snapshot of https://github.com/ueberdosis/tiptap.git (main, 2026-09-15; blobs > 131072B omitted)

.changeset/2026-08-20-ordered-list-markdown-indent.md

@@ -0,0 +1,6 @@
+---
+'@tiptap/core': patch
+'@tiptap/extension-list': patch
+---
+
+Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

.changeset/2026-08-23-youtube-missing-src.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/extension-youtube': patch
+---
+
+Pasting a YouTube iframe without a `src` attribute no longer crashes the editor. The embed is kept without a source.

.changeset/2026-08-25-remove-deprecated-packages.md

@@ -0,0 +1,7 @@
+---
+'@tiptap/starter-kit': major
+---
+
+StarterKit no longer installs the deprecated `@tiptap/extension-dropcursor`, `@tiptap/extension-gapcursor`, `@tiptap/extension-list-item`, and `@tiptap/extension-list-keymap` packages. We will not publish further updates to these packages. StarterKit still includes their extensions, so you do not need to change your configuration.
+
+If you import these extensions directly, switch to the new packages: `Dropcursor` and `Gapcursor` from `@tiptap/extensions`, and `ListItem` and `ListKeymap` from `@tiptap/extension-list`.

.changeset/2026-08-26-fix-markdown-whitespace-only-marked-text.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/markdown': patch
+---
+
+Fix Markdown serialization of whitespace-only marked text.

.changeset/2026-08-26-markdown-attribute-redos.md

@@ -0,0 +1,6 @@
+---
+'@tiptap/core': patch
+'@tiptap/extension-mention': patch
+---
+
+Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

.changeset/2026-08-26-validate-collaboration-caret-colors.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/extension-collaboration-caret': patch
+---
+
+Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

.changeset/2026-08-28-react-shared-node-view-selection.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/react': patch
+---
+
+Reduce overhead in React node views on documents with many nodes.

.changeset/2026-08-31-bump-prosemirror-view.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/pm': patch
+---
+
+Bump `prosemirror-view` to `^1.42.3`, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

.changeset/2026-08-31-react-nodeview-selection-state.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/react': minor
+---
+
+Align `selected` with ProseMirror node selections by default, expose text selections through `selectionInside`, and keep `selectedOnTextSelection` compatible.

.changeset/2026-09-04-react-editor-namespace-ts2694.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/react': patch
+---
+
+Fix a TypeScript error (TS2694) in the shipped type declarations when `skipLibCheck` is turned off.

.changeset/README.md

@@ -0,0 +1,8 @@
+# Changesets
+
+Hello and welcome! This folder has been automatically generated by `@changesets/cli`, a build tool that works
+with multi-package repos, or single-package repos to help you version and publish your code. You can
+find the full documentation for it [in our repository](https://github.com/changesets/changesets)
+
+We have a quick list of common questions to get you started engaging with this project in
+[our documentation](https://github.com/changesets/changesets/blob/main/docs/common-questions.md)

.changeset/config.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://unpkg.com/@changesets/config@3.0.1/schema.json",
+  "changelog": "@changesets/cli/changelog",
+  "commit": false,
+  "fixed": [["@tiptap/*", "!@tiptap/ai-toolkit"]],
+  "linked": [],
+  "access": "public",
+  "baseBranch": "main",
+  "updateInternalDependencies": "patch",
+  "ignore": [],
+  "___experimentalUnsafeOptions_WILL_CHANGE_IN_PATCH": {
+    "onlyUpdatePeerDependentsWhenOutOfRange": true
+  }
+}

.changeset/fix-ios-ignore-mutation-contentdom.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/core': patch
+---
+
+Fix freezes in framework-based node views on iOS and Android

.changeset/fix-merge-attributes-prototype.md

@@ -0,0 +1,5 @@
+---
+'@tiptap/core': patch
+---
+
+Prevent untrusted HTML attributes from changing an object's prototype when merged with `mergeAttributes`.

.changeset/pre.json

@@ -0,0 +1,68 @@
+{
+  "mode": "pre",
+  "tag": "next",
+  "initialVersions": {
+    "tiptap-demos": "3.0.3",
+    "@tiptap/ai-toolkit": "0.4.0",
+    "@tiptap/core": "3.30.3",
+    "@tiptap/extension-audio": "3.30.3",
+    "@tiptap/extension-blockquote": "3.30.3",
+    "@tiptap/extension-bold": "3.30.3",
+    "@tiptap/extension-bubble-menu": "3.30.3",
+    "@tiptap/extension-bullet-list": "3.30.3",
+    "@tiptap/extension-code": "3.30.3",
+    "@tiptap/extension-code-block": "3.30.3",
+    "@tiptap/extension-code-block-lowlight": "3.30.3",
+    "@tiptap/extension-collaboration": "3.30.3",
+    "@tiptap/extension-collaboration-caret": "3.30.3",
+    "@tiptap/extension-color": "3.30.3",
+    "@tiptap/extension-details": "3.30.3",
+    "@tiptap/extension-document": "3.30.3",
+    "@tiptap/extension-drag-handle": "3.30.3",
+    "@tiptap/extension-drag-handle-react": "3.30.3",
+    "@tiptap/extension-drag-handle-vue": "3.30.3",
+    "@tiptap/extension-emoji": "3.30.3",
+    "@tiptap/extension-file-handler": "3.30.3",
+    "@tiptap/extension-find-and-replace": "3.30.3",
+    "@tiptap/extension-floating-menu": "3.30.3",
+    "@tiptap/extension-font-family": "3.30.3",
+    "@tiptap/extension-hard-break": "3.30.3",
+    "@tiptap/extension-heading": "3.30.3",
+    "@tiptap/extension-highlight": "3.30.3",
+    "@tiptap/extension-horizontal-rule": "3.30.3",
+    "@tiptap/extension-image": "3.30.3",
+    "@tiptap/extension-invisible-characters": "3.30.3",
+    "@tiptap/extension-italic": "3.30.3",
+    "@tiptap/extension-link": "3.30.3",
+    "@tiptap/extension-list": "3.30.3",
+    "@tiptap/extension-mathematics": "3.30.3",
+    "@tiptap/extension-mention": "3.30.3",
+    "@tiptap/extension-node-range": "3.30.3",
+    "@tiptap/extension-ordered-list": "3.30.3",
+    "@tiptap/extension-paragraph": "3.30.3",
+    "@tiptap/extension-ruby-text": "3.30.3",
+    "@tiptap/extension-strike": "3.30.3",
+    "@tiptap/extension-subscript": "3.30.3",
+    "@tiptap/extension-superscript": "3.30.3",
+    "@tiptap/extension-table": "3.30.3",
+    "@tiptap/extension-table-of-contents": "3.30.3",
+    "@tiptap/extension-text": "3.30.3",
+    "@tiptap/extension-text-align": "3.30.3",
+    "@tiptap/extension-text-style": "3.30.3",
+    "@tiptap/extension-twitch": "3.30.3",
+    "@tiptap/extension-typography": "3.30.3",
+    "@tiptap/extension-underline": "3.30.3",
+    "@tiptap/extension-unique-id": "3.30.3",
+    "@tiptap/extension-youtube": "3.30.3",
+    "@tiptap/extensions": "3.30.3",
+    "@tiptap/html": "3.30.3",
+    "@tiptap/markdown": "3.30.3",
+    "@tiptap/pm": "3.30.3",
+    "@tiptap/react": "3.30.3",
+    "@tiptap/starter-kit": "3.30.3",
+    "@tiptap/static-renderer": "3.30.3",
+    "@tiptap/suggestion": "3.30.3",
+    "@tiptap/vue": "3.30.3"
+  },
+  "changesets": []
+}

.changeset/remove-vue-2.md

@@ -0,0 +1,18 @@
+---
+'@tiptap/vue': major
+'@tiptap/extension-drag-handle-vue': major
+---
+
+Vue 2 support is removed. `@tiptap/vue-3` is now `@tiptap/vue`, and `@tiptap/extension-drag-handle-vue-3` is now `@tiptap/extension-drag-handle-vue`.
+
+Update imports and dependencies:
+
+```diff
+- import { EditorContent } from '@tiptap/vue-3'
++ import { EditorContent } from '@tiptap/vue'
+
+- import DragHandle from '@tiptap/extension-drag-handle-vue-3'
++ import DragHandle from '@tiptap/extension-drag-handle-vue'
+```
+
+Vue 2 users must migrate to Vue 3 before using the new packages. The planned Codemod Registry package `@tiptap/codemod-v3-to-v4` updates package imports and dependencies.