chore(deps-dev): bump the npm-version group with 5 updates

[dependabot]

Bumps the npm-version group with 5 updates:

Package	From	To
@tailwindcss/vite	4.3.1	4.3.2
@yaireo/tagify	4.37.1	4.38.0
ckeditor5	48.2.0	48.3.0
tailwindcss	4.3.1	4.3.2
vite	8.1.0	8.1.3

Updates @tailwindcss/vite from 4.3.1 to 4.3.2

Release notes

Sourced from @​tailwindcss/vite's releases.

v4.3.2

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Changelog

Sourced from @​tailwindcss/vite's changelog.

[4.3.2] - 2026-06-26

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Commits

• 056a155 4.3.2 (#20281)
• bb6a109 use .ts instead of .css
• See full diff in compare view

Updates @yaireo/tagify from 4.37.1 to 4.38.0

Release notes

Sourced from @​yaireo/tagify's releases.

v4.38.0

Tagify v4.38.0

Modern-browser focus, React wrapper import fixes, and two user-facing bugfixes.

Breaking changes

Internet Explorer support dropped

• Removed tagify.polyfills.min.js and the entire src/polyfills/ tree
• Removed the gulp polyfills task and package.json export
• browserslist now excludes IE (not ie 11)
• If you still load the polyfills bundle for legacy browsers, remove that script tag — Tagify targets evergreen browsers only

React wrapper packaging

• src/react.tagify.jsx → src/react.tagify.js (JSX-free, uses createElement)
• Stale dist/react.tagify.jsx bundle removed
• All @yaireo/tagify/react export paths now resolve to src/react.tagify.js
• Removed src/react-compat-layer.js (replaced with renderToStaticMarkup from react-dom/server for safe template rendering)

Migration: Update imports if you referenced the old .jsx path directly. @yaireo/tagify/react should work without a custom JSX loader in webpack/Vite/Next.

---

Bug fixes

• #1417 — Remove button stopped working when classNames.tagX had multiple space-separated classes. Detection now uses matches(classNames.tagXSelector) (first class token), consistent with other *Selector getters.
• #1495 — IndexSizeError when calling the Selection API with no active range. placeCaretAfterNode now guards rangeCount before getRangeAt(0).
• React — Wrapper failed to parse in bundlers that don't transpile node_modules JSX. Wrapper is now plain ES source consumable by any bundler without a JSX/Babel loader.

---

Build & tooling

• pnpm build routes through gulp build (production build, not watch mode)
• SWC transpilation and autoprefixer driven from shared browserslist config
• README updated: modern-browser policy, CDN setup without polyfills bundle
• Dependency updates (pnpm-lock.yaml)

---

Full Changelog: yairEO/tagify@v4.37.1...v4.38.0

Commits

• 37bf429 4.38.0
• bc8ed52 fixes #1417 - fix: support multiple classes on classNames.tagX for remove b...
• 8d9744a added cursor rules file
• 0c5024a chore: update .gitignore to include .repowise and .mcp.json files
• 6594e3a fix(react): ship wrapper as JSX-free source and fix exports resolution
• d2293be fixes #1495 - fix: guard Selection API calls when rangeCount is zero
• 65b9aa3 refactor!: remove IE polyfills bundle and build pipeline
• 315c8af fix(build): align build script and browser targets; update README for dropped IE
• 198f52c update packages
• 9a09097 Stop tracking local Cursor command prompts; add to .gitignore
• See full diff in compare view

Updates ckeditor5 from 48.2.0 to 48.3.0

Release notes

Sourced from ckeditor5's releases.

v48.3.0

We are happy to announce the release of CKEditor 5 v48.3.0.

Release highlights

⭐ Programmatic API for CKEditor AI

Until now, using CKEditor AI meant mainly going through its built-in UI. This release extends the programmatic APIs and opens the door to more custom AI workflows. Integrators can trigger AI from their buttons, process documents automatically in the background, or run AI server-side with no editor interface at all using the Server-side Editor API.

• AI Document Processing: Run any custom, document-level prompt entirely from code with no UI involved, for automated jobs like summarizing, reformatting, or enriching content in the background.
• AI Review: Trigger built-in or custom review commands, such as proofreading, clarity, or tone, from code so you can build automated quality gates into your editing workflow.
• AI Translate: Translate a document into a target language on demand, with or without the translation UI.

See the Using CKEditor AI programmatically guide for details.

⭐ AI-generated suggestions in track changes

When AI and people edit the same document, reviewers need to know who proposed what. AI suggestions can now be visually marked as AI-generated, so teams can give machine-proposed changes the right level of scrutiny, keep a clear audit trail of where content came from, and meet editorial or governance policies that require disclosing AI involvement.

The feature is opt-in, and you can choose between a pill view or AI author view. Read more in the Marking AI-generated suggestions guide.

⭐ Multi-root and multiple editors support for CKEditor AI is now stable

Editors that split content into separate areas, such as email layouts, structured documents, or CMS templates with distinct regions, can now use CKEditor AI with full production confidence.

We promoted multi-root and multi-instance support to stable so AI Chat and Review consistently read context from and act on the correct region. Adding or removing editor instances at runtime, including the empty "no editors" state, is handled robustly, keeping every AI request scoped to the root the user is working in.

Other improvements and fixes

• Images in inline roots. Images are now supported in inline roots. A block image that cannot be placed at a given position, for example when pasting, dropping, or loading data into an inline root, now degrades to an inline image instead of being dropped. The image type, caption, and style controls adapt to what the position allows.
• Keyboard-accessible media embed resizing. Media embeds now include a keyboard-accessible resize UI: a toolbar dropdown and standalone buttons for predefined sizes, plus a balloon-hosted input for custom widths.
• AI Chat and AI Review fixes. This release resolves a range of AI Chat and Review issues affecting both reliability and presentation, including suggestions that did not appear or apply, crashes on certain historical or marker-heavy content, and rendering glitches in Safari. Preview content is now selectable for direct copying, long text and URLs wrap cleanly in the feed, and several commands are translated in non-English interfaces.
• Paste from Office and Excel Online. Word footnotes are no longer malformed when the Footnotes plugin is enabled, pasting a list followed by a paragraph aligned to an earlier list's margin no longer throws an error, and ranges pasted from Excel Online no longer insert the clipboard's CSS <style> block as visible text.
• Footnotes. Fixed the first footnote reference disappearing with a starting value of 0 under numbering styles that do not support it, and aligned references with the list when using roman numbering at counter values of 4000 or above.
• Emoji. The plugin no longer blocks editor startup, resulting in noticeably faster load times, and multiple editors sharing the same definitionsUrl with different useCustomFont settings no longer interfere with each other's emoji data.
• Accessibility. Comment thread accessible names now include the first comment's text and announce reply counts, and AI-proposed track changes suggestions now state their AI origin in their accessible name.
• Type around buttons on touch devices. Tapping the buttons that insert a paragraph above or below a selected widget now works on Android and iOS. Previously, these taps did not insert a paragraph. Thanks to @​ELHart05 for contributing this fix.

MINOR BREAKING CHANGES ℹ️

• ai: Changed the signature of AIGateway.apply(). applyMethod is now a property of the second argument (an options object) instead of a positional string: replace apply( result, 'suggest' ) with apply( result, { applyMethod: 'suggest' } ).

• ai: Tightened the return types of several AI Chat and AI Review getters and methods to ReadonlyArray / ReadonlyMap. They now return copies of the original collections to prevent accidental mutation of internal state.

  Updated methods are: AIChatContext#getPendingContextItems(), AIChatContext#getSentContextItems(), AIReviewRunResult#affectedBlocks and AIGateway#mergeChangesIntoContent().

• ai: Fixed a CSS specificity conflict that made the AI Chat balloon width depend on stylesheet import order. The AI Chat balloon now sizes to its content without conflicting with default dialog styles.

• ai: Changed the CSS selector used to set the AI Chat balloon width from .ck-ai-chat-balloon to .ck-ai-chat-balloon-main. Custom styles that set the AI Chat balloon width by targeting .ck-ai-chat-balloon may no longer take effect and should target .ck-ai-chat-balloon-main instead.

Features

• ai, track-changes: Suggestions created using AI features can now be visually marked as AI-generated to be distinguished from manual edits. See config.trackChanges.showAISource and config.trackChanges.aiAuthor.

... (truncated)

Changelog

Sourced from ckeditor5's changelog.

48.3.0 (July 1, 2026)

We are happy to announce the release of CKEditor 5 v48.3.0.

Release highlights

⭐ Programmatic API for CKEditor AI

Until now, using CKEditor AI meant mainly going through its built-in UI. This release extends the programmatic APIs and opens the door to more custom AI workflows. Integrators can trigger AI from their buttons, process documents automatically in the background, or run AI server-side with no editor interface at all using the Server-side Editor API.

• AI Document Processing: Run any custom, document-level prompt entirely from code with no UI involved, for automated jobs like summarizing, reformatting, or enriching content in the background.
• AI Review: Trigger built-in or custom review commands, such as proofreading, clarity, or tone, from code so you can build automated quality gates into your editing workflow.
• AI Translate: Translate a document into a target language on demand, with or without the translation UI.

See the Using CKEditor AI programmatically guide for details.

⭐ AI-generated suggestions in track changes

When AI and people edit the same document, reviewers need to know who proposed what. AI suggestions can now be visually marked as AI-generated, so teams can give machine-proposed changes the right level of scrutiny, keep a clear audit trail of where content came from, and meet editorial or governance policies that require disclosing AI involvement.

The feature is opt-in, and you can choose between a pill view or AI author view. Read more in the Marking AI-generated suggestions guide.

⭐ Multi-root and multiple editors support for CKEditor AI is now stable

Editors that split content into separate areas, such as email layouts, structured documents, or CMS templates with distinct regions, can now use CKEditor AI with full production confidence.

We promoted multi-root and multi-instance support to stable so AI Chat and Review consistently read context from and act on the correct region. Adding or removing editor instances at runtime, including the empty "no editors" state, is handled robustly, keeping every AI request scoped to the root the user is working in.

Other improvements and fixes

• Images in inline roots. Images are now supported in inline roots. A block image that cannot be placed at a given position, for example when pasting, dropping, or loading data into an inline root, now degrades to an inline image instead of being dropped. The image type, caption, and style controls adapt to what the position allows.
• Keyboard-accessible media embed resizing. Media embeds now include a keyboard-accessible resize UI: a toolbar dropdown and standalone buttons for predefined sizes, plus a balloon-hosted input for custom widths.
• AI Chat and AI Review fixes. This release resolves a range of AI Chat and Review issues affecting both reliability and presentation, including suggestions that did not appear or apply, crashes on certain historical or marker-heavy content, and rendering glitches in Safari. Preview content is now selectable for direct copying, long text and URLs wrap cleanly in the feed, and several commands are translated in non-English interfaces.
• Paste from Office and Excel Online. Word footnotes are no longer malformed when the Footnotes plugin is enabled, pasting a list followed by a paragraph aligned to an earlier list's margin no longer throws an error, and ranges pasted from Excel Online no longer insert the clipboard's CSS <style> block as visible text.
• Footnotes. Fixed the first footnote reference disappearing with a starting value of 0 under numbering styles that do not support it, and aligned references with the list when using roman numbering at counter values of 4000 or above.
• Emoji. The plugin no longer blocks editor startup, resulting in noticeably faster load times, and multiple editors sharing the same definitionsUrl with different useCustomFont settings no longer interfere with each other's emoji data.
• Accessibility. Comment thread accessible names now include the first comment's text and announce reply counts, and AI-proposed track changes suggestions now state their AI origin in their accessible name.
• Type around buttons on touch devices. Tapping the buttons that insert a paragraph above or below a selected widget now works on Android and iOS. Previously, these taps did not insert a paragraph. Thanks to @​ELHart05 for contributing this fix.

MINOR BREAKING CHANGES ℹ️

• ai: Changed the signature of AIGateway.apply(). applyMethod is now a property of the second argument (an options object) instead of a positional string: replace apply( result, 'suggest' ) with apply( result, { applyMethod: 'suggest' } ).

• ai: Tightened the return types of several AI Chat and AI Review getters and methods to ReadonlyArray / ReadonlyMap. They now return copies of the original collections to prevent accidental mutation of internal state.

  Updated methods are: AIChatContext#getPendingContextItems(), AIChatContext#getSentContextItems(), AIReviewRunResult#affectedBlocks and AIGateway#mergeChangesIntoContent().

• ai: Fixed a CSS specificity conflict that made the AI Chat balloon width depend on stylesheet import order. The AI Chat balloon now sizes to its content without conflicting with default dialog styles.

• ai: Changed the CSS selector used to set the AI Chat balloon width from .ck-ai-chat-balloon to .ck-ai-chat-balloon-main. Custom styles that set the AI Chat balloon width by targeting .ck-ai-chat-balloon may no longer take effect and should target .ck-ai-chat-balloon-main instead.

Features

... (truncated)

Commits

• b533014 Release v48.3.0.
• d6c99a9 Updated the server-side editor API documentation with AI services guidance.
• 3b05fa8 Updated the migration guide with notes for CKEditor 5 v48.3.0.
• 8075755 Changelog for v48.3.0.
• b2b6e4f Updated the feature digest documentation to remove the experimental badge fro...
• 0837e18 Exposed _addOperationForAffectedMarkers as a public internal method on `Mod...
• 0bb3c7c Refreshed media embed package translations.
• e6530c1 Added media embed resize controls, accessibility improvements, and new icons.
• See full diff in compare view

Updates tailwindcss from 4.3.1 to 4.3.2

Release notes

Sourced from tailwindcss's releases.

v4.3.2

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Changelog

Sourced from tailwindcss's changelog.

[4.3.2] - 2026-06-26

Fixed

• Support bare spacing values for auto-rows-* and auto-cols-* utilities (e.g. auto-rows-12 and auto-cols-16) (#20229)
• Prevent @tailwindcss/cli in --watch mode from crashing on Windows when @source points to a directory that doesn't exist (#20242)
• Prevent @tailwindcss/vite from crashing in Deno v2.8.x when context.parentURL is not a valid URL (#20245)
• Ensure @tailwindcss/cli in --watch mode rebuilds when the input CSS file changes in an ignored directory (#20246)
• Allow @variant rules used in addBase(…) to use custom variants defined later (#20247)
• Prevent @tailwindcss/vite from crashing during HMR when scanned files or directories are deleted (#20259)
• Generate font-size instead of color declarations for text-[--spacing(…)] (#20260)
• Prevent @source patterns from scanning unrelated sibling files and folders (#20263)
• Extract class candidates adjacent to Template Toolkit delimiters like %]…[% in .tt, .tt2, and .tx files (#20269)
• Extract class candidates from conditional Maud syntax like p.text-black[condition] (#20269)
• Prevent @position-try rules from triggering unknown at-rule warnings when optimizing CSS (#20277)
• Support class suggestions for named opacity modifiers from --opacity theme values (#20287)
• Prevent type errors in @tailwindcss/postcss when used with newer PostCSS patch releases (#20289)

Commits

• 056a155 4.3.2 (#20281)
• c8b081d Add suggestions for named opacity modifiers (#20287)
• c46f654 Ensure --alpha(…) is seen as a color, and --spacing(…) is seen as a `le...
• 5e9f66e Ensure @variant can be used in JS based APIs (#20252)
• 707c23b Ensure custom variants can be used via @variant in addBase (#20247)
• 127d170 Add bare value support for auto-rows-* and auto-cols-* (#20229)
• See full diff in compare view

Updates vite from 8.1.0 to 8.1.3

Release notes

Sourced from vite's releases.

v8.1.3

Please refer to CHANGELOG.md for details.

v8.1.2

Please refer to CHANGELOG.md for details.

v8.1.1

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.1.3 (2026-07-02)

Bug Fixes

• css: inject inlined CSS after the shebang line (#22717) (1534d36)
• deps: bump es-module-lexer to 2.3.0 (#22838) (7103c3a)
• preload css for nested dynamic imports (#22759) (2c53054)
• ssr: correct stacktrace column position for first line (#22828) (c4acd69)

8.1.2 (2026-06-30)

Bug Fixes

• deps: revert es-module-lexer to 2.1.0 (#22827) (0d3bd7c)
• restore, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (#22825) (efb98cc)
• revert, "fix: escape ids with multiple null bytes (#22687)" (cccef55)
• revert, "fix: resolve pnpm .modules.yaml from workspace root instead of cwd (#22757)" (cf97711)

8.1.1 (2026-06-30)

Features

• update dynamic import warning to link to Vite docs (#22823) (62bd7af)

Bug Fixes

• bundled-dev: avoid stack overflow on import.meta.hot.invalidate() (#22797) (709eb8e)
• bundled-dev: serve assets emitted during HMR/lazy compile (#22745) (5876b2c)
• bundledDev: skip plugin transform hooks for rolldown-lazy stub modules (#22778) (8f925e2)
• css: preserve dollar signs in external @import urls with lightningcss (#22718) (9fa7ab4)
• css: resolve tsconfig paths in CSS and Sass @​import (#22775) (ef0b891)
• deps: update all non-major dependencies (#22734) (e635f49)
• deps: update all non-major dependencies (#22804) (8837400)
• deps: update rolldown-related dependencies (#22591) (2ce6677)
• escape ids with multiple null bytes (#22687) (833fc30)
• hide console window when running 'net use' on Windows (#22698) (92b63f2)
• ignore bundled config temp dir (#22800) (043a810)
• invert esbuild.jsxSideEffects when converting to oxc.jsx.pure (#22809) (33895ba)
• optimize-deps: ignore ERR_CLOSED_SERVER in scanner (#22784) (085a0ab)
• optimizer: scanner should resolve input from root (#22769) (9722b07)
• resolve pnpm .modules.yaml from workspace root instead of cwd (#22757) (2531ac7)
• return sourcemap field from some plugins that were lacking (#22782) (7e18bf8)
• server: handle malformed URI in indexHtmlMiddleware (#22781) (84f5ccc)

Miscellaneous Chores

• improve dependency optimizer messages (#22549) (092cb3b)

Code Refactoring

• css: remove lightningcss null byte bug workaround (#22822) (2dafd3b)
• use pre-defined environments variable to avoid duplicate Object.values calls (#22790) (1113acf)

... (truncated)

Commits

• 578ffb8 release: v8.1.3
• 7103c3a fix(deps): bump es-module-lexer to 2.3.0 (#22838)
• 1534d36 fix(css): inject inlined CSS after the shebang line (#22717)
• c4acd69 fix(ssr): correct stacktrace column position for first line (#22828)
• 2c53054 fix: preload css for nested dynamic imports (#22759)
• ba31193 release: v8.1.2
• 0d3bd7c fix(deps): revert es-module-lexer to 2.1.0 (#22827)
• efb98cc fix: restore, "fix: resolve pnpm .modules.yaml from workspace root instead of...
• cf97711 fix: revert, "fix: resolve pnpm .modules.yaml from workspace root instead of ...
• cccef55 fix: revert, "fix: escape ids with multiple null bytes (#22687)"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions