⬆️ NPM: Bump the tinacms group with 7 updates by dependabot[bot] · Pull Request #322 · tinacms/tina-docs

dependabot · 2026-02-23T21:45:03Z

Bumps the tinacms group with 7 updates:

Package	From	To
tinacms	`3.4.1`	`3.5.0`
@tinacms/cli	`2.1.5`	`2.1.6`
@tinacms/app	`2.3.24`	`2.3.25`
@tinacms/graphql	`2.1.1`	`2.1.2`
@tinacms/mdx	`2.0.5`	`2.0.6`
@tinacms/schema-tools	`2.5.0`	`2.6.0`
@tinacms/search	`1.2.2`	`1.2.3`

Updates tinacms from 3.4.1 to 3.5.0

Release notes

Sourced from tinacms's releases.

tinacms@3.5.0

Minor Changes

#6438 f90d47b Thanks @joshbermanssw! - Telemetry - We’ve added anonymous telemetry to help us understand how Tina is used and prioritize improvements in areas where it matters. No personal or sensitive data is collected, and the information cannot be used to identify individual users. Telemetry is used solely to improve performance, stability, and the overall user experience. You can opt-out at any time by disabling telemetry in your Tina config.

Read more at https://tina.io/telemetry

#5957 89aee8a Thanks @isaaclombardssw! - The referenced files menu is being revamped to improve the UX and increase clarity.

Patch Changes

#6373 da837f7 Thanks @joshbermanssw! - 🔌 Modernisze Branch Switcher by adding @tanstack/react-table 💄 Replace old BranchSelector with a new BranchSelectorTable component using react-table 🧹 Cleanup duplicate cn references + add alias' for tsconfig and vite config

#6436 c806e41 Thanks @joshbermanssw! - 💄 UI - Remove cursor-pointer from alert

Updated dependencies [f90d47b]:

@tinacms/schema-tools@2.6.0

@tinacms/search@1.2.3

@tinacms/mdx@2.0.6

Changelog

Sourced from tinacms's changelog.

3.5.0

Minor Changes

#6438 f90d47b Thanks @joshbermanssw! - Telemetry - We’ve added anonymous telemetry to help us understand how Tina is used and prioritize improvements in areas where it matters. No personal or sensitive data is collected, and the information cannot be used to identify individual users. Telemetry is used solely to improve performance, stability, and the overall user experience. You can opt-out at any time by disabling telemetry in your Tina config.

Read more at https://tina.io/telemetry

#5957 89aee8a Thanks @isaaclombardssw! - The referenced files menu is being revamped to improve the UX and increase clarity.

Patch Changes

#6373 da837f7 Thanks @joshbermanssw! - 🔌 Modernisze Branch Switcher by adding @tanstack/react-table 💄 Replace old BranchSelector with a new BranchSelectorTable component using react-table 🧹 Cleanup duplicate cn references + add alias' for tsconfig and vite config

#6436 c806e41 Thanks @joshbermanssw! - 💄 UI - Remove cursor-pointer from alert

Updated dependencies [f90d47b]:

@tinacms/schema-tools@2.6.0

@tinacms/search@1.2.3

@tinacms/mdx@2.0.6

Commits

5d96408 Version Packages (#6401)
f90d47b Setup opt-in/opt-out, initialize on TinaAdmin (#6438)
c806e41 💄 Remove cursor-pointer from alert (#6436)
da837f7 💄 Modernize branch switcher with react-table (#6373)
d2e3437 Remove Editorial Workflow events + Add Additional Events (#6429)
7dd93c6 feat(posthog): add posthog event constants (#6298)
89aee8a TinaCMS Visual Editor – Related Files 🗄️ (#5957)
See full diff in compare view

Updates @tinacms/cli from 2.1.5 to 2.1.6

Release notes

Sourced from @tinacms/cli's releases.

@tinacms/cli@2.1.6

Patch Changes

#6416 62d0e5b Thanks @18-th! - Adding tests to confirm that a Security Advisory was fixed

#6439 bde4e4f Thanks @kulesy! - Improve error message when content directory is missing a tina/ folder. When using localContentPath, the error now explains that the content directory needs a tina/ folder for generated files and provides the exact mkdir command to fix it, instead of the misleading suggestion to use --rootPath.

#6419 bd9dabd Thanks @18-th! - Added tests to confirm that a Security Advisory was fixed

Updated dependencies [39fa13a, da837f7, f90d47b, 6988450, c806e41, 89aee8a]:

@tinacms/graphql@2.1.2

tinacms@3.5.0

@tinacms/schema-tools@2.6.0

@tinacms/search@1.2.3

@tinacms/app@2.3.25

@tinacms/metrics@2.0.1

Changelog

Sourced from @tinacms/cli's changelog.

2.1.6

Patch Changes

#6416 62d0e5b Thanks @18-th! - Adding tests to confirm that a Security Advisory was fixed

#6439 bde4e4f Thanks @kulesy! - Improve error message when content directory is missing a tina/ folder. When using localContentPath, the error now explains that the content directory needs a tina/ folder for generated files and provides the exact mkdir command to fix it, instead of the misleading suggestion to use --rootPath.

#6419 bd9dabd Thanks @18-th! - Added tests to confirm that a Security Advisory was fixed

Updated dependencies [39fa13a, da837f7, f90d47b, 6988450, c806e41, 89aee8a]:

@tinacms/graphql@2.1.2

tinacms@3.5.0

@tinacms/schema-tools@2.6.0

@tinacms/search@1.2.3

@tinacms/app@2.3.25

@tinacms/metrics@2.0.1

Commits

5d96408 Version Packages (#6401)
f90d47b Setup opt-in/opt-out, initialize on TinaAdmin (#6438)
bde4e4f fix(cli): improve error when content dir missing tina/ folder (#6439)
bd9dabd Added tests to confirm that a security advisory was fixed https://github.com/...
62d0e5b Adding tests to confirm that a security advisory was fixed https://github.com...
See full diff in compare view

Updates @tinacms/app from 2.3.24 to 2.3.25

Release notes

Sourced from @tinacms/app's releases.

@tinacms/app@2.3.25

Patch Changes

Updated dependencies [da837f7, f90d47b, c806e41, 89aee8a]:

tinacms@3.5.0

@tinacms/mdx@2.0.6

Changelog

Sourced from @tinacms/app's changelog.

2.3.25

Patch Changes

Updated dependencies [da837f7, f90d47b, c806e41, 89aee8a]:

tinacms@3.5.0

@tinacms/mdx@2.0.6

Commits

5d96408 Version Packages (#6401)
89aee8a TinaCMS Visual Editor – Related Files 🗄️ (#5957)
See full diff in compare view

Updates @tinacms/graphql from 2.1.1 to 2.1.2

Release notes

Sourced from @tinacms/graphql's releases.

@tinacms/graphql@2.1.2

Patch Changes

#6375 39fa13a Thanks @TihomirIvanov! - - Updated dependency jsonpath-plus

Fixes security vulnerabilities

#6368 6988450 Thanks @wicksipedia! - GraphQL - Security improvement to the GraphQL resolver to ensure that path traversal sequences (e.g., ../) in document and folder operations are correctly validated and restricted to the collection's root directory. This prevents unauthorized file operations outside of a collection's configured path.

Updated dependencies [f90d47b]:

@tinacms/schema-tools@2.6.0

@tinacms/mdx@2.0.6

Changelog

Sourced from @tinacms/graphql's changelog.

2.1.2

Patch Changes

#6375 39fa13a Thanks @TihomirIvanov! - - Updated dependency jsonpath-plus

Fixes security vulnerabilities

#6368 6988450 Thanks @wicksipedia! - GraphQL - Security improvement to the GraphQL resolver to ensure that path traversal sequences (e.g., ../) in document and folder operations are correctly validated and restricted to the collection's root directory. This prevents unauthorized file operations outside of a collection's configured path.

Updated dependencies [f90d47b]:

@tinacms/schema-tools@2.6.0

@tinacms/mdx@2.0.6

Commits

5d96408 Version Packages (#6401)
6988450 feat(graphql): add path traversal security (#6368)
See full diff in compare view

Updates @tinacms/mdx from 2.0.5 to 2.0.6

Release notes

Sourced from @tinacms/mdx's releases.

@tinacms/mdx@2.0.6

Patch Changes

Updated dependencies [f90d47b]:

@tinacms/schema-tools@2.6.0

Commits

See full diff in compare view

Updates @tinacms/schema-tools from 2.5.0 to 2.6.0

Release notes

Sourced from @tinacms/schema-tools's releases.

@tinacms/schema-tools@2.6.0

Minor Changes

#6438 f90d47b Thanks @joshbermanssw! - Telemetry - We’ve added anonymous telemetry to help us understand how Tina is used and prioritize improvements in areas where it matters. No personal or sensitive data is collected, and the information cannot be used to identify individual users. Telemetry is used solely to improve performance, stability, and the overall user experience. You can opt-out at any time by disabling telemetry in your Tina config.

Read more at https://tina.io/telemetry

Changelog

Sourced from @tinacms/schema-tools's changelog.

tinacms-cli

2.1.6

Patch Changes

#6416 62d0e5b Thanks @18-th! - Adding tests to confirm that a Security Advisory was fixed

#6439 bde4e4f Thanks @kulesy! - Improve error message when content directory is missing a tina/ folder. When using localContentPath, the error now explains that the content directory needs a tina/ folder for generated files and provides the exact mkdir command to fix it, instead of the misleading suggestion to use --rootPath.

#6419 bd9dabd Thanks @18-th! - Added tests to confirm that a Security Advisory was fixed

Updated dependencies [39fa13a, da837f7, f90d47b, 6988450, c806e41, 89aee8a]:

@tinacms/graphql@2.1.2

tinacms@3.5.0

@tinacms/schema-tools@2.6.0

@tinacms/search@1.2.3

@tinacms/app@2.3.25

@tinacms/metrics@2.0.1

2.1.5

Patch Changes

#6398 5345122 Thanks @kulesy! - Preserve key order in tinaSchema config while handling search settings

2.1.4

Patch Changes

Updated dependencies [4eb9252]:

@tinacms/schema-tools@2.5.0

@tinacms/graphql@2.1.1

@tinacms/search@1.2.2

tinacms@3.4.1

@tinacms/app@2.3.24

2.1.3

Patch Changes

Updated dependencies [155654c, 414dc87]:

tinacms@3.4.0

@tinacms/app@2.3.23

2.1.2

Patch Changes

Updated dependencies [1d4fb88, cc9c8bd, 6647240]:

... (truncated)

Commits

5d96408 Version Packages (#6401)
f90d47b Setup opt-in/opt-out, initialize on TinaAdmin (#6438)
bde4e4f fix(cli): improve error when content dir missing tina/ folder (#6439)
bd9dabd Added tests to confirm that a security advisory was fixed https://github.com/...
62d0e5b Adding tests to confirm that a security advisory was fixed https://github.com...
ab96550 Version Packages (#6399)
5345122 Preserve key order in tinaSchema config while handling search settings (#6398)
See full diff in compare view

Updates @tinacms/search from 1.2.2 to 1.2.3

Release notes

Sourced from @tinacms/search's releases.

@tinacms/search@1.2.3

Patch Changes

Updated dependencies [39fa13a, f90d47b, 6988450]:

@tinacms/graphql@2.1.2

@tinacms/schema-tools@2.6.0

Changelog

Sourced from @tinacms/search's changelog.

1.2.3

Patch Changes

Updated dependencies [39fa13a, f90d47b, 6988450]:

@tinacms/graphql@2.1.2

@tinacms/schema-tools@2.6.0

Commits

5d96408 Version Packages (#6401)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the tinacms group with 7 updates: | Package | From | To | | --- | --- | --- | | [tinacms](https://github.com/tinacms/tinacms/tree/HEAD/packages/tinacms) | `3.4.1` | `3.5.0` | | [@tinacms/cli](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/cli) | `2.1.5` | `2.1.6` | | [@tinacms/app](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/app) | `2.3.24` | `2.3.25` | | [@tinacms/graphql](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/graphql) | `2.1.1` | `2.1.2` | | [@tinacms/mdx](https://github.com/tinacms/tinacms/tree/HEAD/packages/tina-graphql) | `2.0.5` | `2.0.6` | | [@tinacms/schema-tools](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/cli) | `2.5.0` | `2.6.0` | | [@tinacms/search](https://github.com/tinacms/tinacms/tree/HEAD/packages/@tinacms/search) | `1.2.2` | `1.2.3` | Updates `tinacms` from 3.4.1 to 3.5.0 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/tinacms/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/tinacms@3.5.0/packages/tinacms) Updates `@tinacms/cli` from 2.1.5 to 2.1.6 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/cli/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/cli@2.1.6/packages/@tinacms/cli) Updates `@tinacms/app` from 2.3.24 to 2.3.25 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/app/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/app@2.3.25/packages/@tinacms/app) Updates `@tinacms/graphql` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/graphql/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/graphql@2.1.2/packages/@tinacms/graphql) Updates `@tinacms/mdx` from 2.0.5 to 2.0.6 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/mdx@2.0.6/packages/tina-graphql) Updates `@tinacms/schema-tools` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/cli/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/schema-tools@2.6.0/packages/@tinacms/cli) Updates `@tinacms/search` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/tinacms/tinacms/releases) - [Changelog](https://github.com/tinacms/tinacms/blob/main/packages/@tinacms/search/CHANGELOG.md) - [Commits](https://github.com/tinacms/tinacms/commits/@tinacms/search@1.2.3/packages/@tinacms/search) --- updated-dependencies: - dependency-name: tinacms dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tinacms - dependency-name: "@tinacms/cli" dependency-version: 2.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: tinacms - dependency-name: "@tinacms/app" dependency-version: 2.3.25 dependency-type: indirect update-type: version-update:semver-patch dependency-group: tinacms - dependency-name: "@tinacms/graphql" dependency-version: 2.1.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: tinacms - dependency-name: "@tinacms/mdx" dependency-version: 2.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: tinacms - dependency-name: "@tinacms/schema-tools" dependency-version: 2.6.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: tinacms - dependency-name: "@tinacms/search" dependency-version: 1.2.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: tinacms ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-23T21:45:04Z

Labels

The following labels could not be found: Type: Dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

vercel · 2026-02-23T21:45:07Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
tina-docs	Ready	Preview, Comment	Feb 23, 2026 9:47pm

vercel bot deployed to Preview February 23, 2026 21:47 View deployment

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

⬆️ NPM: Bump the tinacms group with 7 updates#322

⬆️ NPM: Bump the tinacms group with 7 updates#322
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/tinacms-93a7419483

dependabot bot commented on behalf of github Feb 23, 2026

Uh oh!

dependabot bot commented on behalf of github Feb 23, 2026

Uh oh!

vercel bot commented Feb 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 23, 2026

tinacms@3.5.0

Minor Changes

Patch Changes

3.5.0

Minor Changes

Patch Changes

@​tinacms/cli@​2.1.6

Patch Changes

2.1.6

Patch Changes

@​tinacms/app@​2.3.25

Patch Changes

2.3.25

Patch Changes

@​tinacms/graphql@​2.1.2

Patch Changes

2.1.2

Patch Changes

@​tinacms/mdx@​2.0.6

Patch Changes

@​tinacms/schema-tools@​2.6.0

Minor Changes

tinacms-cli

2.1.6

Patch Changes

2.1.5

Patch Changes

2.1.4

Patch Changes

2.1.3

Patch Changes

2.1.2

Patch Changes

@​tinacms/search@​1.2.3

Patch Changes

1.2.3

Patch Changes

Uh oh!

dependabot bot commented on behalf of github Feb 23, 2026

Labels

Uh oh!

vercel bot commented Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`@tinacms/cli@2`.1.6

`@tinacms/app@2`.3.25

`@tinacms/graphql@2`.1.2

`@tinacms/mdx@2`.0.6

`@tinacms/schema-tools@2`.6.0

`@tinacms/search@1`.2.3

vercel bot commented Feb 23, 2026 •

edited

Loading