chore(frontend)(deps): bump tldraw from 4.5.10 to 5.3.2 in /frontend

[dependabot]

Bumps tldraw from 4.5.10 to 5.3.2.

Release notes

Sourced from tldraw's releases.

v5.3.2

Generated from commits between v5.3.1 and HEAD

Bug Fixes

License fixes and product metadata (#10062)

• Added product metadata to all our package.json files to make licensing clearer between packages.
• Fixed default UI components (such as DefaultToolbar and DefaultQuickActionsContent) crashing when mounted outside the Tldraw component.
• Fixed license validation treating native apps served from custom protocols as development environments.
• Fixed wildcard license host matching so *.example.com matches only that domain's subdomains.
• Added internal useMaybeLicenseManager(): the license manager from context, falling back to the nearest editor's, or null.
• Added internal Editor.licenseManager, assigned by <TldrawEditor /> when it creates the editor.
• Changed internal useLicenseFeatureFlag to accept LicenseManager | null and return false for null.

v5.3.1

Generated from commits between v5.3.0 and HEAD

Bug Fixes

fix(editor): don't swallow touches when the editor is inset from the page edge (#9989)

• Fixed a bug where touches in part of the canvas were ignored on iOS when the editor was inset from the edge of the page, such as beside a sidebar.

v5.3.0

This release adds commenting: a set of new packages for anchored comment threads on the canvas, backed by comment records in the schema and sync support for non-document data. Commenting is the first piece of our new collaboration package, a separately licensed section of the SDK for premium collaboration features. The release also adds flipping for geo shapes, snapping and symmetric resizing while cropping images, an assets prop for TldrawImage, and a reactive Editor.getIsMounted() with a new unmount event. Viewport culling is faster on large pages, and there's a batch of fixes for crashes and interaction bugs across arrows, groups, and text.

What's new

Commenting (#9471, #9782, #9850)

Comments are now a first-class primitive in the SDK. @tldraw/commenting ships a batteries-included canvas comments layer: threads anchor to a point, a shape (precisely or imprecisely), a text range, a region, or the page. You can reply, edit, react, resolve, and delete comments. The pins drag to re-anchor, and ?comment=<id> deep links open a thread and bring the camera to its pin. Comment pins cluster together as you zoom out and separate back out as you zoom in.

Comment records live in @tldraw/tlschema as TLCommentThread, TLComment, and TLCommentReaction, and sync over a new generic object store in @tldraw/sync-core, so they ride alongside the document rather than inside it. On the server, @tldraw/sync-collaboration enforces write authorization, with a canModifyComment rule that lets a host widen the default owner-only permission. That way a workspace admin can moderate comments they don't own without granting anything beyond edit, delete, and resolve.

One rollout note: the comment record types ship with guard migrations, so once your server registers them, clients on an older SDK are rejected as too old and prompted to refresh. Roll out the upgraded client before or alongside the server change.

The layer is built to be taken apart. ThreadRow and ThreadActions are component slots, CommentListItem and sortSidebarRows are exported so a hand-built list can match the built-in one, and a host that supplies getThreadHref gets copy-link in the thread menu. On phones, the composer and the open thread stay above the software keyboard.

... (truncated)

Commits

• d390f01 v5.3.2 [skip ci]
• 3b2a245 [HOTFIX] fix(editor): license fixes and product metadata (#10062)
• 761a25a docs(releases): update release notes (#10023)
• f6d78a0 docs(releases): update release notes (#10029)
• c8a3821 v5.3.1 [skip ci]
• ef9e1e7 fix(editor): don't swallow touches when the editor is inset from the page edg...
• a9a1581 docs(releases): update release notes (#10013)
• d8ee3ff docs: sync docs content from main (#9892)
• 4f0dc05 v5.3.0
• 469719e Add VSCode extension v2.317.0 [skip ci]
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tldraw since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
web3-student-lab	Error		Sep 2, 2026 5:59pm UTC

[adeniran19-maker]

PR under review — I will get back to you if I find any wrong implementations.

[adeniran19-maker]

PR under review — I will get back to you if I find any wrong implementations.