Skip to content

fix(deps): bump ckeditor5 from ^47.6.2-alpha.0 to v48 (main)#13250

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-major-ckeditor-monorepo
Open

fix(deps): bump ckeditor5 from ^47.6.2-alpha.0 to v48 (main)#13250
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/main-major-ckeditor-monorepo

Conversation

@renovate

@renovate renovate Bot commented Jul 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
ckeditor5 (source) ^47.6.2-alpha.0 → ^48.3.1 age confidence

Release Notes

ckeditor/ckeditor5 (ckeditor5)

v48.3.1

Compare Source

We are happy to announce the release of CKEditor 5 v48.3.1.

Release highlights

The release addresses vulnerabilities identified in the protobuf.js package, used within our @ckeditor/ckeditor5-operations-compressor package for real-time collaboration.

Our analysis confirms that vulnerabilities do not affect CKEditor 5.

This release primarily aims to ensure that our customers using real-time collaboration features do not encounter unnecessary security alerts from their scanning tools. We are committed to maintaining the highest security standards, and this update reflects our ongoing efforts to safeguard user environments proactively.

Released packages

Check out the Versioning policy guide for more information.

Released packages (summary)

Other releases:

v48.3.0

Compare Source

We are happy to announce the release of CKEditor 5 v48.3.0.

Release highlights
⭐ Programmatic API for CKEditor AI

Until now, using CKEditor AI meant mainly going through its built-in UI. This release extends the programmatic APIs and opens the door to more custom AI workflows. Integrators can trigger AI from their buttons, process documents automatically in the background, or run AI server-side with no editor interface at all using the Server-side Editor API.

  • AI Document Processing: Run any custom, document-level prompt entirely from code with no UI involved, for automated jobs like summarizing, reformatting, or enriching content in the background.
  • AI Review: Trigger built-in or custom review commands, such as proofreading, clarity, or tone, from code so you can build automated quality gates into your editing workflow.
  • AI Translate: Translate a document into a target language on demand, with or without the translation UI.

See the Using CKEditor AI programmatically guide for details.

⭐ AI-generated suggestions in track changes

When AI and people edit the same document, reviewers need to know who proposed what. AI suggestions can now be visually marked as AI-generated, so teams can give machine-proposed changes the right level of scrutiny, keep a clear audit trail of where content came from, and meet editorial or governance policies that require disclosing AI involvement.

The feature is opt-in, and you can choose between a pill view or AI author view. Read more in the Marking AI-generated suggestions guide.

⭐ Multi-root and multiple editors support for CKEditor AI is now stable

Editors that split content into separate areas, such as email layouts, structured documents, or CMS templates with distinct regions, can now use CKEditor AI with full production confidence.

We promoted multi-root and multi-instance support to stable so AI Chat and Review consistently read context from and act on the correct region. Adding or removing editor instances at runtime, including the empty "no editors" state, is handled robustly, keeping every AI request scoped to the root the user is working in.

Other improvements and fixes
  • Images in inline roots. Images are now supported in inline roots. A block image that cannot be placed at a given position, for example when pasting, dropping, or loading data into an inline root, now degrades to an inline image instead of being dropped. The image type, caption, and style controls adapt to what the position allows.
  • Keyboard-accessible media embed resizing. Media embeds now include a keyboard-accessible resize UI: a toolbar dropdown and standalone buttons for predefined sizes, plus a balloon-hosted input for custom widths.
  • AI Chat and AI Review fixes. This release resolves a range of AI Chat and Review issues affecting both reliability and presentation, including suggestions that did not appear or apply, crashes on certain historical or marker-heavy content, and rendering glitches in Safari. Preview content is now selectable for direct copying, long text and URLs wrap cleanly in the feed, and several commands are translated in non-English interfaces.
  • Paste from Office and Excel Online. Word footnotes are no longer malformed when the Footnotes plugin is enabled, pasting a list followed by a paragraph aligned to an earlier list's margin no longer throws an error, and ranges pasted from Excel Online no longer insert the clipboard's CSS <style> block as visible text.
  • Footnotes. Fixed the first footnote reference disappearing with a starting value of 0 under numbering styles that do not support it, and aligned references with the list when using roman numbering at counter values of 4000 or above.
  • Emoji. The plugin no longer blocks editor startup, resulting in noticeably faster load times, and multiple editors sharing the same definitionsUrl with different useCustomFont settings no longer interfere with each other's emoji data.
  • Accessibility. Comment thread accessible names now include the first comment's text and announce reply counts, and AI-proposed track changes suggestions now state their AI origin in their accessible name.
  • Type around buttons on touch devices. Tapping the buttons that insert a paragraph above or below a selected widget now works on Android and iOS. Previously, these taps did not insert a paragraph. Thanks to @​ELHart05 for contributing this fix.
MINOR BREAKING CHANGES ℹ️

  • ai: Changed the signature of AIGateway.apply(). applyMethod is now a property of the second argument (an options object) instead of a positional string: replace apply( result, 'suggest' ) with apply( result, { applyMethod: 'suggest' } ).

  • ai: Tightened the return types of several AI Chat and AI Review getters and methods to ReadonlyArray / ReadonlyMap. They now return copies of the original collections to prevent accidental mutation of internal state.

    Updated methods are: AIChatContext#getPendingContextItems(), AIChatContext#getSentContextItems(), AIReviewRunResult#affectedBlocks and AIGateway#mergeChangesIntoContent().

  • ai: Fixed a CSS specificity conflict that made the AI Chat balloon width depend on stylesheet import order. The AI Chat balloon now sizes to its content without conflicting with default dialog styles.

  • ai: Changed the CSS selector used to set the AI Chat balloon width from .ck-ai-chat-balloon to .ck-ai-chat-balloon-main. Custom styles that set the AI Chat balloon width by targeting .ck-ai-chat-balloon may no longer take effect and should target .ck-ai-chat-balloon-main instead.

Features
  • ai, track-changes: Suggestions created using AI features can now be visually marked as AI-generated to be distinguished from manual edits. See config.trackChanges.showAISource and config.trackChanges.aiAuthor.
  • ai: Introduced a programmatic API for AI Document Processing. See the Using CKEditor AI programmatically documentation for details.
  • ai: All AI features now report their errors through a single pipeline. Applications can monitor AI failures across chat, chat history, actions, and review, and forward them to their own error-tracking tools.
  • ai: Introduced a programmatic API for the AI Translate plugin. See the Using CKEditor AI programmatically documentation for details.
  • ai: Introduced a headless programmatic API for the AI Translate plugin. See the Using CKEditor AI programmatically documentation for details.
  • collaboration-core: Added the PillView UI component, which displays a pill with an icon, label, and tooltip. See the API documentation for details.
  • image: Images are now supported in inline roots. A block image that cannot be placed at a given location (for example, when pasting, dropping, or loading data into an inline root) now degrades to an inline image instead of being dropped. The image type change, caption, and style controls now adapt to the allowed conversion and become unavailable when that conversion is not allowed at the current position.
  • media-embed: Introduced a keyboard-accessible resize UI for media embeds: a toolbar dropdown or standalone buttons for predefined sizes and a balloon-hosted input for custom widths.
Bug fixes

  • collaboration-core, track-changes: Fixed a redundant keyboard tab stop on the "AI-generated" pill shown for AI suggestions. The AI origin it signals visually is conveyed to assistive technologies through the suggestion's accessible name.

  • ai: Pasting spreadsheet or word-processor content into the AI Chat prompt input now keeps the cell text instead of attaching the accompanying preview image.

  • ai: Fixed an issue where AI-suggested insertions generated by AI Chat were not displayed in the chat feed and were not applied to the content in some scenarios.

  • ai: Made AI-generated content displayed in the AI Quick Actions balloon and the AI Chat suggestion preview selectable for direct copying.

  • ai: Roots added at runtime with MultiRootEditor#addRoot() were sent to the AI service without a title or description, which could cause area-scoped AI Chat requests to target the wrong root.

    Now the AI features read each editor root's title and description from the root's attributes if available, and fall back to the editor configuration otherwise.

  • ai: Improved the HTML output of the AI Quick Actions suggestion preview. Completed previews no longer contain temporary streaming elements.

  • ai: The tooltip displayed when hovering over an AI Chat context chip now wraps long URLs.

  • ai: Long text and URLs displayed in the AI Chat feed now wrap and no longer overflow the message container.

  • ai: Fixed an AI Chat crash when loading a historical conversation containing changes for an editor that was never created in the current session.

  • ai: The conversation title animation is no longer played when opening a chat from history. The animation is now shown only when the AI generates a title for the first time.

  • ai: The mini toolbar in the AI Actions dialog no longer overlaps the vertical scrollbar.

  • ai: The AI Review programmatic API no longer switches the editor to the review tab when a review run fails validation (for example, an unknown command or a missing model). A failed call now leaves the previously active tab in place.

  • ai: Fixed an editor crash that occurred when AI Chat processed responses for document content that included comment or suggestion markers. This was most often reproducible with the General HTML Support plugin enabled.

  • ai: The balloons in the AI Chat context chips row are now rendered above the AI overlay backdrop instead of behind it.

  • ai: Fixed an issue where toggling AI Review or AI Translate tabs would reset their state.

  • ai: Switching tabs while the AI plugin is toggled no longer duplicates views.

  • ai: The AI Review mode "Adjust length" and "Adjust tone and style" commands, along with their dropdown options, are now translated when a UI language other than English is used.

  • ai: AI Chat and Review suggestions now render in Safari when the AI panel is toggled while the request is being processed or after quickly switching between AI panels.

  • collaboration-core: Removed the misplaced affectsData property from the CollaborationOperation interface. The property is specific to MarkerOperation. Cast to MarkerCollaborationOperation to access it.

  • comments: The accessible name of a comment thread now includes the text of its first comment. Single-reply threads now announce the reply count instead of repeating the author name.

  • core: Replaced a cryptic multi-root-editor-root-initial-data-mismatch error thrown when config.roots is an object with a custom prototype or a class instance. The editor now throws a dedicated editor-create-roots-not-plain-object error with a clear message.

  • core: An invalid tag name passed to config.root.element or config.roots.<rootName>.element now throws a clear CKEditorError with code editor-wrong-element-name instead of a cryptic InvalidCharacterError from the browser renderer.

  • emoji: Reduced editor startup time by preventing the emoji plugin from blocking editor initialization.

  • emoji: Fixed an issue where multiple editor instances on the same page could interfere with each other's emoji data when they shared the same definitionsUrl but used different useCustomFont settings. Depending on which editor initialized first, some editors could display a restricted emoji list when a full one was expected, or the other way around.

  • engine: Fixed incorrect ordering of markerToElement boundary elements when multiple markers share the same end position. The closing elements are now inserted in reverse opening order to preserve nesting in the output. Closes #​20173.

  • footnotes: Fixed the first footnote reference disappearing when the footnote list's starting value is set to 0 and the active numbering style, for example lower-alpha or lower-roman, does not support that value.

  • footnotes: Fixed a mismatch between footnote references and the footnote list when using lower-roman or upper-roman numbering with counter values of 4000 or above. Both now consistently fall back to decimal numbering, as required by the CSS counter style specification.

  • paste-from-office: Pasting content from MS Office with footnotes no longer results in malformed footnotes when the Footnotes plugin is enabled.

  • paste-from-office: Pasting content from MS Office no longer throws an error when a list is followed by a paragraph aligned to the margin of an earlier list.

  • paste-from-office: Pasting content from Excel Online no longer inserts the clipboard's CSS <style> block as visible text. Closes #​20188.

  • real-time-collaboration: In multi-editor setups using a Context mechanism, an individual document can now be flushed on the server without affecting other editors. Previously, all editors within the Context instance turned read-only. Now only the editor connected to the flushed document becomes disconnected, while the remaining editors stay connected and editable.

  • table: Upcasting table content with scoped header cells into a context that does not allow tables, for example an inline editor root, no longer throws an error.

  • track-changes: When a track changes suggestion comes from AI, its accessible name now states that it was proposed by AI.

  • widget: The widget type around buttons now insert a paragraph when tapped on touch devices. Previously, taps on the buttons were ignored on Android and iOS, and only selected the widget. Closes #​20103.

    Thanks to @​ELHart05.

Other changes
  • core: Values provided via the root.description and root.title configuration options are now stored in the model as the $description and $title attributes of the $root element and persist through collaboration sessions. See #​10327, #​10285, #​10333.
  • track-changes: Marked Suggestion#isExternal as read-only, matching Comment#isExternal. Changing this property should not have been possible and could lead to errors.
  • ui: The custom position callback in DialogDefinition now receives both the visible DOM root Rect and the general DOM root Rect, making it possible to position the dialog even when the DOM root element is off the screen or cropped by an overflowing ancestor. Added the getRootName() option to DialogDefinition to control which DOM root the dialog is positioned relative to, improving positioning in multi-root editor setups.
Released packages

Check out the Versioning policy guide for more information.

Released packages (summary)

Minor releases (contain minor breaking changes):

Releases containing new features:

Other releases:

v48.2.0

Compare Source

We are happy to announce the release of CKEditor 5 v48.2.0.

Release highlights
Media embed improvements

The Media embed feature now supports resizing with drag handles and styling, including alignment with optional text wrapping. Embedded videos and other media can be aligned left, right, or centered, with surrounding content flowing around them.

Editor roots on paragraph-like elements

Editor roots can now be attached to or created as block-level elements other than the default container, including headings, paragraphs, and custom block elements with their own classes, styles, and attributes. This helps integrate CKEditor 5 with CMSes and other systems that edit individual content fields rather than a single wrapper.

Skip-level lists

The list feature now supports skip-level lists. List items can be nested at non-sequential indentation levels, for example a third-level item placed directly under a first-level one, preserving the structure of documents imported or pasted from Word and HTML sources.

General HTML Support in CKEditor AI

CKEditor AI now works in editors configured with General HTML Support. AI Chat, AI Quick Actions, and AI Review can apply and suggest changes on content that uses additional elements and attributes.

Paste and drag and drop in AI Chat

The AI Chat input now supports pasting and drag and drop. Screenshots from the clipboard and other images are added as context attachments, URLs are detected and displayed as link pills, and long pasted text is attached as a text file.

Other AI improvements
  • Multi-root and multi-editor support. AI Chat and AI Review now support multi-root and multi-editor integrations, including adding or removing editor instances at runtime.
  • Default typography improvements for AI Chat responses. AI Chat now includes built-in styles for common content types, improving the readability of generated output.
  • Resilient streaming. Streaming replies in AI Chat are no longer cancelled when the page is closed or reloaded. The reply keeps streaming on the server and reconnects when the conversation is reopened.
MINOR BREAKING CHANGES ℹ️

  • ai: Changed CKEditor AI APIs used by custom workflows. Review the following changes and see the API documentation for details.

    • Removed methods:

      • AIChatContext#updateCurrentDocument() (use AIChatContext#updateCurrentDocuments() instead).
      • AIEditing#sessionId (use AIEditing#getSessionId( editor ) instead).
      • AIChatContext#getSourceByDataId()
      • AIChatContext#getDocumentContextSliceByDataId()

    • Removed properties:

      • AIReply#documentId
      • AIReply#newNodeAnchorIds
      • AIReply#dataIdDocumentSources

    • Modified method signature:

      • AIReply#appendContent( content )
      • AIEditing#modelToDataWithIds( modelFragment )
      • AIChatController#addSelectionToChatContext()
      • AIEditing#getSelectionText()

    • Modified property type:

      • AIReply#content
      • AIReply#parsedContent
      • AIReply#parsedMergedContent
      • AIReply#documentContextContent
Features

  • core, editor-balloon, editor-classic, editor-decoupled, editor-inline, editor-multi-root, ui: Added support for describing editable root elements through config.root.element and config.roots.<rootName>.element without supplying an existing DOM node. The configuration now accepts a tag-name string, such as 'h1', or a ViewRootElementDefinition object that defines the tag name, CSS classes, inline styles, and attributes. The <textarea> and <input> elements are not supported because they cannot host rich-text editables. Closes #​20047.

  • collaboration-core, track-changes: Track Changes now integrates with the General HTML Support feature. GHS-produced elements and attributes are now tracked as suggestions instead of being applied silently to the document content.

    Changing GHS-produced HTML attributes, classes, or inline styles creates attribute suggestions. Suggestion descriptions now list inline styles by name and value, such as Set format: border-color (green), and group class or HTML-attribute changes under concise labels, such as Set format: style, metadata. Insertion and deletion suggestions for GHS-driven elements, such as <section>, <iframe>, and <article>, now use HTML element names.

  • collaboration-core, track-changes: Track Changes now records suggestions for media embed resize and style changes.

  • autoformat, list: Numbered list autoformat now accepts any starting number. Typing any number followed by . or ) and a space (e.g. 5. ) creates a numbered list. When the list.properties.startIndex option is enabled, the list starts at the typed number.

  • ai: Introduced General HTML Support integration with CKEditor 5 AI. AI Chat, AI Quick Actions, and AI Review can now process content that uses additional HTML elements and attributes.

  • ai: Introduced a programmatic API for the AIReview plugin. See details in the Using CKEditor AI programmatically documentation.

  • ai: Introduced paste support in the AI Chat input.

    Pasting a single bare URL adds it to the conversation context as a link pill. Pasting plain text above a configurable threshold attaches it as a .txt file. Pasting an image or any supported file attaches it to the conversation context as a file pill, with image pills using a dedicated icon.

  • ai: Introduced drag-and-drop support to the AI Chat input.

    Files dropped onto the prompt input area are added to the chat context as pills. URLs and text dropped from the browser are also added to the conversation context as corresponding pills. The AI Chat input panel now shows a visual hint during the drag.

  • editor-multi-root: The MultiRootEditor#createEditable() method now accepts an existing HTMLElement or a ViewRootElementDefinition, so dynamically added roots can be attached to caller-owned DOM elements. Element definitions supplied at root configuration time are also replicated through real-time collaboration. Closes #​20047.

  • email: Tables with resized columns now keep their column widths when exported as email. Previously, they fell back to auto-distributed sizing in Outlook and other email clients.

  • list: Added support for skip-level lists. List items can now be indented by more than one level at a time by enabling the list.enableSkipLevelLists configuration option. Closes #​12563.

  • **[media-embed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Europe/Vienna)

  • Branch creation
    • "before 5am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from ChristophWurst as a code owner July 6, 2026 22:17
@renovate
renovate Bot requested review from GretaD and kesselb as code owners July 6, 2026 22:17
@renovate
renovate Bot force-pushed the renovate/main-major-ckeditor-monorepo branch 6 times, most recently from 829bbdf to fa098aa Compare July 12, 2026 15:14
GretaD
GretaD approved these changes Jul 14, 2026
View reviewed changes

@GretaD GretaD left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

tested and works

@renovate
renovate Bot force-pushed the renovate/main-major-ckeditor-monorepo branch from fa098aa to cce18d0 Compare July 16, 2026 14:31
@ChristophWurst

ChristophWurst commented Jul 16, 2026

Copy link
Copy Markdown
Member

js tests says no. there are lots of warning and some errors.

@ChristophWurst

ChristophWurst commented Jul 16, 2026

Copy link
Copy Markdown
Member

#13238 takes a smaller step and is as red

@renovate
renovate Bot force-pushed the renovate/main-major-ckeditor-monorepo branch 2 times, most recently from 8f1403f to e322f12 Compare July 21, 2026 04:52
@renovate
fix(deps): bump ckeditor5 from ^47.6.2-alpha.0 to v48
ce69a8e 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
renovate Bot force-pushed the renovate/main-major-ckeditor-monorepo branch from e322f12 to ce69a8e Compare July 21, 2026 06:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@GretaD GretaD GretaD approved these changes
@ChristophWurst ChristophWurst Awaiting requested review from ChristophWurst ChristophWurst is a code owner
@kesselb kesselb Awaiting requested review from kesselb kesselb is a code owner

Assignees

No one assigned

Labels

3. to review dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ChristophWurst @GretaD