Bump lodash-es and @ckeditor/strapi-plugin-ckeditor in /backend

[dependabot]

Bumps lodash-es to 4.17.23 and updates ancestor dependency @ckeditor/strapi-plugin-ckeditor. These dependencies need to be updated together.

Updates lodash-es from 4.17.21 to 4.17.23

Commits

• dec55b7 Bump main to v4.17.23 (#6088)
• 19c9251 fix: setCacheHas JSDoc return type should be boolean (#6071)
• b5e6729 jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)
• edadd45 Prevent prototype pollution on baseUnset function
• 4879a7a doc: fix autoLink function, conversion of source links (#6056)
• 9648f69 chore: remove yarn.lock file (#6053)
• dfa407d ci: remove legacy configuration files (#6052)
• 156e196 feat: add renovate setup (#6039)
• 933e106 ci: add pipeline for Bun (#6023)
• 072a807 docs: update links related to Open JS Foundation (#5968)
• Additional commits viewable in compare view

Updates @ckeditor/strapi-plugin-ckeditor from 0.0.11 to 1.1.1

Release notes

Sourced from @​ckeditor/strapi-plugin-ckeditor's releases.

v1.1.1

1.1.1 (March 17, 2025)

We are happy to announce the release of CKEditor 5 Official Integration v1.1.1.

Release highlights

In this release, we fixed the issue related to integrating the custom field in repeatable components. See #143 to learn more.

v1.1.0

Release highlights

In this release, we updated the CKEditor 5 version to v44.0.0, which introduces high impact updates. Starting from the plugin version 1.1.0, the custom field will require passing a valid license key.

BREAKING CHANGES ℹ️

• CKEditor 5 custom field now requires the license key. CKEditor 5 now requires a valid license key, which can be retrieved from Customer Portal. You can sign up for a commitment-free trial and get instant access to your key.

v1.0.2

Release highlights

This is a patch release that resolves an issue that resulted in a crash after removing the content from the editor. The issue was caused by the fact that after releasing Strapi 5.0.0, the custom field's value property becomes null when the editor is empty.

Check out the highlights of the original v1.0.0 release.

Bug fixes

• Prevent passing null as the editor data to prevent the crash.

v1.0.1

Release highlights

This is a patch release that resolves an issue that resulted in the Strapi app building process failure.

Check out the highlights of the original v1.0.0 release.

Bug fixes

• Switch the ckeditor5-maximum-length plugin from UMD build to JS.

v1.0.0

We are happy to announce the release of CKEditor 5 Official Integration v1.0.0.

Release highlights

This release introduces compatibility between the CKEditor 5 Official Integration plugin and Strapi 5. We are providing an updated version of the plugin to allow early testing and ensure seamless integration with the Strapi 5 release.

For users who continue to work with Strapi 4, the plugin remains available in version 0.x.x (with 0.1.0 being the latest as of September 19th). This ensures full support for Strapi 4 environments.

BREAKING CHANGES ℹ️

... (truncated)

Changelog

Sourced from @​ckeditor/strapi-plugin-ckeditor's changelog.

1.1.1 (March 17, 2025)

We are happy to announce the release of CKEditor 5 Official Integration v1.1.1.

Release highlights

In this release, we fixed the issue related to integrating the custom field in repeatable components. See #143 to learn more.

1.1.0 (December 2, 2024)

We are happy to announce the release of CKEditor 5 Official Integration v1.1.0.

Release highlights

In this release, we updated the CKEditor 5 version to v44.0.0, which introduces high impact updates. Starting from the plugin version 1.1.0, the custom field will require passing a valid license key.

BREAKING CHANGES ℹ️

• CKEditor 5 custom field now requires the license key. CKEditor 5 now requires a valid license key, which can be retrieved from Customer Portal. You can sign up for a commitment-free trial and get instant access to your key.

1.0.2 (September 20, 2024)

Release highlights

This is a patch release that resolves an issue that resulted in a crash after removing the content from the editor. The issue was caused by the fact that after releasing Strapi 5.0.0, the custom field's value property becomes null when the editor is empty.

Check out the highlights of the original v1.0.0 release.

Bug fixes

• Prevent passing null as the editor data to prevent the crash.

1.0.1 (September 19, 2024)

Release highlights

This is a patch release that resolves an issue that resulted in the Strapi app building process failure.

Check out the highlights of the original v1.0.0 release.

Bug fixes

• Switch the ckeditor5-maximum-length plugin from UMD build to JS.

1.0.0 (September 19, 2024)

We are happy to announce the release of CKEditor 5 Official Integration v1.0.0.

Release highlights

This release introduces compatibility between the CKEditor 5 Official Integration plugin and Strapi 5. We are providing an updated version of the plugin to allow early testing and ensure seamless integration with the Strapi 5 release.

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}