build(deps): bump @tiptap/core from 3.27.1 to 3.30.5 in /frontend

[dependabot]

Bumps @tiptap/core from 3.27.1 to 3.30.5.

Release notes

Sourced from @​tiptap/core's releases.

v3.30.5

@​tiptap/core

Patch Changes

• Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.

v3.30.4

@​tiptap/core

Patch Changes

• Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.

v3.30.3

@​tiptap/extension-text-style

Patch Changes

• Unsetting one text style inside a blockquote no longer removes the other text styles in it.

@​tiptap/extension-youtube

Patch Changes

• YouTube live URLs (/live/<id>) now embed the video.

@​tiptap/core

Patch Changes

• Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec

@​tiptap/react

Patch Changes

• Fix ReactNodeViewRenderer crash when contentComponent is not available

@​tiptap/ai-toolkit

Minor Changes

• Add the AiInsertReveal extension (@tiptap/ai-toolkit/streaming-reveal) to fade in text as the AI streams it into a collaborative document.

v3.30.2

@​tiptap/core

Patch Changes

... (truncated)

Changelog

Sourced from @​tiptap/core's changelog.

3.30.5

Patch Changes

• d0d499b: Fix a denial-of-service risk where crafted block or inline Markdown attributes could consume excessive CPU and block the browser or server event loop.
  • @​tiptap/pm@​3.30.5

3.30.4

Patch Changes

• 01d7af8: Prevent untrusted HTML attributes from changing an object's prototype when merged with mergeAttributes.
  • @​tiptap/pm@​3.30.4

3.30.3

Patch Changes

• 965a880: Fix JSX runtime to properly render nested sibling elements by spreading children arrays into DOMOutputSpec
  • @​tiptap/pm@​3.30.3

3.30.2

Patch Changes

• 3dffed5: Keep mixed JSX children as separate siblings in DOM output.
• 214a140: Fixed a bug where editor.chain and editor.can can not be accessed on editor initialization
  • @​tiptap/pm@​3.30.2

3.30.1

Patch Changes

• abc8828: Added new ProseMirror helpers that check whether a value is a specific ProseMirror type.
  • @​tiptap/pm@​3.30.1

3.30.0

Minor Changes

• 0247d39: ListKeymap now registers a Tab shortcut that sinks a top-level textblock into the previous list's last item. Pressing Tab at the start of a paragraph right after a bullet/ordered/task list moves the paragraph inside the last list item. The handler does nothing when the cursor is already inside a list item (sinkListItem keeps working), when there is no list before the paragraph, when the caret is mid-textblock, or when the selection is not a text selection (for example a gap cursor).

  @tiptap/core also exposes a new getPreviousBlockSibling($pos) helper that returns the block-level sibling before the cursor's textblock, or null at the first child of the block parent.

• 3099eef: New Decorations API

  Finally the decorations API is here! Even though Decorations itself are nothing new in ProseMirror, the new API makes it much easier to use them in Tiptap without leaving your extensions.

  Decorations change how the document looks without changing the document itself. Highlighting search results, marking spelling mistakes, showing collaborator cursors, putting a drag handle next to every block.

... (truncated)

Commits

• b0c188b chore(release): release new stable release (#8261)
• d0d499b Merge commit from fork
• 55f59e4 chore(release): release new stable release (#8260)
• 01d7af8 Merge commit from fork
• 98b469d chore: complete Vite+ migration (#8258)
• db790a7 chore(release): release new stable release (#8216)
• f434577 chore: migrate over to vite+ for tooling (#8151)
• 965a880 fix(core): preserve JSX child boundaries (#7491)
• cef2c9a chore(release): release new stable release (#8190)
• 214a140 fixed editor.can and editor.chain to not be accessible on editor … (#8210)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[netlify]

✅ Deploy Preview for activist-org ready!

Name	Link
🔨 Latest commit	148d655
🔍 Latest deploy log	https://app.netlify.com/projects/activist-org/deploys/6aa0d19ca21f4f00081d49a0
😎 Deploy Preview	https://deploy-preview-2393--activist-org.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[github-actions]

Thank you for the pull request! ❤️

The activist team will do our best to address your contribution as soon as we can. The following are some important points:

• Those interested in developing their skills and expanding their role in the community should read the mentorship and growth section of the contribution guide
• If you're not already a member of our public Matrix community, please consider joining!
  • We'd suggest that you use the Element client as well as Element X for a mobile app
  • Join the General and Development rooms once you're in
• Also consider attending our bi-weekly Saturday developer syncs!
  • Details are shared in the Development room on Matrix each Wednesday before the sync
  • It would be great to meet you 😊

Note

activist uses Conventional Comments in reviews to make sure that communication is as clear as possible.

[github-actions]

Maintainer Checklist

The following is a checklist for maintainers to make sure this process goes as well as possible. Feel free to address the points below yourself in further commits if you realize that actions are needed :)

• Tests for changes have been written and the TypeScript, pytest and formatting workflows within the PR checks do not indicate new errors in the files changed

• The Playwright end to end and Zap penetration tests have been ran and are passing (if necessary)

• The changelog has been updated with a description of the changes for the upcoming release and the corresponding issue (if necessary)

[dependabot]

Looks like @tiptap/core is up-to-date now, so this is no longer needed.