Skip to content

[pull] main from tldraw:main#603

Merged
pull[bot] merged 2 commits into
code:mainfrom
tldraw:main
Jun 18, 2026
Merged

[pull] main from tldraw:main#603
pull[bot] merged 2 commits into
code:mainfrom
tldraw:main

Conversation

@pull

@pull pull Bot commented Jun 18, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot Bot and others added 2 commits June 18, 2026 08:58
Reworked on top of `main` after #8998 landed.

#8998 already bumped `mermaid` to 11.15.0, and `ws` is now at 8.21.0 on
`main` (past this group's target), so both are dropped here. This PR
delivers only the remaining npm_and_yarn security advisories that did
**not** land in #8998.

A previously bundled major `ai` SDK bump (^5.0.63 → ^6.0.199) in the
templates has also been dropped — that's a breaking change and should be
handled in its own reviewed PR.

### Bumps (yarn.lock only — no package.json ranges changed)

| Package | From | To |
| --- | --- | --- |
| next | 15.5.16 | 15.5.19 |
| hono | 4.12.16 | 4.12.25 |
| protobufjs | 7.5.5 | 7.6.3 |
| fast-uri | 3.0.6 | 3.1.2 |
| js-cookie | 3.0.5 | 3.0.8 |
| kysely | 0.28.16 | 0.28.17 |
| tmp | 0.2.5 | 0.2.7 |
| shell-quote | 1.8.1 | 1.8.4 |

Versions resolve to the latest within each existing range, so no
manifests change. The exact-pinned `js-cookie@3.0.5` (used where a
manifest pins it exactly) is left untouched, matching the original
Dependabot resolution.

---------

Co-authored-by: Mime Čuvalo <mimecuvalo@gmail.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
In order to refresh the content new tldraw.com workspaces are seeded
with, this PR re-exports the committed default welcome snapshot from the
staging "workspace template" board. The new canvas is a workspace
onboarding walkthrough — creating a workspace, what a workspace is,
inviting your team with an invite link, moving files into a workspace,
pinning files, and managing members (roles, removing people) — replacing
the previous three-panel comic.

This default is only used for a fresh workspace's first file when no
file has been marked as the welcome template (fresh dev/preview/prod).
Once an admin marks a welcome-template file, its published snapshot
supersedes this default.

The snapshot is the baked JSON of a `RoomSnapshot`, exported via
`editor.store.serialize('document')` and scrubbed of authoring identity
(no `user` records). The first-viewport bounds check in
`welcome.test.ts` is widened (`x < 1550`, `y < 1050`) to fit the new
design's larger extent, since new files open at the default camera with
no zoom-to-fit.

### Change type

- [x] `improvement`

### Test plan

1. On a fresh workspace (no welcome template marked), create a new file
and confirm it opens seeded with the new onboarding board, content
visible at the default camera.

- [x] Unit tests

### Code changes

| Section         | LOC change   |
| --------------- | ------------ |
| Tests           | +2 / -2      |
| Apps            | +4308 / -997 |

### Release notes

- Update the default welcome content new tldraw.com workspaces are
seeded with.
@pull pull Bot locked and limited conversation to collaborators Jun 18, 2026
@pull pull Bot added the ⤵️ pull label Jun 18, 2026
@pull
pull Bot had a problem deploying to bemo-canary June 18, 2026 09:13 Failure
@pull
pull Bot merged commit f0dedc7 into code:main Jun 18, 2026
4 of 7 checks passed
@pull
pull Bot had a problem deploying to deploy-production June 18, 2026 09:13 Failure
@pull
pull Bot had a problem deploying to deploy-staging June 18, 2026 09:13 Error
@pull
pull Bot had a problem deploying to deploy-staging June 18, 2026 09:13 Error
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant