Bump tinacms from 2.8.3 to 3.10.1

[dependabot]

Bumps tinacms from 2.8.3 to 3.10.1.

Release notes

Sourced from tinacms's releases.

tinacms@3.10.1

Patch Changes

• Updated dependencies [4b4e139]:
  • @​tinacms/mdx@​2.1.10
  • @​tinacms/search@​1.2.22

tinacms@3.10.0

Minor Changes

• #7136 c809733 Thanks @​joshbermanssw! - editorial workflow - add toggle to switch PRs created between draft and ready to review mode

Patch Changes

• #7141 3a1b39a Thanks @​joshbermanssw! - Update @radix-ui/* dependencies to their latest patch/minor releases and remove the unused @radix-ui/react-checkbox dependency

• #7140 de4a807 Thanks @​joshbermanssw! - Add a PostHog editorial-workflow-save event that records which save option was used in the "Save changes to new branch" modal (draft, ready for review, or publish), whether the save succeeded, and the failure reason when it didn't.

• #7138 8497110 Thanks @​joshbermanssw! - Editorial workflow: replace the draft / ready-for-review toggle in the "Save changes to new branch" modal with a save-options dropdown (Save draft, Save (ready for review), Save and publish). The split button's main action reflects the editor's last choice (default Save draft, remembered via localStorage), and Save and publish is disabled with a tooltip on protected branches.

• #7131 22d0c0d Thanks @​joshbermanssw! - move floatingtoolbar for links to a react portal

• #7123 5148d67 Thanks @​joshbermanssw! - refactor: replace hardcoded error-message string checks with shared error-identifier constants in @tinacms/schema-tools, so producers and consumers reference one source of truth instead of fragile error.message.includes('...') matching (#6777)

• #7143 ff10e65 Thanks @​kulesy! - Unify folder-name validation with the document-filename and backend relativePath allowlist. The Create Folder modal now rejects names with disallowed characters (e.g. spaces) inline instead of letting the request fail on the backend, and a project-level folderNameRegex is layered on top of that baseline. The allowlist lives in a single shared constant in @tinacms/schema-tools.

• #7128 b53a51c Thanks @​Aibono1225! - Harden message handling in the useEditState hook so it validates the sender of incoming message events, matching the isFromAdmin(event, trustedAdminOrigins) check already used by useTina. The hook now also removes its message listener on unmount. Legitimate admin→preview behavior is unchanged.

• Updated dependencies [5148d67, ff10e65]:

  • @​tinacms/schema-tools@​2.8.3
  • @​tinacms/mdx@​2.1.9
  • @​tinacms/search@​1.2.21

tinacms@3.9.4

Patch Changes

• #6939 c1994b3 Thanks @​isaaclombardssw! - feat(tinacms): add a back-to-collection breadcrumb on the admin editor/create pages and in the visual editor sidebar, switch the breadcrumb separator from a chevron to a slash, show only the filename (not the full folder path) in the root breadcrumb across both editors, and truncate long crumbs so the trail no longer overflows

• #7062 caadf1f Thanks @​isaaclombardssw! - Improve global collection UX: global collections now appear once in the sidebar "Site" section (globe icon) instead of being duplicated under Collections, open directly in the form instead of a popup modal, and single-document global collections skip the document list and go straight to the form. Global collections with zero or multiple documents fall through to the normal list view.

• #7058 5ba482b Thanks @​Aibono1225! - Fix Local Mode banner for absolute contentApiUrlOverride

• #7103 8a86ffa Thanks @​wicksipedia! - Move moment-timezone to devDependencies so its timezone database no longer ships in the admin bundle. It was loaded via a non-tree-shakeable side-effect import, but production code never used the moment.tz API (only a unit test did). Removes ~39 KB gzip (~732 KB uncompressed) from the first admin load. No behavior change.

• #7105 19fcbdd Thanks @​wicksipedia! - Remove the dead mdx-field-plugin/plate/plugins/ui/icons.tsx module (398 lines of unused inline-SVG icons). Its single consumed export (EllipsisIcon) now resolves from the shared plate-ui/icons module. No behavior change.

• #7063 871ce31 Thanks @​18-th! - Remove unused add dependency

• #7088 d44558e Thanks @​Aibono1225! - Fix media upload/delete paths to prevent access to storage keys outside mediaRoot.

... (truncated)

Changelog

Sourced from tinacms's changelog.

3.10.1

Patch Changes

• Updated dependencies [4b4e139]:
  • @​tinacms/mdx@​2.1.10
  • @​tinacms/search@​1.2.22

3.10.0

Minor Changes

• #7136 c809733 Thanks @​joshbermanssw! - editorial workflow - add toggle to switch PRs created between draft and ready to review mode

Patch Changes

• #7141 3a1b39a Thanks @​joshbermanssw! - Update @radix-ui/* dependencies to their latest patch/minor releases and remove the unused @radix-ui/react-checkbox dependency

• #7140 de4a807 Thanks @​joshbermanssw! - Add a PostHog editorial-workflow-save event that records which save option was used in the "Save changes to new branch" modal (draft, ready for review, or publish), whether the save succeeded, and the failure reason when it didn't.

• #7138 8497110 Thanks @​joshbermanssw! - Editorial workflow: replace the draft / ready-for-review toggle in the "Save changes to new branch" modal with a save-options dropdown (Save draft, Save (ready for review), Save and publish). The split button's main action reflects the editor's last choice (default Save draft, remembered via localStorage), and Save and publish is disabled with a tooltip on protected branches.

• #7131 22d0c0d Thanks @​joshbermanssw! - move floatingtoolbar for links to a react portal

• #7123 5148d67 Thanks @​joshbermanssw! - refactor: replace hardcoded error-message string checks with shared error-identifier constants in @tinacms/schema-tools, so producers and consumers reference one source of truth instead of fragile error.message.includes('...') matching (#6777)

• #7143 ff10e65 Thanks @​kulesy! - Unify folder-name validation with the document-filename and backend relativePath allowlist. The Create Folder modal now rejects names with disallowed characters (e.g. spaces) inline instead of letting the request fail on the backend, and a project-level folderNameRegex is layered on top of that baseline. The allowlist lives in a single shared constant in @tinacms/schema-tools.

• #7128 b53a51c Thanks @​Aibono1225! - Harden message handling in the useEditState hook so it validates the sender of incoming message events, matching the isFromAdmin(event, trustedAdminOrigins) check already used by useTina. The hook now also removes its message listener on unmount. Legitimate admin→preview behavior is unchanged.

• Updated dependencies [5148d67, ff10e65]:

  • @​tinacms/schema-tools@​2.8.3
  • @​tinacms/mdx@​2.1.9
  • @​tinacms/search@​1.2.21

3.9.4

Patch Changes

• #6939 c1994b3 Thanks @​isaaclombardssw! - feat(tinacms): add a back-to-collection breadcrumb on the admin editor/create pages and in the visual editor sidebar, switch the breadcrumb separator from a chevron to a slash, show only the filename (not the full folder path) in the root breadcrumb across both editors, and truncate long crumbs so the trail no longer overflows

• #7062 caadf1f Thanks @​isaaclombardssw! - Improve global collection UX: global collections now appear once in the sidebar "Site" section (globe icon) instead of being duplicated under Collections, open directly in the form instead of a popup modal, and single-document global collections skip the document list and go straight to the form. Global collections with zero or multiple documents fall through to the normal list view.

• #7058 5ba482b Thanks @​Aibono1225! - Fix Local Mode banner for absolute contentApiUrlOverride

• #7103 8a86ffa Thanks @​wicksipedia! - Move moment-timezone to devDependencies so its timezone database no longer ships in the admin bundle. It was loaded via a non-tree-shakeable side-effect import, but production code never used the moment.tz API (only a unit test did). Removes ~39 KB gzip (~732 KB uncompressed) from the first admin load. No behavior change.

• #7105 19fcbdd Thanks @​wicksipedia! - Remove the dead mdx-field-plugin/plate/plugins/ui/icons.tsx module (398 lines of unused inline-SVG icons). Its single consumed export (EllipsisIcon) now resolves from the shared plate-ui/icons module. No behavior change.

• #7063 871ce31 Thanks @​18-th! - Remove unused add dependency

... (truncated)

Commits

• adeafbc Version Packages (#7174)
• a1ebeda Version Packages (#7130)
• ff10e65 fix(tinacms): reject invalid folder names inline via shared relativePath allo...
• 3a1b39a ⬆️ Bump @radix-ui/* deps to latest and drop unused react-checkbox (#7141)
• de4a807 ✨ Track editorial-workflow save option choice in PostHog (#7140)
• 8497110 ✨ Replace editorial-workflow draft/ready toggle with a save-options dropdown ...
• c809733 ✨ Add draft / ready-for-review control to the editorial workflow modal (#7136)
• b53a51c Validate message sender in useEditState (#7128)
• 22d0c0d 🐛 move floating edit bar into React Portal (#7131)
• 5148d67 🧹 Replace error-message string checks with shared constants (#7123)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tinacms since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
allocin.it	Error		Jul 13, 2026 6:36pm

[dependabot]

Superseded by #145.