From a90f816c89f5c129d00e9a4de7da0e96847dbbad Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 28 Jul 2026 11:58:22 -0700 Subject: [PATCH] build(deps): bump lexical from 0.46.0 to 0.48.0 (#10299) ## Thinking Path > - Paperclip is the open source app people use to manage AI agents for work > - The UI depends on `lexical` for rich text editing in user-facing flows > - Dependabot detected a newer `lexical` release with bug fixes and security hardening > - A dependency-only bump is the smallest safe way to pick up those upstream fixes > - This pull request updates `lexical` from 0.46.0 to 0.48.0 > - The benefit is lower maintenance risk and a smaller security/support gap without changing app logic ## Linked Issues or Issue Description - No public issue exists for this maintenance update. - Related public PR: Refs #9885. ## What Changed - Bumped `lexical` from 0.46.0 to 0.48.0. - Refreshed the lockfile entries for the dependency update. ## Verification - GitHub Actions checks on PR #10299 passed. - No local code changes were needed for this dependency-only update. ## Risks - Low risk overall because this is a dependency-only update. - Upstream editor behavior could still shift subtly; CI and the dependency bump itself are the primary safeguard. ## Model Used - OpenAI GPT-5 (Codex), tool-using agent. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- pnpm-lock.yaml | 70 +++++++++++++++++++++++++++++-------------------- ui/package.json | 2 +- 2 files changed, 42 insertions(+), 30 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 091cf4f936..d2812c042c 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -8,7 +8,7 @@ overrides: rollup: '>=4.59.0' react: ^19.2.7 react-dom: ^19.2.7 - lexical: 0.46.0 + lexical: 0.48.0 '@lexical/clipboard': 0.46.0 '@lexical/link': 0.46.0 '@lexical/list': 0.46.0 @@ -958,8 +958,8 @@ importers: specifier: ^26.3.6 version: 26.3.6(typescript@5.9.3) lexical: - specifier: 0.46.0 - version: 0.46.0(typescript@5.9.3) + specifier: 0.48.0 + version: 0.48.0(typescript@5.9.3) lucide-react: specifier: ^0.577.0 version: 0.577.0(react@19.2.7) @@ -2762,6 +2762,14 @@ packages: typescript: optional: true + '@lexical/internal@0.48.0': + resolution: {integrity: sha512-sRwg53K7N0ZQ7KNAvcCY38LSwGizbXP1zlR1lIojZp0GoqHWNvR+vL49t1wYXu1nXx3Osf4ilHHm+aGcwq5hTw==} + peerDependencies: + typescript: '>=5.2' + peerDependenciesMeta: + typescript: + optional: true + '@lexical/link@0.46.0': resolution: {integrity: sha512-MdGiAOAmqnZKtfaQxKFZv18SC+1zJIOfqB7bR43va/rp4M3u1cVniquUCTALub40WEWTuJgT2XvfSlpKm7FuXA==} peerDependencies: @@ -6985,8 +6993,8 @@ packages: layout-base@2.0.1: resolution: {integrity: sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg==} - lexical@0.46.0: - resolution: {integrity: sha512-oaE7OLY/FuqGKC7ihaqLJvgn/NvvRveryKBBgOwrSe+UIpBmc9IvyXf6hVcvew9M3Vc0XavHWe/ZAL7qc5DzMw==} + lexical@0.48.0: + resolution: {integrity: sha512-KK4Tyr/cPsleoZ7XvhGRiRmcrZidSmoFUdIXK9nPubIifoC+80Dc5THyc4xtGKtsW24S1TsHzk5gmfBU+TxmEg==} peerDependencies: typescript: '>=5.2' peerDependenciesMeta: @@ -10504,7 +10512,7 @@ snapshots: '@lexical/selection': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) '@types/trusted-types': 2.0.7 - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10514,7 +10522,7 @@ snapshots: '@lexical/html': 0.46.0(typescript@5.9.3) '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10525,7 +10533,7 @@ snapshots: '@lexical/mark': 0.46.0(typescript@5.9.3) '@lexical/table': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) react: 19.2.7 react-dom: 19.2.7(react@19.2.7) optionalDependencies: @@ -10534,7 +10542,7 @@ snapshots: '@lexical/dragon@0.46.0(typescript@5.9.3)': dependencies: '@lexical/extension': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10543,7 +10551,7 @@ snapshots: '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) '@preact/signals-core': 1.14.4 - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10551,7 +10559,7 @@ snapshots: dependencies: '@lexical/text': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10559,7 +10567,7 @@ snapshots: dependencies: '@lexical/extension': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10569,7 +10577,7 @@ snapshots: '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/selection': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10577,13 +10585,17 @@ snapshots: optionalDependencies: typescript: 5.9.3 + '@lexical/internal@0.48.0(typescript@5.9.3)': + optionalDependencies: + typescript: 5.9.3 + '@lexical/link@0.46.0(typescript@5.9.3)': dependencies: '@lexical/extension': 0.46.0(typescript@5.9.3) '@lexical/html': 0.46.0(typescript@5.9.3) '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10593,14 +10605,14 @@ snapshots: '@lexical/html': 0.46.0(typescript@5.9.3) '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 '@lexical/mark@0.46.0(typescript@5.9.3)': dependencies: '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10614,13 +10626,13 @@ snapshots: '@lexical/selection': 0.46.0(typescript@5.9.3) '@lexical/text': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 '@lexical/overflow@0.46.0(typescript@5.9.3)': dependencies: - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10631,7 +10643,7 @@ snapshots: '@lexical/extension': 0.46.0(typescript@5.9.3) '@lexical/selection': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10655,7 +10667,7 @@ snapshots: '@lexical/text': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) '@lexical/yjs': 0.46.0(typescript@5.9.3)(yjs@13.6.29) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) react: 19.2.7 react-dom: 19.2.7(react@19.2.7) optionalDependencies: @@ -10670,14 +10682,14 @@ snapshots: '@lexical/html': 0.46.0(typescript@5.9.3) '@lexical/selection': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 '@lexical/selection@0.46.0(typescript@5.9.3)': dependencies: '@lexical/internal': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10688,14 +10700,14 @@ snapshots: '@lexical/html': 0.46.0(typescript@5.9.3) '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/utils': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 '@lexical/text@0.46.0(typescript@5.9.3)': dependencies: '@lexical/internal': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10703,7 +10715,7 @@ snapshots: dependencies: '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/selection': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 @@ -10711,7 +10723,7 @@ snapshots: dependencies: '@lexical/internal': 0.46.0(typescript@5.9.3) '@lexical/selection': 0.46.0(typescript@5.9.3) - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) yjs: 13.6.29 optionalDependencies: typescript: 5.9.3 @@ -10852,7 +10864,7 @@ snapshots: codemirror: 6.0.2 downshift: 7.6.2(react@19.2.7) js-yaml: 4.1.1 - lexical: 0.46.0(typescript@5.9.3) + lexical: 0.48.0(typescript@5.9.3) mdast-util-directive: 3.1.0 mdast-util-from-markdown: 2.0.3 mdast-util-frontmatter: 2.0.1 @@ -14958,9 +14970,9 @@ snapshots: layout-base@2.0.1: {} - lexical@0.46.0(typescript@5.9.3): + lexical@0.48.0(typescript@5.9.3): dependencies: - '@lexical/internal': 0.46.0(typescript@5.9.3) + '@lexical/internal': 0.48.0(typescript@5.9.3) optionalDependencies: typescript: 5.9.3 diff --git a/ui/package.json b/ui/package.json index f896a9d778..c58649e49b 100644 --- a/ui/package.json +++ b/ui/package.json @@ -55,7 +55,7 @@ "clsx": "^2.1.1", "cmdk": "^1.1.1", "i18next": "^26.3.6", - "lexical": "0.47.0", + "lexical": "0.48.0", "lucide-react": "^0.577.0", "mermaid": "^11.16.0", "radix-ui": "^1.6.4",