory:

Package	From	To
oxfmt	0.54.0	0.55.0
oxlint	1.69.0	1.70.0
turbo	2.9.16	2.9.18
elysia	1.4.28	1.4.29
@radix-ui/react-avatar	1.1.12	1.2.0
@radix-ui/react-collapsible	1.1.13	1.1.14
@radix-ui/react-dialog	1.1.16	1.1.17
@radix-ui/react-dropdown-menu	2.1.17	2.1.18
@radix-ui/react-label	2.1.9	2.1.10
@radix-ui/react-scroll-area	1.2.11	1.2.12
@radix-ui/react-select	2.3.0	2.3.1
@radix-ui/react-separator	1.1.9	1.1.10
@radix-ui/react-switch	1.3.0	1.3.1
@radix-ui/react-tooltip	1.2.9	1.2.10
@tiptap/extension-mention	3.26.0	3.27.1
@tiptap/extension-placeholder	3.26.0	3.27.1
@tiptap/pm	3.26.0	3.27.1
@tiptap/react	3.26.0	3.27.1
@tiptap/starter-kit	3.26.0	3.27.1
@tiptap/suggestion	3.26.0	3.27.1
katex	0.16.47	0.17.0
lucide-react	1.17.0	1.21.0
radix-ui	1.5.0	1.6.0
@tailwindcss/postcss	4.3.0	4.3.1
vitest	4.1.8	4.1.9
@libpdf/core	0.3.6	0.4.0
pdf-to-img	6.1.0	6.2.0
@opentelemetry/api-logs	0.218.0	0.219.0
@opentelemetry/exporter-logs-otlp-proto	0.218.0	0.219.0
@opentelemetry/sdk-logs	0.218.0	0.219.0

Bumps the minor-and-patch group with 1 update in the /apps/api directory: elysia.
Bumps the minor-and-patch group with 24 updates in the /apps/frontend directory:

Package	From	To
@radix-ui/react-avatar	1.1.12	1.2.0
@radix-ui/react-collapsible	1.1.13	1.1.14
@radix-ui/react-dialog	1.1.16	1.1.17
@radix-ui/react-dropdown-menu	2.1.17	2.1.18
@radix-ui/react-label	2.1.9	2.1.10
@radix-ui/react-scroll-area	1.2.11	1.2.12
@radix-ui/react-select	2.3.0	2.3.1
@radix-ui/react-separator	1.1.9	1.1.10
@radix-ui/react-slot	1.2.5	1.3.0
@radix-ui/react-switch	1.3.0	1.3.1
@radix-ui/react-tooltip	1.2.9	1.2.10
@tiptap/extension-mention	3.26.0	3.27.1
@tiptap/extension-placeholder	3.26.0	3.27.1
@tiptap/pm	3.26.0	3.27.1
@tiptap/react	3.26.0	3.27.1
@tiptap/starter-kit	3.26.0	3.27.1
@tiptap/suggestion	3.26.0	3.27.1
katex	0.16.47	0.17.0
lucide-react	1.17.0	1.21.0
radix-ui	1.5.0	1.6.0
uuid	14.0.0	14.0.1
@tailwindcss/postcss	4.3.0	4.3.1
tailwindcss	4.3.0	4.3.1
vitest	4.1.8	4.1.9

Bumps the minor-and-patch group with 1 update in the /packages/files directory: uuid.
Bumps the minor-and-patch group with 2 updates in the /packages/graph directory: @libpdf/core and pdf-to-img.
Bumps the minor-and-patch group with 4 updates in the /packages/logger directory: @opentelemetry/api-logs, @opentelemetry/exporter-logs-otlp-proto, @opentelemetry/resources and @opentelemetry/sdk-logs.

Updates oxfmt from 0.54.0 to 0.55.0

Changelog

Sourced from oxfmt's changelog.

[0.55.0] - 2026-06-15

🚀 Features

• 9a2788b linter/unicorn: Implement prefer-export-from rule (#22935) (AliceLanniste)

Commits

• aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
• 9a2788b feat(linter/unicorn): implement prefer-export-from rule (#22935)
• See full diff in compare view

Updates oxlint from 1.69.0 to 1.70.0

Release notes

Sourced from oxlint's releases.

oxlint v1.27.0 && oxfmt v0.12.0

Oxlint v1.27.0

🚀 Features

• 222a8f0 linter/plugins: Implement SourceCode#isSpaceBetween (#15498) (overlookmotel)
• 2f9735d linter/plugins: Implement context.languageOptions (#15486) (overlookmotel)
• bc731ff linter/plugins: Stub out all Context APIs (#15479) (overlookmotel)
• 5822cb4 linter/plugins: Add extend method to FILE_CONTEXT (#15477) (overlookmotel)
• 7b1e6f3 apps: Add pure rust binaries and release to github (#15469) (Boshen)
• 2a89b43 linter: Introduce debug assertions after fixes to assert validity (#15389) (camc314)
• ad3c45a editor: Add oxc.path.node option (#15040) (Sysix)

🐛 Bug Fixes

• 6f3cd77 linter/no-var: Incorrect warning for blocks (#15504) (Hamir Mahal)
• 6957fb9 linter/plugins: Do not allow access to Context#id in createOnce (#15489) (overlookmotel)
• 7409630 linter/plugins: Allow access to cwd in createOnce in ESLint interop mode (#15488) (overlookmotel)
• 732205e parser: Reject using / await using in a switch case / default clause (#15225) (sapphi-red)
• a17ca32 linter/plugins: Replace Context class (#15448) (overlookmotel)
• ecf2f7b language_server: Fail gracefully when tsgolint executable not found (#15436) (camc314)
• 3c8d3a7 lang-server: Improve logging in failure case for tsgolint (#15299) (camc314)
• ef71410 linter: Use jsx if source type is JS in fix debug assertion (#15434) (camc314)
• e32bbf6 linter/no-var: Handle TypeScript declare keyword in fixer (#15426) (camc314)
• 6565dbe linter/switch-case-braces: Skip comments when searching for : token (#15425) (camc314)
• 85bd19a linter/prefer-class-fields: Insert value after type annotation in fixer (#15423) (camc314)
• fde753e linter/plugins: Block access to context.settings in createOnce (#15394) (overlookmotel)
• ddd9f9f linter/forward-ref-uses-ref: Dont suggest removing wrapper in invalid positions (#15388) (camc314)
• dac2a9c linter/no-template-curly-in-string: Remove fixer (#15387) (camc314)
• 989b8e3 linter/no-var: Only fix to const if the var has an initializer (#15385) (camc314)
• cc403f5 linter/plugins: Return empty object for unimplemented parserServices (#15364) (magic-akari)

⚡ Performance

• 25d577e language_server: Start tools in parallel (#15500) (Sysix)
• 3c57291 linter/plugins: Optimize loops (#15449) (overlookmotel)
• 3166233 linter/plugins: Remove Arcs (#15431) (overlookmotel)
• 9de1322 linter/plugins: Lazily deserialize settings JSON (#15395) (overlookmotel)
• 3049ec2 linter/plugins: Optimize deepFreezeSettings (#15392) (overlookmotel)
• 444ebfd linter/plugins: Use single object for parserServices (#15378) (overlookmotel)

📚 Documentation

• 97d2104 linter: Update comment in lint.rs about default value for tsconfig path (#15530) (Connor Shea)
• 2c6bd9e linter: Always refer as "ES2015" instead of "ES6" (#15411) (sapphi-red)
• a0c5203 linter/import/named: Update "ES7" comment in examples (#15410) (sapphi-red)
• 3dc24b5 linter,minifier: Always refer as "ES Modules" instead of "ES6 Modules" (#15409) (sapphi-red)
• 2ad77fb linter/no-this-before-super: Correct "Why is this bad?" section (#15408) (sapphi-red)
• 57f0ce1 linter: Add backquotes where appropriate (#15407) (sapphi-red)

Oxfmt v0.12.0

... (truncated)

Changelog

Sourced from oxlint's changelog.

[1.70.0] - 2026-06-15

🚀 Features

• 2e8bda4 linter/vue: Implement no-dupe-keys rule (#23350) (bab)
• 1490a0a linter/react: Implement react-compiler rule (#23202) (Boshen)
• dd560ae linter/unicorn: Implement no-array-fill-with-reference-type rule (#23397) (Mikhail Baev)
• af36c2f linter: Add schema for react/jsx-curly-brace-presence (#23400) (WaterWhisperer)
• 47d34a3 linter: Add schema for react/jsx-handler-names (#23393) (WaterWhisperer)
• f4250d0 linter: Add schema for unicorn/import-style (#23386) (WaterWhisperer)
• 30c74ce linter: Add schema for jsx_a11y/no-noninteractive-element-to-interactive-role (#23384) (Sysix)
• cfbe8dc linter: Add schema for jsx_a11y/no-interactive-element-to-noninteractive-role (#23382) (WaterWhisperer)
• d15b7ff linter: Add schema for typescript/no-restricted-types (#23381) (WaterWhisperer)
• 028a811 linter: Add schema for jsx-a11y/media-has-caption (#23377) (Sysix)
• b3b1038 linter: Add schema for jsx-a11y/label-has-associated-control (#23376) (Sysix)
• 7ada6b2 linter: Add schema for jsx_a11y/no-distracting-elements (#23379) (WaterWhisperer)
• ee3dd49 linter: Add schema for jsx-a11y/img-redundant-alt (#23374) (Sysix)
• df5f8dd linter: Add short descriptions to most lint rules. (#23365) (Connor Shea)
• e3fd735 linter: Add schema for jsx_a11y/alt-text (#23369) (Sysix)
• 0f2fff4 linter: Add schema for react/exhaustive-deps (#23372) (Mikhail Baev)
• e3e4e10 linter: Add schema for react_perf/jsx-no-new-object-as-prop (#23368) (Mikhail Baev)
• 9366d44 linter: Add schema for unicorn/prefer-at (#23366) (WaterWhisperer)
• f57b55d linter: Add schema for typescript/array-type (#23355) (Sysix)
• 0dcf912 linter: Add schema for typescript/ban-ts-comment (#23354) (Sysix)
• 51fa83e linter: Add schema for react/no-did-update-set-state (#23357) (Mikhail Baev)
• 59db0bd linter: Add schema for consistent-generic-constructors (#23353) (Sysix)
• c4775c0 linter: Add schema for typescript/consistent-type-assertions (#23349) (Sysix)
• 6e516f7 linter: Add schema for typescript/consistent-type-imports (#23348) (Sysix)
• 012134d linter: Add schema for react/jsx-no-target-blank (#23345) (WaterWhisperer)
• 0806aae linter: Add schema for jsx_a11y/no-noninteractive-tabindex (#23337) (Mikhail Baev)
• 0708b5a linter: Add schema for react/jsx-filename-extension (#23315) (Mikhail Baev)
• 150bce1 linter: Add schema for typescript/no-empty-object-type (#23309) (Sysix)
• f9e36f1 linter: Add schema for typescript/no-duplicate-type-constituents (#23308) (Sysix)
• 937accf linter: Add schema for typescript/no-invalid-void-type (#23307) (Sysix)
• 3e042b9 linter: Add schema for typescript/no-misused-promises (#23306) (Sysix)
• da212d1 linter: Add schema for typescript/no-unnecessary-condition (#23305) (Sysix)
• f8f0d38 linter: Add schema for typescript/parameter-properties (#23304) (Sysix)
• 2275fc7 linter: Add schema for typescript/prefer-nullish-coalescing (#23302) (Sysix)
• d353858 linter: Add schema for typescript/prefer-string-starts-ends-with (#23301) (Sysix)
• 03060f5 linter: Add schema for typescript/triple-slash-reference (#23300) (Sysix)
• 6619cee linter: Add schema for promise/param-names (#23298) (Sysix)
• 8bf108e linter: Add schema for promise/catch-or-return (#23297) (Sysix)
• 48158d0 linter: Add schema for vitest/consistent-each-for (#23294) (Sysix)
• 7e74c98 linter: Add schema for vitest/consistent-test-filename (#23293) (Sysix)
• ff94d4a linter: Add schema for vitest/consistent-vitest-vi (#23292) (Sysix)
• 2409a10 linter: Add schema for vitest/prefer-import-in-mock (#23291) (Sysix)
• 3d782b7 linter: Add schema for react/no-unstable-nested-components (#23287) (Mikhail Baev)
• 0a0bc2f linter/jsx-a11y: Add allowedRedundantRoles option to no-redundant-roles (#22820) (bab)
• 80758a5 linter/vue: Implement no-side-effects-in-computed-properties rule (#23282) (bab)
• e3869ac linter: Add schema for react/no-object-type-as-default-prop (#23279) (Mikhail Baev)

... (truncated)

Commits

• aa79b5b release(apps): oxlint v1.70.0 && oxfmt v0.55.0 (#23442)
• 5cb8d1b fix(linter/jsx-a11y/control-has-associated-label): reject excessive label dep...
• f682e25 docs(linter): remove manually written options doc for `eslint/prefer-arrow-ca...
• 2e8bda4 feat(linter/vue): implement no-dupe-keys rule (#23350)
• 64c942c docs(linter): remove manually written options doc for eslint/no-sequences (...
• 1490a0a feat(linter/react): implement react-compiler rule (#23202)
• 965358e refactor(linter): reuse RuleNoConfig reference for rule schema (#23390)
• dd560ae feat(linter/unicorn): implement no-array-fill-with-reference-type rule (#23...
• af36c2f feat(linter): add schema for react/jsx-curly-brace-presence (#23400)
• 47d34a3 feat(linter): add schema for react/jsx-handler-names (#23393)
• Additional commits viewable in compare view

Updates turbo from 2.9.16 to 2.9.18

Release notes

Sourced from turbo's releases.

Turborepo v2.9.18

What's Changed

Changelog

• release(turborepo): 2.9.17 by @​github-actions[bot] in vercel/turborepo#13047
• ci: Fetch version.txt via API in docs alias failure notification by @​anthonyshew in vercel/turborepo#13050
• fix: Harden cache archive symlink restore by @​anthonyshew in vercel/turborepo#13051
• chore: Remove web UI mode by @​anthonyshew in vercel/turborepo#13052
• fix: Harden query server file access by @​anthonyshew in vercel/turborepo#13053
• fix: Confine prune patch paths by @​anthonyshew in vercel/turborepo#13054
• fix: Prevent git argument injection in SCM refs by @​anthonyshew in vercel/turborepo#13055
• fix: Strip special mode bits from cache restore by @​anthonyshew in vercel/turborepo#13056
• fix: Contain incremental cache outputs by @​anthonyshew in vercel/turborepo#13057
• fix(turborepo): Normalize Windows daemon path hash by @​Balance8 in vercel/turborepo#13020
• fix: Preserve vt100 cell byte counts by @​anthonyshew in vercel/turborepo#13058
• fix: Separate artifact signature fields by @​anthonyshew in vercel/turborepo#13059
• fix: Validate OidHash hex buffers by @​anthonyshew in vercel/turborepo#13060
• fix: Block self-hosted login URLs from attempting to use Vercel's SSO by @​anthonyshew in vercel/turborepo#13061

New Contributors

• @​Balance8 made their first contribution in vercel/turborepo#13020

Full Changelog: vercel/turborepo@v2.9.17...v2.9.18

Turborepo v2.9.17

What's Changed

Changelog

• fix: Keep non-PTY stdin alive for persistent tasks by @​anthonyshew in vercel/turborepo#12972
• release(turborepo): 2.9.16 by @​github-actions[bot] in vercel/turborepo#12970
• release(turborepo): 2.9.17-canary.1 by @​github-actions[bot] in vercel/turborepo#12973
• fix: Add auth HTTP timeouts by @​anthonyshew in vercel/turborepo#12976
• fix: Detect affected root tasks in query by @​anthonyshew in vercel/turborepo#12977
• fix: Wait for Windows graceful shutdown by @​anthonyshew in vercel/turborepo#12979
• release(turborepo): 2.9.17-canary.2 by @​github-actions[bot] in vercel/turborepo#12980
• test: Skip installs for JSON output fixtures by @​anthonyshew in vercel/turborepo#12981
• feat: Add Rsbuild examples by @​Nsttt in vercel/turborepo#12942
• test: Skip installs for single package dry runs by @​anthonyshew in vercel/turborepo#12982
• test: Skip Corepack setup without installs by @​anthonyshew in vercel/turborepo#12983
• test: Skip installs for metadata-only Rust tests by @​anthonyshew in vercel/turborepo#12985
• test: Skip remaining unnecessary fixture installs by @​anthonyshew in vercel/turborepo#12986
• test: Add final hash contract snapshots by @​anthonyshew in vercel/turborepo#12984
• test: Trim run logging integration matrix by @​anthonyshew in vercel/turborepo#12987
• test: Trim affected query integration matrix by @​anthonyshew in vercel/turborepo#12988
• test: Narrow Windows integration test group by @​anthonyshew in vercel/turborepo#12989
• test: Trim task dependency integration coverage by @​anthonyshew in vercel/turborepo#12990
• test: Trim affected integration coverage by @​anthonyshew in vercel/turborepo#12991
• test: Collapse integration test matrices by @​anthonyshew in vercel/turborepo#12992

... (truncated)

Commits

• 3bdce32 publish 2.9.18 to registry
• 2a76556 fix: Block self-hosted login URLs from attempting to use Vercel's SSO (#13061)
• da8e348 fix: Validate OidHash hex buffers (#13060)
• 3018717 fix: Separate artifact signature fields (#13059)
• 34514e2 fix: Preserve vt100 cell byte counts (#13058)
• 24e2d34 fix(turborepo): Normalize Windows daemon path hash (#13020)
• 16dc881 fix: Contain incremental cache outputs (#13057)
• 92e1f8e fix: Strip special mode bits from cache restore (#13056)
• f46f896 fix: Prevent git argument injection in SCM refs (#13055)
• 7f353ca fix: Confine prune patch paths (#13054)
• Additional commits viewable in compare view

Updates elysia from 1.4.28 to 1.4.29

Release notes

Sourced from elysia's releases.

1.4.29

What's changed

Improvement:

• normalize a multipart/form-data with .get instead of .getAll for faster performance

Full Changelog: elysiajs/elysia@1.4.28...1.4.29

Changelog

Sourced from elysia's changelog.

1.4.29 - 17 Jun 2026

Bug fix:

• normalize a multipart/form-data with .get instead of .getAll for faster performance

Commits

• 8358ff9 normalize formdata with get instead of getAll
• See full diff in compare view

Updates @radix-ui/react-avatar from 1.1.12 to 1.2.0

Changelog

Sourced from @​radix-ui/react-avatar's changelog.

1.2.0

• Fixed several edge cases with Avatar's loading state
  • An avatar's fallback would not be displayed again if its image component unmounted. This is now fixed.
  • Rendering multiple Avatar.Image components per Avatar.Root was never supported and results in buggy, unpredictable behavior. We now warn about this in development.
  • Zero-sized images were treated as loading, meaning that onLoadingStatusChange is never called once loaded. A zero-sized image now triggers an error status on load.

Other updates

• Fixed console warnings to show in test environments.
• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-collapsible from 1.1.13 to 1.1.14

Changelog

Sourced from @​radix-ui/react-collapsible's changelog.

1.1.14

• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-dialog from 1.1.16 to 1.1.17

Changelog

Sourced from @​radix-ui/react-dialog's changelog.

1.1.17

• Removed dev-only warnings for dialogs when title and/or description is not rendered.
• Fixed Dismissable Layer so outside interactions stopped by extension UI overlays do not dismiss dialogs or popovers.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12

Commits

• See full diff in compare view

Updates @radix-ui/react-dropdown-menu from 2.1.17 to 2.1.18

Changelog

Sourced from @​radix-ui/react-dropdown-menu's changelog.

2.1.18

• Fixed a bug where menus and submenus remained open after a window loses focus.
• Updated dependencies: @radix-ui/react-menu@2.1.18, @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-label from 2.1.9 to 2.1.10

Changelog

Sourced from @​radix-ui/react-label's changelog.

2.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-scroll-area from 1.2.11 to 1.2.12

Changelog

Sourced from @​radix-ui/react-scroll-area's changelog.

1.2.12

• Stabilized the viewport style tag unless the nonce changes.
• Fixed Duplicate index signature errors that surfaced when consuming multiple packages together.
• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-select from 2.3.0 to 2.3.1

Changelog

Sourced from @​radix-ui/react-select's changelog.

2.3.1

• Allowed a Select.Item with an empty string value to act as a "clear" option. Selecting it resets the selection back to the placeholder, restoring the native <select> behavior for optional selects.
• Fixed a bug where typeahead search resulted in focusing an element that no longer exists.
• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-collection@1.1.10, @radix-ui/react-focus-scope@1.1.10, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

Commits

• See full diff in compare view

Updates @radix-ui/react-separator from 1.1.9 to 1.1.10

Changelog

Sourced from @​radix-ui/react-separator's changelog.

1.1.10

• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-slot from 1.2.5 to 1.3.0

Changelog

Sourced from @​radix-ui/react-slot's changelog.

1.3.0

Added generic type arguments for SlotProps and createSlot

SlotProps and createSlot now accept generic type arguments to specify the type of element a slot should render, as well as its props.

const Slot = createSlot<HTMLButtonElement, MyCustomButtonProps>("Slot");

Commits

• See full diff in compare view

Updates @radix-ui/react-switch from 1.3.0 to 1.3.1

Changelog

Sourced from @​radix-ui/react-switch's changelog.

1.3.1

• Updated dependencies: @radix-ui/react-primitive@2.1.6

Commits

• See full diff in compare view

Updates @radix-ui/react-tooltip from 1.2.9 to 1.2.10

Changelog

Sourced from @​radix-ui/react-tooltip's changelog.

1.2.10

• Updated dependencies: @radix-ui/react-slot@1.3.0, @radix-ui/react-popper@1.3.1, @radix-ui/react-dismissable-layer@1.1.13, @radix-ui/react-primitive@2.1.6, @radix-ui/react-portal@1.1.12, @radix-ui/react-visually-hidden@1.2.6

Commits

• See full diff in compare view

Updates @tiptap/extension-mention from 3.26.0 to 3.27.1

Release notes

Sourced from @​tiptap/extension-mention's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

• a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
• @​tiptap/core@​3.27.1
  • @​tiptap/extension-collaboration@​3.27.1
  • @​tiptap/extension-node-range@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

• a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

• a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

• 6270b99: Ordered lists now support the type attribute (a, A, i, I).

  The <ol> type attribute is now fully preserved through the HTML round-trip:

  • type="a" → lowercase alphabetical markers
  • type="A" → uppercase alphabetical markers
  • type="i" → lowercase roman numeral markers
  • type="I" → uppercase roman numeral markers

  Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

  Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

  Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

  Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-mention's changelog.

3.27.1

Patch Changes

• @​tiptap/core@​3.27.1
• @​tiptap/pm@​3.27.1
• @​tiptap/suggestion@​3.27.1

3.27.0

Patch Changes

• Updated dependencies [0d0094d]
• Updated dependencies [795033c]
• Updated dependencies [0e0c4f9]
• Updated dependencies [6270b99]
• Updated dependencies [6d12bb9]
• Updated dependencies [6270b99]
• Updated dependencies [6270b99]
• Updated dependencies [6270b99]
  • @​tiptap/core@​3.27.0
  • @​tiptap/suggestion@​3.27.0
  • @​tiptap/pm@​3.27.0

3.26.1

Patch Changes

• @​tiptap/core@​3.26.1
• @​tiptap/pm@​3.26.1
• @​tiptap/suggestion@​3.26.1

Commits

• ed5488a chore(release): publish a new stable version (#7955)
• 2f38887 chore(release): publish a new stable version (#7936)
• 9e7fc4c chore: add bugs field to all package.json files (#7946)
• 6c1efd3 chore(release): publish a new stable version (#7934)
• See full diff in compare view

Updates @tiptap/extension-placeholder from 3.26.0 to 3.27.1

Release notes

Sourced from @​tiptap/extension-placeholder's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

• a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
• @​tiptap/core@​3.27.1
  • @​tiptap/extension-collaboration@​3.27.1
  • @​tiptap/extension-node-range@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

• a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

• a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

• 6270b99: Ordered lists now support the type attribute (a, A, i, I).

  The <ol> type attribute is now fully preserved through the HTML round-trip:

  • type="a" → lowercase alphabetical markers
  • type="A" → uppercase alphabetical markers
  • type="i" → lowercase roman numeral markers
  • type="I" → uppercase roman numeral markers

  Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

  Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

  Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

  Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/extension-placeholder's changelog.

3.27.1

Patch Changes

• Updated dependencies [2be3fb9]
  • @​tiptap/extensions@​3.27.1

3.27.0

Patch Changes

• @​tiptap/extensions@​3.27.0

3.26.1

Patch Changes

• @​tiptap/extensions@​3.26.1

Commits

• ed5488a chore(release): publish a new stable version (#7955)
• 2f38887 chore(release): publish a new stable version (#7936)
• 9e7fc4c chore: add bugs field to all package.json files (#7946)
• 6c1efd3 chore(release): publish a new stable version (#7934)
• See full diff in compare view

Updates @tiptap/pm from 3.26.0 to 3.27.1

Release notes

Sourced from @​tiptap/pm's releases.

v3.27.1

@​tiptap/extension-drag-handle

Patch Changes

• a16901d: Respect margin properties passed via dragImageProperties on the drag preview. The clone reset its margin to 0 after copying styles, which discarded any margin the user explicitly requested. The reset now runs only when no margin property is listed in dragImageProperties, so the drag image can keep the same spacing as the live block.
• @​tiptap/core@​3.27.1
  • @​tiptap/extension-collaboration@​3.27.1
  • @​tiptap/extension-node-range@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extension-list

Patch Changes

• a16901d: Fix ordered list parsing so under-indented continuation lines preserve their first character.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

@​tiptap/extensions

Patch Changes

• a16901d: Fix Placeholder flickering while a modal overlay is open. When the editor was occluded during a stream of transactions (e.g. remote collaboration edits), the viewport measurement fell back to a full-document range and repeatedly toggled the data-placeholder attribute on empty blocks. The viewport window is now frozen when the editor can't be measured reliably, so placeholders stay stable.
• @​tiptap/core@​3.27.1
  • @​tiptap/pm@​3.27.1

v3.27.0

@​tiptap/extension-list

Minor Changes

• 6270b99: Ordered lists now support the type attribute (a, A, i, I).

  The <ol> type attribute is now fully preserved through the HTML round-trip:

  • type="a" → lowercase alphabetical markers
  • type="A" → uppercase alphabetical markers
  • type="i" → lowercase roman numeral markers
  • type="I" → uppercase roman numeral markers

  Paste from external editors (Google Docs, Word, LibreOffice) now correctly detects the list style — both from the HTML type attribute and from CSS list-style-type properties.

  Plain text paste of typed ordered list markers (e.g. a. Item, I) Item, i. Item\nii. Item) is detected and converted to the correct list type.

  Markdown round-trip preserves typed markers: parsing a. Item creates type: "a", and serializing a typed list back to markdown uses the correct prefix (e.g. I., ii.).

  Joining of adjacent lists now respects type — two lists with different types (e.g. default numeric and type="a") are not merged.

Patch Changes

... (truncated...

Description has been truncated

[greptile-apps]

Greptile Summary

Routine Dependabot bump of 34 dependencies across 6 directories in the monorepo — all minor and patch releases with no source code changes beyond version strings and the lockfile.

• turbo reaches 2.9.18, which ships several security-hardening fixes (cache-archive symlink restoration, special mode bit stripping, incremental cache output containment, and git argument injection prevention in SCM refs) — a beneficial update.
• katex (0.16.47 → 0.17.0), @libpdf/core (0.3.6 → 0.4.0), @radix-ui/react-avatar (1.1.12 → 1.2.0), and lucide-react (1.17.0 → 1.21.0) are the most notable minor bumps; none of their changelogs indicate breaking changes for typical usage patterns in this codebase.

Confidence Score: 5/5

Safe to merge — only version numbers in package manifests and the lockfile change; no application logic is touched.

All changes are dependency version bumps generated by Dependabot. The turbo update actively closes several cache-security gaps. Minor version bumps (katex, @libpdf/core, radix-ui, lucide-react) show no breaking API changes in their published changelogs. The lockfile is regenerated consistently with the declared ranges.

No files require special attention; all changes are confined to package manifests and the lockfile.

Important Files Changed

Filename	Overview
apps/api/package.json	Bumps elysia from 1.4.28 to 1.4.29 (performance improvement for multipart/form-data handling)
apps/frontend/package.json	Bumps 24 dependencies including Radix UI, Tiptap, katex 0.17.0, lucide-react, radix-ui, uuid, tailwindcss, and vitest; all minor/patch updates with no apparent breaking changes
package.json	Bumps oxfmt, oxlint, and turbo (to 2.9.18, which includes security hardening for cache archive symlinks, git argument injection, and cache output containment)
packages/files/package.json	Bumps uuid from ^14.0.0 to ^14.0.1 (patch update)
packages/graph/package.json	Bumps @libpdf/core from ^0.3.6 to ^0.4.0 and pdf-to-img from ^6.1.0 to ^6.2.0 (minor updates)
packages/logger/package.json	Bumps four @opentelemetry packages from 0.218.0 to 0.219.0 and @opentelemetry/resources to ^2.8.0 (all patch/minor updates)
bun.lock	Lockfile updated to reflect all dependency version bumps across the monorepo

_{Reviews (1): Last reviewed commit: "build(deps): bump the minor-and-patch gr..." | Re-trigger Greptile}

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml