chore(deps): update npm non-major

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@playwright/test (source)	1.62.1 → 1.63.0
@tiptap/core (source)	3.30.5 → 3.31.3
@tiptap/extension-character-count (source)	3.30.5 → 3.31.3
@tiptap/extension-image (source)	3.30.5 → 3.31.3
@tiptap/extension-link (source)	3.30.5 → 3.31.3
@tiptap/extension-placeholder (source)	3.30.5 → 3.31.3
@tiptap/extension-table (source)	3.30.5 → 3.31.3
@tiptap/extension-table-cell (source)	3.30.5 → 3.31.3
@tiptap/extension-table-header (source)	3.30.5 → 3.31.3
@tiptap/extension-table-row (source)	3.30.5 → 3.31.3
@tiptap/extension-text-align (source)	3.30.5 → 3.31.3
@tiptap/extension-underline (source)	3.30.5 → 3.31.3
@tiptap/pm (source)	3.30.5 → 3.31.3
@tiptap/starter-kit (source)	3.30.5 → 3.31.3
dropzone (source)	6.0.0-beta.2 → 6.2.0
fslightbox (source)	3.7.6 → 3.8.0
playwright (source)	1.62.1 → 1.63.0
playwright-core (source)	1.62.1 → 1.63.0

---

Release Notes

microsoft/playwright (@​playwright/test)

v1.63.0

Compare Source

ueberdosis/tiptap (@​tiptap/core)

v3.31.3

Compare Source

@​tiptap/extension-collaboration-caret

Patch Changes

• Fixed a bug which allowed potentially unsafe color values being sent by other clients. Those unsafe colors received from collaboration users are now ignored.

@​tiptap/react

Patch Changes

• Fix a TypeScript error (TS2694) in the shipped type declarations when skipLibCheck is turned off.

v3.31.2

Compare Source

@​tiptap/pm

Patch Changes

• Bump prosemirror-view to ^1.42.3, which fixes an XSS vulnerability where pasting crafted HTML could run arbitrary JavaScript (GHSA-c8x8-7fp4-3x9w).

v3.31.1

Compare Source

@​tiptap/core

Patch Changes

• Fix freezes in framework-based node views on iOS and Android

v3.31.0

Compare Source

@​tiptap/react

Minor Changes

• e7bf804: Align selected with ProseMirror node selections by default, expose text selections through selectionInside, and keep selectedOnTextSelection compatible.

v3.30.6

Compare Source

@​tiptap/core

Patch Changes

• Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-list

Patch Changes

• Nested lists exported to Markdown now keep their hierarchy when the file is read back by other Markdown tools.

@​tiptap/extension-youtube

Patch Changes

• Pasting a YouTube iframe without a src attribute no longer crashes the editor. The embed is kept without a source.

@​tiptap/markdown

Patch Changes

• Fix Markdown serialization of whitespace-only marked text.

@​tiptap/react

Patch Changes

• Reduce overhead in React node views on documents with many nodes.

dropzone/dropzone (dropzone)

v6.2.0

Compare Source

Minor Changes

• #​2351 ee82380 Thanks @​enyo! - addedfiles now reports the files found inside a dropped folder. It previously received e.dataTransfer.files, which holds the folder entries rather than their contents, so anyone counting dropped files got the wrong answer for folders.

  This changes when the event fires. Reading a folder is asynchronous, so on browsers that support folder drops — all of them — addedfiles is now emitted once the walk finishes, after the individual addedfile events, instead of synchronously at the end of the drop handler. Listeners still receive the event; only the timing moves.

  Also adds an emptyfolder event, emitted with the folder's path when a dropped folder turns out to contain nothing at all.

• #​2348 f0697ee Thanks @​enyo! - parallelChunkUploads: true now starts at most parallelUploads chunks at a time rather than every chunk of the file at once. Pass a number to set a different limit, or Infinity to restore the previous behaviour.

• #​2349 8a8b449 Thanks @​enyo! - Add resizeTransparencyFill, the color shown through transparent parts of a resized image. A transparent PNG resized to image/jpeg previously came out with black where it used to be see-through; set this to "#fff", or any CSS color, for a background instead. Defaults to null, which keeps the current behavior.

Patch Changes

• d3a9221 Thanks @​enyo! - Reword the default dictMaxFilesExceeded message from "You can not upload any more files." to "You cannot upload any more files."

• #​2350 9b5015b Thanks @​enyo! - Give the hidden file input an aria-label, so accessibility auditors stop reporting it as an unlabelled input. This does not change anything for screen reader users: browsers leave visibility: hidden elements out of the accessibility tree entirely, and the .dz-button carrying dictDefaultMessage remains the control they interact with.

• #​2352 b24f8cc Thanks @​enyo! - Associate the hidden file input with its form. The input is appended to hiddenInputContainer (the body by default), so it sits outside the form it belongs to and several dropzones on one page produce indistinguishable inputs. It now carries a form attribute when the dropzone is a form, or sits inside one, and that form has an id. The input has no name, so this does not change what a native submit sends — but it does mean the input now appears in form.elements.

• 4e13aab Thanks @​enyo! - Vendor just-extend into the source and drop the dependency. Dropzone now installs with no dependencies at all; the option merging behaviour is unchanged.

v6.1.0

Compare Source

Minor Changes

• b32d746 Thanks @​filip-kinsky! - Emit an error instead of a broken thumbnail when a file claims an image type but cannot be decoded. The new dictThumbnailError option holds the message.

Patch Changes

• 94a0656 Thanks @​AJHoeh! - Coerce chunkSize to a number before computing chunk boundaries. When the option arrived as a string, every chunk after the first was sliced from the wrong offset and the uploaded file was silently corrupted.

• 85c5c2a Thanks @​enyo! - Stop preview thumbnails from being dragged back into the dropzone, which added the same file a second time under a generated name.

• 4762df8 Thanks @​Forceu! - Send a single chunk for zero byte files instead of hanging. With forceChunking enabled, an empty file produced a chunk count of zero, so nothing was ever uploaded.

v6.0.0

Compare Source

The 6.0.0 line is now stable. There are no API changes since 6.0.0-beta.2 —
see the 6.0.0-beta.1 notes below for the breaking changes in this major
version.

• @swc/helpers is no longer a dependency. just-extend is now the only one.
• The bundles are considerably smaller, since they are no longer transpiled for
  browsers that 6.0.0 had already stopped supporting.

banthagroup/fslightbox (fslightbox)

v3.8.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.