Skip to content

build(deps): bump jodit from 4.12.37 to 4.12.39 - #4480

Merged
thorsten merged 1 commit into
mainfrom
dependabot/npm_and_yarn/jodit-4.12.39
Jul 14, 2026
Merged

build(deps): bump jodit from 4.12.37 to 4.12.39#4480
thorsten merged 1 commit into
mainfrom
dependabot/npm_and_yarn/jodit-4.12.39

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026

Copy link
Copy Markdown
Contributor

Bumps jodit from 4.12.37 to 4.12.39.

Release notes

Sourced from jodit's releases.

4.12.39

🐛 Bug Fix

  • Fullsize / global fullscreen: exiting fullsize scrolled the whole page back to the top. Entering global fullsize puts <html> into position: fixed, which makes the browser reset the page scroll to 0; that position was never restored on exit. The scroll offset is now saved when entering fullsize and restored with window.scrollTo() when leaving it. Fixes #1255.
  • Scroll into view / Search: inView (used by scrollIntoViewIfNeeded) only checked that an element wasn't below the viewport bottom, not that it wasn't above the top. An element scrolled above the visible area was therefore reported as visible, so navigating to it never scrolled — most visibly, cycling through search results and wrapping around to a match near the top of the page did not scroll up to it. inView now also requires the element's bottom to be at or below the viewport top. Fixes #1279.

🚀 New Feature

  • Link dialog / link.deriveUrlFromText: new opt-in option (default false). When the link dialog is opened for a new link with an empty URL field, the URL is pre-filled from the selected text when it looks like a URL or email — a bare domain gets https:// (example.com → https://example.com), an email gets mailto:, an already-schemed URL is kept as is, and plain text is left untouched. Requested in #1248 / #1323.

  • CSP nonce support: added a nonce option that is applied to every <style>, <script> and <link> element Jodit injects at runtime (plugin styles, CDN scripts for ACE/beautify, downloaded stylesheets). Setting it to the nonce from your Content-Security-Policy header lets the editor run under a strict style-src/script-src policy without 'unsafe-inline'. Requested in #1276.

    Jodit.make('#editor', { nonce: 'r4nd0m' });

📝 Documentation

  • Getting started / CDN: bumped the pinned Jodit version in the cdnjs/unpkg snippets in README.md and docs/getting-started.md from the stale 4.7.6 to 4.12.37. Refs #1208.

🏠 Internal

  • Enter tests: added a regression test asserting that pressing Enter with the caret at the bottom of a scrollable editing area scrolls to follow the cursor (and does not scroll when the caret line is already visible). Covers the scenario from #1300, which works on the current version.

4.12.38

🚀 New Feature

  • Link dialog / link.deriveUrlFromText: new opt-in option (default false). When the link dialog is opened for a new link with an empty URL field, the URL is pre-filled from the selected text when it looks like a URL or email — a bare domain gets https:// (example.com → https://example.com), an email gets mailto:, an already-schemed URL is kept as is, and plain text is left untouched. Requested in #1248 / #1323.

  • CSP nonce support: added a nonce option that is applied to every <style>, <script> and <link> element Jodit injects at runtime (plugin styles, CDN scripts for ACE/beautify, downloaded stylesheets). Setting it to the nonce from your Content-Security-Policy header lets the editor run under a strict style-src/script-src policy without 'unsafe-inline'. Requested in #1276.

    Jodit.make('#editor', { nonce: 'r4nd0m' });
Changelog

Sourced from jodit's changelog.

4.12.39

🐛 Bug Fix

  • Fullsize / global fullscreen: exiting fullsize scrolled the whole page back to the top. Entering global fullsize puts <html> into position: fixed, which makes the browser reset the page scroll to 0; that position was never restored on exit. The scroll offset is now saved when entering fullsize and restored with window.scrollTo() when leaving it. Fixes #1255.
  • Scroll into view / Search: inView (used by scrollIntoViewIfNeeded) only checked that an element wasn't below the viewport bottom, not that it wasn't above the top. An element scrolled above the visible area was therefore reported as visible, so navigating to it never scrolled — most visibly, cycling through search results and wrapping around to a match near the top of the page did not scroll up to it. inView now also requires the element's bottom to be at or below the viewport top. Fixes #1279.

🚀 New Feature

  • Link dialog / link.deriveUrlFromText: new opt-in option (default false). When the link dialog is opened for a new link with an empty URL field, the URL is pre-filled from the selected text when it looks like a URL or email — a bare domain gets https:// (example.com → https://example.com), an email gets mailto:, an already-schemed URL is kept as is, and plain text is left untouched. Requested in #1248 / #1323.

  • CSP nonce support: added a nonce option that is applied to every <style>, <script> and <link> element Jodit injects at runtime (plugin styles, CDN scripts for ACE/beautify, downloaded stylesheets). Setting it to the nonce from your Content-Security-Policy header lets the editor run under a strict style-src/script-src policy without 'unsafe-inline'. Requested in #1276.

    Jodit.make('#editor', { nonce: 'r4nd0m' });

📝 Documentation

  • Getting started / CDN: bumped the pinned Jodit version in the cdnjs/unpkg snippets in README.md and docs/getting-started.md from the stale 4.7.6 to 4.12.37. Refs #1208.

🏠 Internal

  • Enter tests: added a regression test asserting that pressing Enter with the caret at the bottom of a scrollable editing area scrolls to follow the cursor (and does not scroll when the caret line is already visible). Covers the scenario from #1300, which works on the current version.
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
build(deps): bump jodit from 4.12.37 to 4.12.39
3d87a4d 
Bumps [jodit](https://github.com/xdan/jodit) from 4.12.37 to 4.12.39.
- [Release notes](https://github.com/xdan/jodit/releases)
- [Changelog](https://github.com/xdan/jodit/blob/main/CHANGELOG.md)
- [Commits](xdan/jodit@4.12.37...4.12.39)

---
updated-dependencies:
- dependency-name: jodit
  dependency-version: 4.12.39
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file JavaScript Pull requests that update Javascript code labels Jul 14, 2026
@thorsten
thorsten merged commit d842885 into main Jul 14, 2026
13 checks passed
@thorsten
thorsten deleted the dependabot/npm_and_yarn/jodit-4.12.39 branch July 14, 2026 06:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file JavaScript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@thorsten