Skip to content

chore(deps-dev)(deps-dev): bump @hocuspocus/transformer from 3.4.4 to 4.2.0 in /backend#158

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/hocuspocus/transformer-4.2.0
Open

chore(deps-dev)(deps-dev): bump @hocuspocus/transformer from 3.4.4 to 4.2.0 in /backend#158
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/hocuspocus/transformer-4.2.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps @hocuspocus/transformer from 3.4.4 to 4.2.0.

Release notes

Sourced from @​hocuspocus/transformer's releases.

v4.2.0

What's Changed

Full Changelog: ueberdosis/hocuspocus@v4.1.2...v4.2.0

v4.1.2

What's Changed

New Contributors

Full Changelog: ueberdosis/hocuspocus@v4.1.1...v4.1.2

v4.1.1

What's Changed

New Contributors

Full Changelog: ueberdosis/hocuspocus@v4.1.0...v4.1.1

v4.1.0

What's Changed

New Contributors

Full Changelog: ueberdosis/hocuspocus@v4.0.0...v4.1.0

v4.0.0

Hocuspocus v4.0 Release Notes

Hocuspocus v4 is a major release that brings cross-runtime support, improved type safety, and important bug fixes. This release focuses on making Hocuspocus run beyond Node.js -- on Bun, Deno, Cloudflare Workers, and Node with uWebSockets -- while improving the developer experience with generic Context typing and structured transaction origins.

Backward Compatibility

A v3 provider can connect to a v4 server, and a v4 provider can connect to a v3 server. The wire protocol remains compatible in both directions:

  • v3 provider -> v4 server: The server accepts plain document names (no session routing key), does not require Pong responses, and handles auth messages without a provider version string.
  • v4 provider -> v3 server: The provider defaults to sessionAwareness: false, so it sends plain document names. The extra version string in the auth message is ignored by the v3 server as trailing data. The provider does not require server-initiated Ping messages.
  • Session awareness caveat: If sessionAwareness: true is explicitly enabled on a v4 provider connecting to a v3 server, the server will treat the composite routing key (documentName\0sessionId) as a literal document name, creating unintended documents. Keep sessionAwareness: false (the default) when connecting to a v3 server.

... (truncated)

Changelog

Sourced from @​hocuspocus/transformer's changelog.

4.2.0 (2026-06-12)

Features

  • add unloadImmediately option to disconnect() for configurable document persistence behavior (#1111) (eeb4696)

4.1.2 (2026-06-11)

Bug Fixes

  • delete debouncer timer entry before awaiting the in-flight execution (#1110) (f05f1d0), closes #1014

4.1.1 (2026-06-10)

Bug Fixes

4.1.0 (2026-05-20)

Bug Fixes

  • server: wrap awareness origin as TransactionOrigin (#1094) (bb24de0)

Features

4.0.0 (2026-04-23)

... (truncated)

Commits
  • 94fa0c7 v4.2.0
  • eeb4696 feat: add unloadImmediately option to disconnect() for configurable docum...
  • f3d761d v4.1.2
  • f05f1d0 fix: delete debouncer timer entry before awaiting the in-flight execution (#1...
  • a07826a v4.1.1
  • 5e3dd91 Feature: expose sessionAwareness in provider-react HocuspocusRoom (#1104)
  • 79e9fe7 build(deps): bump hono from 4.12.18 to 4.12.21 (#1106)
  • 79a06e3 Fix memory leak: destroy scratch Awareness objects in MessageReceiver (#1109)
  • 6872d08 fix: client-initiated broadcastStateless (#1103)
  • a08bfc7 build(deps): bump uuid from 11.1.0 to 11.1.1 (#1100)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@hocuspocus/transformer](https://github.com/ueberdosis/hocuspocus) from 3.4.4 to 4.2.0.
- [Release notes](https://github.com/ueberdosis/hocuspocus/releases)
- [Changelog](https://github.com/ueberdosis/hocuspocus/blob/main/CHANGELOG.md)
- [Commits](ueberdosis/hocuspocus@v3.4.4...v4.2.0)

---
updated-dependencies:
- dependency-name: "@hocuspocus/transformer"
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: backend, npm. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants