2.1

Version 2.1.0

🔒 Security Update

This release fixes several security vulnerabilities in the build dependencies flagged by Dependabot. After updating, npm audit reports 0 vulnerabilities (previously: multiple critical/high findings).

Updated Dependencies

Package	Before	After
ckeditor5	^43.2.0	^47.7.3
@ckeditor/ckeditor5-source-editing	^43.2.0	^47.7.3
@ckeditor/ckeditor5-dev-utils	^42.0.0	^61.1.0
webpack-cli	^5.1.4	^7.2.2
prettier	^3.3.0	^3.9.6

Compatibility Notes

• Still compatible with Drupal 10 and 11 (core_version_requirement: ^10 || ^11 unchanged).
• The build intentionally stays on ckeditor5 v47.x instead of the newer v48+, since v48.0.0 removed the DLL builds required by Drupal 10/11. webpack.config.js therefore still uses DllReferencePlugin rather than the new UMD/externals strategy, which only becomes relevant for Drupal 12.

Build Tooling

• webpack.config.js structure unchanged, no breaking changes to the plugin API.
• package-lock.json regenerated.

Tested With

• Drupal 10 (Docker, drupal:10-apache)
• Drupal 11 (Docker, drupal:11-apache)

Note for Developers

If you build the module locally: @ckeditor/ckeditor5-dev-utils@61.1.0 requires Node.js ≥ 24.11.0. Older Node versions will show an EBADENGINE warning (not a hard error).

2.0

Second version. It offers improvements to the first version. Among other things, the button in SourceEditing is disabled.
In addition, the current position of the cursor is now saved in WYSIWYG. It is set correctly again after switching from SourceEditing to WYSIWYG.

Unfortunately, it is not possible to set the position of the cursor in SourceEditing. One reason for this is that SourceEditing is not a CKEditor5 object. In addition, the cursor is overwritten by the SourceEditing plugin.
So there would have to be a fundamental change to the SourceEditing plugin for the feature to work in future.

1.0

First version. This plugin offers the function to insert a pin icon in the WYSIWYG.