2.1

Version 2.1.0

🔒 Security Update

This release fixes several security vulnerabilities in the build dependencies flagged by Dependabot. After updating, npm audit reports 0 vulnerabilities (previously: multiple critical/high findings).

Updated Dependencies

Package	Before	After
ckeditor5	^43.2.0	^47.7.3
@ckeditor/ckeditor5-source-editing	^43.2.0	^47.7.3
@ckeditor/ckeditor5-dev-utils	^42.0.0	^61.1.0
webpack-cli	^5.1.4	^7.2.2
prettier	^3.3.0	^3.9.6

Compatibility Notes

• Still compatible with Drupal 10 and 11 (core_version_requirement: ^10 || ^11 unchanged).
• The build intentionally stays on ckeditor5 v47.x instead of the newer v48+, since v48.0.0 removed the DLL builds required by Drupal 10/11. webpack.config.js therefore still uses DllReferencePlugin rather than the new UMD/externals strategy, which only becomes relevant for Drupal 12.

Build Tooling

• webpack.config.js structure unchanged, no breaking changes to the plugin API.
• package-lock.json regenerated.

Tested With

• Drupal 10 (Docker, drupal:10-apache)
• Drupal 11 (Docker, drupal:11-apache)

Note for Developers

If you build the module locally: @ckeditor/ckeditor5-dev-utils@61.1.0 requires Node.js ≥ 24.11.0. Older Node versions will show an EBADENGINE warning (not a hard error).