Fixed
- Stylesheet build migrated to the Tailwind v4 CLI
- Security advisories patched in the dependency tree (minimatch, brace-expansion, nanoid)
- Corrected GitHub Security Advisory URL in the security policy
Added
- Security policy with a private vulnerability reporting channel
- Dependabot configuration with grouped tiptap updates and a cooldown
Changed
- GitHub Actions pinned to commit SHAs
- JS tests now run on Node 22
- Dependency updates: tiptap 2.27.2, esbuild 0.28.2, postcss 8.5.26, vitest 4.1.10, prettier 3.9.6, prettier-plugin-tailwindcss 0.8.1, jsdom 30.0.1
Removed
- Dependencies made obsolete by the Tailwind v4 migration
- Dev tooling excluded from the distributed package archive