build(deps): bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the /canvas directory: @tldraw/commenting, tldraw and @types/react-dom.

Updates @tldraw/commenting from 5.3.2 to 5.4.0

Release notes

Sourced from @​tldraw/commenting's releases.

v5.4.0

This release adds a center operation to Editor.alignShapes, a tleditors registry of mounted editors, iterateGraphemes to @tldraw/utils, and two new reactive methods on AtomMap. It also deprecates useViewportHeight, speeds up the signals and store layers, and lands a broad reliability pass across the SDK, with over a hundred fixes to undo history, selection and tool interactions, cropping, arrows, the signals and store layers, sync, and local persistence.

API changes

• 🔜 useViewportHeight() is deprecated. Read window.visualViewport directly instead. The hook returns only the visible viewport's bottom edge, and keeping a panel clear of the software keyboard generally needs the whole visible rectangle. (#9826)

• Add 'center' as an Editor.alignShapes operation. It applies the existing 'center-horizontal' and 'center-vertical' operations together, so shapes center on both axes in one command. (#9074)

• Add tleditors, a reactive global registry of currently mounted editors. Use it to reach live editors from outside the React tree, for example from sidebar chrome or a keyboard shortcut handler. (#9904)

  import { tleditors, useValue } from 'tldraw'
  const mounted = useValue('mounted editors', () => tleditors.getMounted(), [])

• Add getOrInsert(key, defaultValue) and getOrInsertComputed(key, callback) to AtomMap, matching the Map methods added in newer JavaScript runtimes. Both are reactive, and the callback only runs when the key is absent. (#9752)

• Add isPage(record) to @tldraw/tlschema, a type guard that narrows an unknown record to TLPage, matching the guards already exported for the other record types. (#9774)

• Add iterateGraphemes(str) to @tldraw/utils. It iterates a string's grapheme clusters, using Intl.Segmenter when it's available and falling back to code-point iteration when it isn't. (#9896)

• EmojiPickerProps.onSelect now receives the originating event as an optional second argument. Custom reaction palettes can forward it to opt into shift multi-select. (#9999)

Improvements

• Shift-click an emoji in a comment's reaction palette to add several reactions without the palette closing. A plain click still applies the reaction and closes the palette. (#9999)
• Keyboard input now counts as collaborator presence activity, so peers no longer fade out and disappear while someone is typing. (#9929)
• Reduce per-pointer-event allocations in Group2d and Editor hit-testing. (#8600)
• Speed up editor hot paths: set lookups replace array scans in the selection side effect and the erasing check, getCollaborators makes a single pass over the presence records, and getShapeUtil only builds its assert message when the lookup fails. (#10358)
• Speed up signal reads in @tldraw/state. Capturing a parent used to scan the capturing signal's parent set twice, once to check for the parent and again to add it. (#9690)
• Reduce per-signal memory use and per-flush allocations in @tldraw/state. (#10155)
• Reduce the work and allocations in @tldraw/store history bookkeeping, so squashing record diffs and filtering query history no longer build intermediate copies on every tick. (#9689, #9869)
• Move the exportBackground default (true) into the TLInstance record type in @tldraw/tlschema, so every code path that creates the instance record gets the same value. (#10534)

Bug fixes

Crashes

• Fix the editor failing to load on older browsers that lack Intl.Segmenter, such as Firefox before 125. (#9896)
• Fix the frame loop stopping permanently when a tick or frame listener threw, which silently disabled camera animations, edge scrolling, and other frame-driven behavior for the rest of the session. (#9946)
• Fix a crash when computing a frame's geometry if its heading text couldn't be measured yet. (#9496)
• Fix a crash in hit testing when a custom frame-like shape uses a plain, non-group geometry. (#10328)
• Fix a crash when pressing Enter with a frame, video, or embed selected while the geo, arrow, or text tool is active. (#10195)

Undo and history

• Fix undo after a cut also reverting the change made before it. (#9920)
• Fix several actions merging into the previous undo step instead of creating their own: Unlock all, changing an arrowhead, keyboard changes to the opacity and image zoom sliders, alt+double-clicking a rectangle into a check-box, saving alt text, and dropping a file or url onto the canvas. (#10468, #10469, #10470, #10473, #10474, #10478)
• Fix exiting an empty text shape leaving a phantom undo entry: document changes made by onEditEnd are now recorded in history. (#10369)
• Fix undo after bailToMark removing records that were not part of the undone change. (#10207)
• Fix undo/redo not removing an optional record property that the change had deleted. (#10215)
• Fix collaboration-mode readonly syncs ending up in the user's undo history. (#10372)

... (truncated)

Commits

• 3574cf6 v5.4.0
• 07f66c1 Deploy from hotfixes (b1871c0a518b5742eb74f4f52c91b2daba7b4bda) at 2026-09-02...
• b1871c0 [HOTFIX] docs(releases): sync v5.4.0 release notes to production (#10630)
• c14e632 Add VSCode extension v2.343.0 [skip ci]
• 8f78819 Deploy from hotfix (a1c43645cb47df6a2eaa8c71bba8440cad9d0ee5) at 2026-08-31T0...
• a1c4364 [HOTFIX] feat(mcp-app): teardown without the isolate abort, plus ops diagnost...
• a25f251 Add VSCode extension v2.342.0 [skip ci]
• 233488f Deploy from hotfix (abd68ed93a64cdb850a0f9966862abd30c7a25b3) at 2026-08-28T0...
• abd68ed [HOTFIX] fix(mcp-app): delay the condemned object's destroy alarm (#10595)
• f162427 Add VSCode extension v2.341.0 [skip ci]
• Additional commits viewable in compare view

Updates tldraw from 5.3.2 to 5.4.0

Release notes

Sourced from tldraw's releases.

v5.4.0

This release adds a center operation to Editor.alignShapes, a tleditors registry of mounted editors, iterateGraphemes to @tldraw/utils, and two new reactive methods on AtomMap. It also deprecates useViewportHeight, speeds up the signals and store layers, and lands a broad reliability pass across the SDK, with over a hundred fixes to undo history, selection and tool interactions, cropping, arrows, the signals and store layers, sync, and local persistence.

API changes

• 🔜 useViewportHeight() is deprecated. Read window.visualViewport directly instead. The hook returns only the visible viewport's bottom edge, and keeping a panel clear of the software keyboard generally needs the whole visible rectangle. (#9826)

• Add 'center' as an Editor.alignShapes operation. It applies the existing 'center-horizontal' and 'center-vertical' operations together, so shapes center on both axes in one command. (#9074)

• Add tleditors, a reactive global registry of currently mounted editors. Use it to reach live editors from outside the React tree, for example from sidebar chrome or a keyboard shortcut handler. (#9904)

  import { tleditors, useValue } from 'tldraw'
  const mounted = useValue('mounted editors', () => tleditors.getMounted(), [])

• Add getOrInsert(key, defaultValue) and getOrInsertComputed(key, callback) to AtomMap, matching the Map methods added in newer JavaScript runtimes. Both are reactive, and the callback only runs when the key is absent. (#9752)

• Add isPage(record) to @tldraw/tlschema, a type guard that narrows an unknown record to TLPage, matching the guards already exported for the other record types. (#9774)

• Add iterateGraphemes(str) to @tldraw/utils. It iterates a string's grapheme clusters, using Intl.Segmenter when it's available and falling back to code-point iteration when it isn't. (#9896)

• EmojiPickerProps.onSelect now receives the originating event as an optional second argument. Custom reaction palettes can forward it to opt into shift multi-select. (#9999)

Improvements

• Shift-click an emoji in a comment's reaction palette to add several reactions without the palette closing. A plain click still applies the reaction and closes the palette. (#9999)
• Keyboard input now counts as collaborator presence activity, so peers no longer fade out and disappear while someone is typing. (#9929)
• Reduce per-pointer-event allocations in Group2d and Editor hit-testing. (#8600)
• Speed up editor hot paths: set lookups replace array scans in the selection side effect and the erasing check, getCollaborators makes a single pass over the presence records, and getShapeUtil only builds its assert message when the lookup fails. (#10358)
• Speed up signal reads in @tldraw/state. Capturing a parent used to scan the capturing signal's parent set twice, once to check for the parent and again to add it. (#9690)
• Reduce per-signal memory use and per-flush allocations in @tldraw/state. (#10155)
• Reduce the work and allocations in @tldraw/store history bookkeeping, so squashing record diffs and filtering query history no longer build intermediate copies on every tick. (#9689, #9869)
• Move the exportBackground default (true) into the TLInstance record type in @tldraw/tlschema, so every code path that creates the instance record gets the same value. (#10534)

Bug fixes

Crashes

• Fix the editor failing to load on older browsers that lack Intl.Segmenter, such as Firefox before 125. (#9896)
• Fix the frame loop stopping permanently when a tick or frame listener threw, which silently disabled camera animations, edge scrolling, and other frame-driven behavior for the rest of the session. (#9946)
• Fix a crash when computing a frame's geometry if its heading text couldn't be measured yet. (#9496)
• Fix a crash in hit testing when a custom frame-like shape uses a plain, non-group geometry. (#10328)
• Fix a crash when pressing Enter with a frame, video, or embed selected while the geo, arrow, or text tool is active. (#10195)

Undo and history

• Fix undo after a cut also reverting the change made before it. (#9920)
• Fix several actions merging into the previous undo step instead of creating their own: Unlock all, changing an arrowhead, keyboard changes to the opacity and image zoom sliders, alt+double-clicking a rectangle into a check-box, saving alt text, and dropping a file or url onto the canvas. (#10468, #10469, #10470, #10473, #10474, #10478)
• Fix exiting an empty text shape leaving a phantom undo entry: document changes made by onEditEnd are now recorded in history. (#10369)
• Fix undo after bailToMark removing records that were not part of the undone change. (#10207)
• Fix undo/redo not removing an optional record property that the change had deleted. (#10215)
• Fix collaboration-mode readonly syncs ending up in the user's undo history. (#10372)

... (truncated)

Commits

• 3574cf6 v5.4.0
• 07f66c1 Deploy from hotfixes (b1871c0a518b5742eb74f4f52c91b2daba7b4bda) at 2026-09-02...
• b1871c0 [HOTFIX] docs(releases): sync v5.4.0 release notes to production (#10630)
• c14e632 Add VSCode extension v2.343.0 [skip ci]
• 8f78819 Deploy from hotfix (a1c43645cb47df6a2eaa8c71bba8440cad9d0ee5) at 2026-08-31T0...
• a1c4364 [HOTFIX] feat(mcp-app): teardown without the isolate abort, plus ops diagnost...
• a25f251 Add VSCode extension v2.342.0 [skip ci]
• 233488f Deploy from hotfix (abd68ed93a64cdb850a0f9966862abd30c7a25b3) at 2026-08-28T0...
• abd68ed [HOTFIX] fix(mcp-app): delay the condemned object's destroy alarm (#10595)
• f162427 Add VSCode extension v2.341.0 [skip ci]
• Additional commits viewable in compare view

Updates @types/react-dom from 19.2.5 to 19.2.7

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[cloudflare-workers-and-pages]

Deploying super-prototyping with    Cloudflare Pages

Latest commit:	68c8d72
Status:	✅  Deploy successful!
Preview URL:	https://52125e95.super-prototyping.pages.dev
Branch Preview URL:	https://dependabot-bun-canvas-minor-lzwa.super-prototyping.pages.dev

View logs