23 Commits

Author SHA1 Message Date
dependabot[bot] 83d9850141 Bump esbuild from 0.28.0 to 0.28.1 in /extensions/op-blocknote-hocuspocus (#23725)
Bump esbuild in /extensions/op-blocknote-hocuspocus

Bumps [esbuild](https://github.com/evanw/esbuild) from 0.28.0 to 0.28.1.
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)

---
updated-dependencies:
- dependency-name: esbuild
  dependency-version: 0.28.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-13 13:12:06 +01:00
Oliver Günther d851d25524 Merge remote-tracking branch 'origin/release/17.5' into dev 2026-06-10 11:29:44 +02:00
Judith Roth d0d040372a [BNE-102] Documents: iOS Safari layout rendering error for hash mention (#)
https://community.openproject.org/wp/BNE-102

Done by updating to the version of op-blocknote-extensions with the fix.
See https://github.com/opf/op-blocknote-extensions/pull/153
2026-06-09 14:47:59 +02:00
ulferts db815d0d22 Merge remote-tracking branch 'origin/dev' into merge-release/17.5-20260609045502 2026-06-09 09:32:19 +02:00
Judith Roth 551b1850bf [STC-779] Update op-blocknote-extensions to fixed version
https://community.openproject.org/wp/STC-779
2026-06-08 16:26:19 +02:00
Alexander Brandon Coles fa5b7ee1b5 Merge remote-tracking branch 'opf/dev' into merge-release/17.5-20260603051246 2026-06-03 09:52:08 +02:00
Judith Roth 4676405a1a [STC-739] Finish update
https://community.openproject.org/wp/STC-739
2026-06-02 17:02:40 +02:00
Judith Roth 5819e63efa [STC-739] Update BlockNote to 0.51.3 in Hocuspocus
https://community.openproject.org/wp/STC-739
2026-06-02 17:02:40 +02:00
Wieland Lindenthal aeb5e34ea1 chore: upgrade @blocknote/* to 0.51, op-blocknote-extensions to 0.1.0 (FEASIBILITY)
Feasibility-study draft showing the openproject-side consumer changes
that go with op-blocknote-extensions v0.1.0 (opf/op-blocknote-extensions
PRs #133 and #134, not yet merged):

frontend
- @blocknote/{core,mantine,react}: ^0.44.2 → ^0.51.0
- op-blocknote-extensions: v0.0.26 → v0.1.0 (URL not live yet)
- OpBlockNoteEditor.tsx: BlockNote 0.51 tightened CollaborationOptions —
  omit the whole `collaboration` block when no hocuspocusProvider is
  wired up; cast the provider at the boundary because Hocuspocus's
  `awareness: Awareness | null` doesn't match BlockNote's
  `Awareness | undefined`.

hocuspocus (extensions/op-blocknote-hocuspocus)
- @blocknote/server-util: ^0.44.2 → ^0.51.0
- @blocknote/core (dev): ^0.44.2 → ^0.51.0
- op-blocknote-extensions: v0.0.18 → v0.1.0
- openProjectApi.ts: import the static specs from the new
  `op-blocknote-extensions/server` subpath (keeps @blocknote/react out
  of Node); align schema key with the post-refactor block type
  ("openProjectWorkPackage" → "openProjectWorkPackageBlock"); register
  the inline static spec so inline work-package chips survive the
  markdown export.

Lockfiles intentionally not regenerated: the v0.1.0 GitHub URL doesn't
resolve yet. Reviewers should treat this PR as a feasibility study, not
a mergeable artefact.

Refs: https://community.openproject.org/wp/74654

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-02 17:02:40 +02:00
dependabot[bot] 657c768d7f Bump vitest from 4.0.15 to 4.1.0 in /extensions/op-blocknote-hocuspocus
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 4.0.15 to 4.1.0.
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.0/packages/vitest)

---
updated-dependencies:
- dependency-name: vitest
  dependency-version: 4.1.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-06-01 14:56:35 +00:00
dependabot[bot] c2619b93f5 deps(hocuspocus): bump @eslint/json
Bumps [@eslint/json](https://github.com/eslint/json) from 0.14.0 to 1.2.0.
- [Release notes](https://github.com/eslint/json/releases)
- [Changelog](https://github.com/eslint/json/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/json/compare/json-v0.14.0...json-v1.2.0)

---
updated-dependencies:
- dependency-name: "@eslint/json"
  dependency-version: 1.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-05-04 06:07:40 +00:00
dependabot[bot] 651b3f593d Bump vite from 7.2.7 to 7.3.2 in /extensions/op-blocknote-hocuspocus
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) from 7.2.7 to 7.3.2.
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.3.2/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.3.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-version: 7.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-04-29 16:00:33 +00:00
dependabot[bot] 9eb98f4db0 Bump flatted from 3.3.3 to 3.4.2 in /extensions/op-blocknote-hocuspocus
Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)

---
updated-dependencies:
- dependency-name: flatted
  dependency-version: 3.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-20 09:20:28 +00:00
Kabiru Mwenja 8e7bca3b14 fix(hocuspocus): include useful information in token validation errors (#22403)
Port of https://github.com/opf/op-blocknote-hocuspocus/pull/55

Co-authored-by: Markus Kahl <m.kahl@openproject.com>
2026-03-18 17:56:03 +03:00
Dombi Attila 07123d87fd Merge pull request #22188 from opf/dependabot/npm_and_yarn/extensions/op-blocknote-hocuspocus/rollup-4.59.0
Bump rollup from 4.53.3 to 4.59.0 in /extensions/op-blocknote-hocuspocus
2026-03-05 13:12:14 +02:00
dependabot[bot] 5e36fee6ed Bump minimatch in /extensions/op-blocknote-hocuspocus
Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.2 to 3.1.5.
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 15:42:04 +00:00
dependabot[bot] 7c8239d8ba Bump rollup from 4.53.3 to 4.59.0 in /extensions/op-blocknote-hocuspocus
Bumps [rollup](https://github.com/rollup/rollup) from 4.53.3 to 4.59.0.
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rollup/rollup/compare/v4.53.3...v4.59.0)

---
updated-dependencies:
- dependency-name: rollup
  dependency-version: 4.59.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 15:40:35 +00:00
Kabiru Mwenja 91e4a357ab Reduce custom logging, delegate to logging extension 2026-02-23 17:43:00 +03:00
Kabiru Mwenja 6aa69fc7e6 Add hocuspocus logging extension for more detail in logs
https://tiptap.dev/docs/hocuspocus/server/extensions/logger
2026-02-23 17:25:30 +03:00
dependabot[bot] 50aa083bc6 deps(hocuspocus): bump globals in /extensions/op-blocknote-hocuspocus
Bumps [globals](https://github.com/sindresorhus/globals) from 16.5.0 to 17.3.0.
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](https://github.com/sindresorhus/globals/compare/v16.5.0...v17.3.0)

---
updated-dependencies:
- dependency-name: globals
  dependency-version: 17.3.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-19 11:07:39 +00:00
Kabiru Mwenja 4173221e92 fix(deps): update markdown-it to 14.1.1 to resolve ReDoS vulnerability
Addresses GHSA-38c4-r59v-3vqw (moderate severity) in markdown-it
14.1.0, a transitive dependency via prosemirror-markdown.
2026-02-19 13:29:45 +03:00
Kabiru Mwenja 8aa7523dfc Remove unused variable, import, function or class
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2026-02-12 21:39:36 +03:00
Kabiru Mwenja 90a0690f37 Relocate hocuspocus to "extensions" folder 2026-02-12 21:05:39 +03:00