Security
- Address potential XSS vector via
data-trix-serialized-attributessanitizer bypass by @flavorjones in #1282
Bug fixes
- Fix bullets merging with prior elements on Firefox when the first node is removed by @monorkin in #1280
Infrastructure/CI
- Replace Karma with
@web/test-runnerby @flavorjones in #1272 - ci: get green (2026-01-09 edition) by @flavorjones in #1276
- Report web-test-runner test failures by @flavorjones in #1275
Chores
New Contributors
Full Changelog: v2.1.16...v2.1.17