CoreMedia · pkliesch · Jul 17, 2026 · Jun 5, 2026 · Jun 5, 2026 · Jun 17, 2026
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -64,9 +64,6 @@ env:
 permissions: { }
 
 jobs:
-  get-env:
-    name: "Get Environment"
-    uses: "./.github/workflows/env.yml"
   get-engines:
     name: "Get Engines"
     uses: "./.github/workflows/get-engines.yml"
@@ -76,34 +73,28 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     needs:
-      - get-env
       - get-engines
     env:
       nodeVersion: ${{ needs.get-engines.outputs.nodeVersion }}
       pnpmVersion: ${{ needs.get-engines.outputs.pnpmVersion }}
-      npmHost: ${{ needs.get-env.outputs.npm-host }}
-      npmUrl: ${{ needs.get-env.outputs.npm-url }}
     steps:
       - id: checkout
         name: Checkout
         uses: actions/checkout@v5
       - id: authorize
         name: "NPM Authorization"
         run: |
-          result=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' "${{ env.npmUrl }}/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }}" | jq --raw-output .token)
+          result=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' "https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }}" | jq --raw-output .token)
           # Ensure, the token is not exposed in output.
           echo "::add-mask::${result}"
           echo "NODE_AUTH_TOKEN=${result}" >> $GITHUB_ENV
       - id: initNpmConfiguration
         name: "Initialize NPM Configuration"
         run: |
-          npmHost="${{ env.npmHost }}"
-          npmUrl="${{ env.npmUrl }}"
           npmAuthToken="${{ env.NODE_AUTH_TOKEN }}"
-
-          echo "//${npmHost}/:_authToken=${npmAuthToken}" >> .npmrc
-          echo "@coremedia:registry=${npmUrl}" >> .npmrc
-          echo "@coremedia-internal:registry=${npmUrl}" >> .npmrc
+          echo "//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=${npmAuthToken}" >> .npmrc
+          echo "@coremedia:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
+          echo "@coremedia-internal:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
           # We must not commit this change.
           git update-index --assume-unchanged .npmrc
       - id: installPnpm
@@ -114,7 +105,7 @@ jobs:
           run_install: false
       - id: installNodeJs
         name: "Install: Use Node.js ${{ env.nodeVersion }}"
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ env.nodeVersion }}
           cache: "pnpm"
@@ -128,7 +119,6 @@ jobs:
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('node_modules/.pnpm/@playwright+test@*/node_modules/@playwright/test/package.json') }}
-
       - name: Install playwright deps
         if: ${{ inputs.itest && steps.playwright-cache.outputs.cache-hit != 'true' }}
         shell: bash

diff --git a/.github/workflows/env.yml b/.github/workflows/env.yml
diff --git a/.github/workflows/get-version.yml b/.github/workflows/get-version.yml
@@ -70,7 +70,7 @@ jobs:
           run_install: false
       - id: installNodeJs
         name: "Install: Use Node.js ${{ env.nodeVersion }}"
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ env.nodeVersion }}
           cache: "pnpm"

diff --git a/.github/workflows/list.yml b/.github/workflows/list.yml
diff --git a/.github/workflows/pre-release-gc.yml b/.github/workflows/pre-release-gc.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Check out repository
         uses: actions/checkout@v5
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Set up .npmrc
@@ -53,9 +53,8 @@ jobs:
             "${{ env.NPM_REPOSITORY_URL }}/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }}" | \
             jq -r .token)
           echo "::add-mask::$NPM_AUTH_TOKEN"
-          echo "NPM_CONFIG_//${{ env.NPM_REPOSITORY }}/:_authToken=${NPM_AUTH_TOKEN}" >> $GITHUB_ENV
+          echo "PNPM_CONFIG_//${{ env.NPM_REPOSITORY }}/:_authToken=${NPM_AUTH_TOKEN}" >> $GITHUB_ENV
           echo "NPM_AUTH_TOKEN=${NPM_AUTH_TOKEN}" >> $GITHUB_ENV
-          echo "NPM_CONFIG_@coremedia:registry=${{ env.NPM_REPOSITORY_URL }}" >> $GITHUB_ENV
           echo "//${{ env.NPM_REPOSITORY }}/:_authToken=${NPM_AUTH_TOKEN}" > .npmrc
           echo "@coremedia:registry=${{ env.NPM_REPOSITORY_URL }}" >> .npmrc
       - name: "Performing Garbage Collection (retain: ${{ inputs.retain }}, dry-run: ${{ inputs.dryRun }})"

diff --git a/.github/workflows/pre-release.yml b/.github/workflows/pre-release.yml
@@ -16,9 +16,7 @@ env:
   NODE_VERSION: 24
   # https://github.com/actions/runner-images/issues/70
   NODE_OPTIONS: "--max_old_space_size=4096"
-  PNPM_VERSION: ^10.9
-  NPM_CONFIG_@coremedia:registry: 'https://repository.coremedia.com/nexus/repository/coremedia-npm'
-  NPM_CONFIG_@coremedia-internal:registry: 'https://repository.coremedia.com/nexus/repository/coremedia-npm'
+  PNPM_VERSION: ^11.7
 
 jobs:
   build:
@@ -37,18 +35,24 @@ jobs:
           prnumber=$(curl -s -H "Accept: application/vnd.github.v3+json" -H "Authorization: token ${{ secrets.GITHUB_TOKEN }}" https://api.github.com/repos/${{github.repository}}/pulls?head=${{github.repository_owner}}:${{github.ref}} | jq -r '.[] | .number' )
           echo "Allocated Pull Request number ${prnumber}"
           echo "::set-output name=prnumber::${prnumber}"
+      - name: Use PNPM ${{ env.PNPM_VERSION }}
+        uses: pnpm/action-setup@v5
+        with:
+          version: ${{ env.PNPM_VERSION }}
+          run_install: false
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
       - name: Configure NPM
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
-          echo "NPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
-
-          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
+          echo "@coremedia:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
+          echo "@coremedia-internal:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
       - name: Setup Git
         run: |
           git config --global user.name 'coremedia-ci'

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -25,9 +25,7 @@ env:
   NODE_VERSION: 24
   # https://github.com/actions/runner-images/issues/70
   NODE_OPTIONS: "--max_old_space_size=4096"
-  PNPM_VERSION: ^10.9
-  NPM_CONFIG_@coremedia:registry: 'https://repository.coremedia.com/nexus/repository/coremedia-npm'
-  NPM_CONFIG_@coremedia-internal:registry: 'https://repository.coremedia.com/nexus/repository/coremedia-npm'
+  PNPM_VERSION: ^11.7
 
 jobs:
   build:
@@ -56,18 +54,24 @@ jobs:
         run: |
           echo "For maintenance branches only patch versions are allowed."
           exit 1
+      - name: Use PNPM ${{ env.PNPM_VERSION }}
+        uses: pnpm/action-setup@v5
+        with:
+          version: ${{ env.PNPM_VERSION }}
+          run_install: false
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
         with:
           node-version: ${{ env.NODE_VERSION }}
+          cache: pnpm
       - name: Configure NPM
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
           echo "::add-mask::$NPM_AUTH_TOKEN"
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
-          echo "NPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
-
-          npm install -g pnpm@${{ env.PNPM_VERSION }}
+          echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
+          echo "@coremedia:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
+          echo "@coremedia-internal:registry=https://repository.coremedia.com/nexus/repository/coremedia-npm/" >> .npmrc
       - name: Setup Git
         run: |
           git config --global user.name 'coremedia-ci'

diff --git a/.github/workflows/unpublish.yml b/.github/workflows/unpublish.yml
@@ -8,8 +8,6 @@ on:
 jobs:
   build:
     name: Unpublish Version
-    env:
-      NPM_CONFIG_@coremedia:registry: 'https://repository.coremedia.com/nexus/repository/coremedia-npm'
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -18,7 +16,7 @@ jobs:
         run: |
           NPM_AUTH_TOKEN=$(curl -s -H "Accept: application/json" -H "Content-Type:application/json" -X PUT --data '{"name": "${{ secrets.PLUGINS_NEXUS_USER }}", "password": "${{ secrets.PLUGINS_NEXUS_PASSWORD }}"}' https://repository.coremedia.com/nexus/repository/coremedia-npm/-/user/org.couchdb.user:${{ secrets.PLUGINS_NEXUS_USER }} | jq -r .token)
           echo "::add-mask::$NPM_AUTH_TOKEN"
-          echo "NPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
+          echo "PNPM_CONFIG_//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
           echo "NPM_AUTH_TOKEN=$NPM_AUTH_TOKEN" >> $GITHUB_ENV
           echo '//repository.coremedia.com/nexus/repository/coremedia-npm/:_authToken=${NPM_AUTH_TOKEN}' > .npmrc
       - name: Unpublish release

diff --git a/README.md b/README.md
@@ -64,7 +64,6 @@ workspace usage, are not published and have scope `@coremedia-internal/`.
 
 | Name                                              | Description                                                                |
 |---------------------------------------------------|----------------------------------------------------------------------------|
-| [`ckeditor5-babel-config`][]                      | Internal: Shared Babel configuration.                                      |
 | [`ckeditor5-bbcode`][]                            | BBCode: Data-Processor                                                     |
 | [`ckeditor5-common`][]                            | Common Utilities, independent from CKEditor                                |
 | [`ckeditor5-core-common`][]                       | Assistive Utilities for `@ckeditor/ckeditor5-core`                         |
@@ -184,8 +183,6 @@ implements the described behavior.
 
 <!-- ===========================================================[References] -->
 
-[`ckeditor5-babel-config`]: <./packages/ckeditor5-babel-config> "@coremedia-internal/ckeditor5-babel-config"
-
 [`ckeditor5-bbcode`]: <./packages/ckeditor5-bbcode> "@coremedia/ckeditor5-bbcode"
 
 [`ckeditor5-common`]: <./packages/ckeditor5-common> "@coremedia/ckeditor5-common"

diff --git a/app/package.json b/app/package.json
@@ -33,14 +33,11 @@
     "xml-formatter": "catalog:"
   },
   "devDependencies": {
-    "@babel/core": "catalog:",
-    "@babel/plugin-transform-runtime": "catalog:",
     "@ckeditor/ckeditor5-dev-translations": "catalog:",
     "@ckeditor/ckeditor5-dev-utils": "catalog:",
     "@ckeditor/ckeditor5-inspector": "catalog:",
     "@ckeditor/ckeditor5-theme-lark": "catalog:",
     "@types/node": "catalog:",
-    "babel-loader": "catalog:",
     "circular-dependency-plugin": "catalog:",
     "css-loader": "catalog:",
     "dotenv": "catalog:",

diff --git a/package.json b/package.json
@@ -8,8 +8,8 @@
     "avatar": "data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSI2OTguNjY3IiBoZWlnaHQ9IjY5OC42NjciIHZlcnNpb249IjEuMCIgdmlld0JveD0iMCAwIDUyNCA1MjQiPjxwYXRoIGQ9Ik0yODIuNS42QzI0NSA0LjUgMjE1LjEgMTIuOSAxODUgMjcuOSAxMDYuNCA2Ny4yIDUzLjUgMTQyLjEgNDIuNCAyMjkuNWMtMi4xIDE3LjItMi4yIDQ4IDAgNjQuMUM0OCAzMzYuMiA2MS4zIDM3Mi4yIDg0IDQwNi4zYzYxLjkgOTMuMSAxNzUuNCAxMzYuNCAyODUgMTA4LjcgMTkuMi00LjggMzMuNy0xMC4zIDUzLjItMjAuMSAyMS0xMC41IDQyLjUtMjUuMyA1OC4zLTQwLjJsOC03LjYtMjEuNS0yMS42Yy0yMy42LTIzLjgtMjcuMS0yNi43LTM4LjYtMzIuNC0yMi40LTExLjItNDQuNy0xMS42LTcxLjctMS41LTE4LjYgNy0zMC40IDkuNC00OC43IDEwLjEtMTMgLjQtMTcuNS4yLTI3LjgtMS42LTMwLjUtNS4yLTU1LTE3LjgtNzYuOC0zOS41LTMzLjYtMzMuNi00Ny44LTgwLjQtMzguNC0xMjYuNCAxMC4yLTUwLjUgNDYuMi05MC41IDk1LjItMTA2LjEgMzEuNy0xMC4xIDY0LjItOC44IDk2LjYgMy45IDEyLjggNC45IDIyLjcgNyAzNC4xIDcgMTYuNCAwIDMxLjItNC4yIDQ1LjEtMTIuNyA1LjUtMy40IDEzLjYtMTAuNyAzMC40LTI3LjNsMjIuOC0yMi42LTkuMy04LjRjLTM5LjgtMzUuNC04NS42LTU3LTEzOC40LTY1LjEtMTIuNS0yLTQ4LjctMy4zLTU5LTIuM3oiLz48cGF0aCBkPSJNMjk2IDIxOC4xYy0yOC4zIDQuOC00NC4zIDM1LjQtMzIuMSA2MS40IDcuOSAxNyAyNy4yIDI3LjQgNDUuNCAyNC41IDI4LjktNC42IDQ1LjEtMzUuMiAzMi43LTYxLjctOC0xNy4yLTI3LjMtMjcuMy00Ni0yNC4yeiIvPjwvc3ZnPg=="
   },
   "engines": {
-    "node": "^24.16.0",
-    "pnpm": "^10.9.0"
+    "node": "^24.18.0",
+    "pnpm": "^11.7.0"
   },
   "private": true,
   "description": "Plugins required or recommended to use CKEditor 5 within CoreMedia Studio.",

diff --git a/packages/ckeditor5-babel-config/README.md b/packages/ckeditor5-babel-config/README.md