Bump tinymce from 6.6.2 to 7.9.3 in /jeecgboot-vue3

[dependabot]

Bumps tinymce from 6.6.2 to 7.9.3.

Changelog

Sourced from tinymce's changelog.

7.9.3 - 2026-05-19

Security

• Fixed media plugin data-mce-object injection leading to stored XSS. #TINY-14357
• Fixed stored XSS vulnerability through mce:protected comments. #TINY-14353
• Fixed stored XSS vulnerability through data-mce- prefixed src, href, style attributes. #TINY-14333

7.9.2 - 2026-02-11

Deprecated

• The default value of allow_html_in_comments will change from true to false in TinyMCE 8.x. #TINY-11900

Security

• Updated dependencies and parsing logic for enhanced content sanitization. HTML-like content in comments and certain legacy patterns are now sanitized more strictly when xss_sanitization is enabled (default). The Introduced allow_html_in_comments option provides control over comment node sanitization behavior. #TINY-11900
• Introduced allow_html_in_comments option (boolean, default: true) to control handling of HTML-like syntax in comment nodes. This option will default to false in TinyMCE 8.x. #TINY-11900

7.9.1 - 2025-05-29

Improved

• Update Notices file and minified notices. #TINY-12091

7.9.0 - 2025-05-15

Added

• Added new disc style option for unordered lists. #TINY-12015

Improved

• The resize cursor now points in the correct direction for each resize mode. Patch contributed by daniloff200. ##GH-10189
• If style_formats is empty, the button is now disabled. #TINY-12005
• Inline dialog dropdowns reposition when the dialog is dragged or the window is scrolled. #TINY-11368
• Bullet list icons were have been updated to better represent the default styles. #TINY-12014

Changed

• The ContextFormSizeInput lock button is now centered instead of aligned to the end. #TINY-11916
• Changed the default value of advlist_bullet_styles option to default,disc,circle,square. #TINY-12083

Fixed

• Autolink no longer overrides already existing links when autolinking. #TINY-11836
• Removed the deprecated CSS media selector -ms-high-contrast. #TINY-11876
• The mceInsertContent command no longer deletes the parent block element when an anchor is selected. #TINY-11953
• Table resizers are now visible when inline editor has a z-index property. #TINY-11981
• Tabbing inside a figcaption element no longer displays two text insertion carets. #TINY-11997
• Pressing Enter before a floating image no longer duplicates the image. #TINY-11676
• Editor did not scroll into viewport on receiving focus on Chrome and Safari. #TINY-12017
• Select UI elements was not properly styled on Chrome version 136. #TINY-12131

7.8.0 - 2025-04-09

Added

... (truncated)

Commits

• 9dac5bb TINY-14334: Fix failing test for 7.9.3 patch release
• 710d12b TINY-14334: Lint fix for 7.9.3 patch release
• 76f8454 TINY-14334: Add changelog for 7.9.3 patch release
• 1d4c86b TINY-14357: Fixed data-mce-object injection (#19)
• 0029dad TINY-14333: Fixed stored XSS vulnerability through data-mce- prefixed src...
• a7d7701 TINY-14353: Fixed stored XSS vulnerability through mce:protected comments (...
• 58475df TINY-13699: Bump package.json for next release
• fa9eb9d TINY-13699: Add changelog for 7.9.2 patch release (#10888)
• c323038 TINY-12247: Fix flaky tests (#10521)
• df337f6 TINY-13655: Fix failing tests in firefox (#10859)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.