Merge pull request #3556 from udecode/changeset-release/main

[Release] Version packages
udecode · Sep 20, 2024 · a1002dd · a1002dd
2 parents 16df607 + a794fb8
commit a1002dd
Show file tree

Hide file tree

Showing 70 changed files with 138 additions and 124 deletions.
diff --git a/.changeset/loud-lemons-tickle.md b/.changeset/loud-lemons-tickle.md
diff --git a/.changeset/lovely-taxis-bake.md b/.changeset/lovely-taxis-bake.md
diff --git a/.changeset/olive-shrimps-joke.md b/.changeset/olive-shrimps-joke.md
diff --git a/.changeset/silver-flies-relax.md b/.changeset/silver-flies-relax.md
diff --git a/packages/alignment/package.json b/packages/alignment/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/autoformat/package.json b/packages/autoformat/package.json
@@ -56,7 +56,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/basic-elements/package.json b/packages/basic-elements/package.json
@@ -58,7 +58,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/basic-marks/package.json b/packages/basic-marks/package.json
@@ -52,7 +52,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/block-quote/package.json b/packages/block-quote/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/break/package.json b/packages/break/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/callout/package.json b/packages/callout/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/caption/package.json b/packages/caption/package.json
@@ -55,7 +55,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/cloud/package.json b/packages/cloud/package.json
@@ -52,7 +52,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/code-block/package.json b/packages/code-block/package.json
@@ -54,7 +54,7 @@
     "prismjs": "^1.29.0"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/combobox/package.json b/packages/combobox/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/comments/package.json b/packages/comments/package.json
@@ -56,7 +56,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/common/CHANGELOG.md b/packages/common/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @udecode/plate-common
 
+## 38.0.6
+
 ## 38.0.4
 
 ## 38.0.3

diff --git a/packages/common/package.json b/packages/common/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@udecode/plate-common",
-  "version": "38.0.4",
+  "version": "38.0.6",
   "description": "Plate common packages for plugins",
   "keywords": [
     "plate",
@@ -50,8 +50,8 @@
     "typecheck": "yarn p:typecheck"
   },
   "dependencies": {
-    "@udecode/plate-core": "38.0.4",
-    "@udecode/plate-utils": "38.0.4",
+    "@udecode/plate-core": "38.0.6",
+    "@udecode/plate-utils": "38.0.6",
     "@udecode/react-hotkeys": "37.0.0",
     "@udecode/react-utils": "38.0.1",
     "@udecode/slate": "38.0.4",

diff --git a/packages/core/CHANGELOG.md b/packages/core/CHANGELOG.md
@@ -1,5 +1,38 @@
 # @udecode/plate-core
 
+## 38.0.6
+
+### Patch Changes
+
+- [`d30471cb19577e53c20944ab66eab2a7ef3b3ad2`](https://github.com/udecode/plate/commit/d30471cb19577e53c20944ab66eab2a7ef3b3ad2) by [@12joan](https://github.com/12joan) – Mitigate XSS in `element.attributes` by requiring all attribute names to be allowlisted in the `node.dangerouslyAllowAttributes` plugin configuration option.
+
+  Migration:
+
+  For each plugin that needs to support passing DOM attributes using `element.attributes`, add the list of allowed attributes to the `node.dangerouslyAllowAttributes` option of the plugin.
+
+  ```ts
+  const ImagePlugin = createPlatePlugin({
+    key: 'image',
+    node: {
+      isElement: true,
+      isVoid: true,
+      dangerouslyAllowAttributes: ['alt'],
+    },
+  });
+  ```
+
+  To modify existing plugins, use the `extend` method as follows:
+
+  ```ts
+  const MyImagePlugin = ImagePlugin.extend({
+    node: {
+      dangerouslyAllowAttributes: ['alt'],
+    },
+  });
+  ```
+
+  WARNING: Improper use of `dangerouslyAllowAttributes` WILL make your application vulnerable to cross-site scripting (XSS) or information exposure attacks. Ensure you carefully research the security implications of any attribute before adding it. For example, the `src` and `href` attributes will allow attackers to execute arbitrary code, and the `style` and `background` attributes will allow attackers to leak users' IP addresses.
+
 ## 38.0.4
 
 ## 38.0.3

diff --git a/packages/core/package.json b/packages/core/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@udecode/plate-core",
-  "version": "38.0.4",
+  "version": "38.0.6",
   "description": "The core of Plate – a plugin system for slate",
   "keywords": [
     "contentEditable",

diff --git a/packages/csv/CHANGELOG.md b/packages/csv/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @udecode/plate-serializer-csv
 
+## 38.0.6
+
 ## 38.0.5
 
 ## 38.0.1

diff --git a/packages/csv/package.json b/packages/csv/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@udecode/plate-csv",
-  "version": "38.0.5",
+  "version": "38.0.6",
   "description": "CSV serializer plugin for Plate",
   "keywords": [
     "csv",
@@ -46,15 +46,15 @@
     "typecheck": "yarn p:typecheck"
   },
   "dependencies": {
-    "@udecode/plate-table": "38.0.5",
+    "@udecode/plate-table": "38.0.6",
     "papaparse": "^5.4.1"
   },
   "devDependencies": {
     "@types/papaparse": "^5.3.14",
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/cursor/package.json b/packages/cursor/package.json
@@ -47,7 +47,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/date/package.json b/packages/date/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.94.0",

diff --git a/packages/diff/package.json b/packages/diff/package.json
@@ -50,7 +50,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/dnd/package.json b/packages/dnd/package.json
@@ -51,7 +51,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dnd": ">=14.0.0",
     "react-dnd-html5-backend": ">=14.0.0",

diff --git a/packages/docx/CHANGELOG.md b/packages/docx/CHANGELOG.md
@@ -1,5 +1,7 @@
 # @udecode/plate-docx-serializer
 
+## 38.0.6
+
 ## 38.0.5
 
 ## 38.0.1

diff --git a/packages/docx/package.json b/packages/docx/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@udecode/plate-docx",
-  "version": "38.0.5",
+  "version": "38.0.6",
   "description": "Docx serializer plugin for Plate",
   "keywords": [
     "docx",
@@ -49,15 +49,15 @@
     "@udecode/plate-heading": "38.0.1",
     "@udecode/plate-indent": "38.0.1",
     "@udecode/plate-indent-list": "38.0.1",
-    "@udecode/plate-media": "38.0.1",
-    "@udecode/plate-table": "38.0.5",
+    "@udecode/plate-media": "38.0.6",
+    "@udecode/plate-table": "38.0.6",
     "validator": "^13.12.0"
   },
   "devDependencies": {
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/emoji/package.json b/packages/emoji/package.json
@@ -57,7 +57,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/excalidraw/package.json b/packages/excalidraw/package.json
@@ -56,7 +56,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/find-replace/package.json b/packages/find-replace/package.json
@@ -47,7 +47,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/floating/package.json b/packages/floating/package.json
@@ -51,7 +51,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/font/package.json b/packages/font/package.json
@@ -56,7 +56,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",

diff --git a/packages/heading/package.json b/packages/heading/package.json
@@ -53,7 +53,7 @@
     "@udecode/plate-common": "workspace:^"
   },
   "peerDependencies": {
-    "@udecode/plate-common": ">=38.0.4",
+    "@udecode/plate-common": ">=38.0.6",
     "react": ">=16.8.0",
     "react-dom": ">=16.8.0",
     "slate": ">=0.103.0",