Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2025

Bumps vue and @nextcloud/vue. These dependencies needed to be updated together.
Updates vue from 2.7.14 to 3.5.23

Release notes

Sourced from vue's releases.

v3.5.23

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.22

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.21

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.20

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.19

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.18

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.17

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.16

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.15

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.14

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.13

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.12

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.11

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.23 (2025-11-06)

Bug Fixes

  • compiler-core: correctly handle ts type assertions in expressions (#13397) (e6544ac), closes #13395
  • compiler-core: fix v-bind shorthand handling for in-DOM templates (#13933) (b3cca26), closes #13930
  • compiler-sfc: resolve numeric literals and template literals without expressions as static property key (#13998) (75d44c7)
  • compiler-ssr: textarea with v-text directive SSR (#13975) (006a0c1)
  • compiler: using guard instead of non-nullish assertion (#13982) (dcc6f36)
  • custom-element: batch custom element prop patching (#13478) (c13e674), closes #12619
  • custom-element: optimize slot retrieval to avoid duplicates (#13961) (84ca349), closes #13955
  • hydration: avoid mismatch during hydrate text with newlines in interpolation (#9232) (6cbdf78), closes #9229
  • runtime-core: pass props and children to loadingComponent (#13997) (40c4b2a)
  • runtime-dom: ensure iframe sandbox is handled as an attribute to prevent unintended behavior (#13950) (5689884), closes #13946
  • suspense: clear placeholder and fallback el after resolve to enable GC (#13928) (f411c66)
  • transition-group: use offsetLeft and offsetTop instead of getBoundingClientRect to avoid transform scale affect animation (#6108) (dc4dd59), closes #6105
  • v-model: handle number modifier on change (#13959) (8fbe48f), closes #13958

3.5.22 (2025-09-25)

Bug Fixes

  • compiler-core: identifiers in switch-case should not be inferred as references (#13923) (5953c9f)
  • compiler-dom: nodes with v-once shouldn't be stringified (#13878) (95c1975)
  • compiler-sfc: add support for @vue-ignore in runtime type resolution (#13906) (ba7f7f9)
  • compiler-sfc: enhance inferRuntimeType to support TSMappedType with indexed access (#13848) (e388f1a), closes #13847
  • compiler-sfc: ensure css custom properties do not start with a digit (#13870) (9c27951)
  • compiler-sfc: ensure props bindings register before compiling template (#13922) (abd5638), closes #13920
  • compiler-ssr: ensure v-show has a higher priority in SSR (#12171) (836b829), closes #12162
  • custom-element: properly mount multiple Teleports in custom element component w/ shadowRoot false (#13900) (5e1e791), closes #13899
  • custom-element: set prop runs pending mutations before disconnect (#13897) (c4a88cd), closes #13315
  • custom-element: use PatchFlags.BAIL for slot when props are present (#13907) (5358bca), closes #13904
  • reactivity: respect readonly during ref unwrapping (#13905) (aba7fed), closes #13903
  • reactivity: update iterator to check for completion instead of value presence (#13761) (2078f8b)
  • runtime-core: simplify block-tracking disabling in h helper (#13841) (75220c7)
  • transition-group: run forceReflow on the correct document (fix #13849) (#13853) (1be5ddf)
  • types: more precise types for Events and added missing definitions (#9675) (8bb8fb2)
  • types: set dom stub type to never instead of {} (#13915) (8620a61), closes #11564
  • types: widen directive arg type from string to any (#13758) (4b71706), closes #13757

Features

  • custom-element: allow specifying additional options for shadowRoot in custom elements (#12965) (47e628d), closes #12964

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for vue since your current version.


Updates @nextcloud/vue from 7.4.0 to 9.1.0

Release notes

Sourced from @​nextcloud/vue's releases.

v9.1.0

What's Changed

🚀 Enhancements

🐛 Fixed bugs

Other Changes

Full Changelog: nextcloud-libraries/nextcloud-vue@v9.0.1...v9.1.0

v9.0.1

What's Changed

🐛 Fixed bugs

Other Changes

Full Changelog: nextcloud-libraries/nextcloud-vue@v9.0.0...v9.0.1

v9.0.0

v9.0.0 (2025-09-25)

💥 Breaking Changes

  • The package now uses Vue 3 instead of Vue 2.7
  • The package is now a native ESM package and the CommonJS entry points were dropped!
  • The package has dropped compatibility with Nextcloud before version 31. This mostly affects the visual appearance of components.
  • The NcSettingsInputText component was deprecated in v8 and is now removed.

Plugin registering removed

The plugin registering all the components and directives globally is removed. Instead use local registration of components and directives. If you really need an alternative we recommend using unplugin-vue-components.

... (truncated)

Changelog

Sourced from @​nextcloud/vue's changelog.

v9.1.0 (2025-10-22)

Full Changelog

🚀 Enhancements

  • feat(NcChip): add error, success and warning variants #7652 (DorraJaouad)
  • feat(NcAppSettingsSection): add order prop, ensure intended order in navigation list #7636 (Antreesy)
  • feat: add NcAppSettingsSectionShortcuts, NcHotkeyList and NcHotkey #7633 (ShGKme)

🐛 Fixed bugs

  • fix(NcInputField): use empty string to fix label position #7630 (susnux)
  • chore: switch dependency for MD5 to ts-md5 #7623 (susnux)
  • fix(NcEmptyContent): use name as label #7634 (susnux)
  • fix(NcRadioGroupButton): scope expensive CSS selectors #7661 (Antreesy)
  • fix(NcAppContentDetailsToggle): Hide navigation toggle on mobile #7697 (mejo-)

Other Changes

  • refactor(NcAppSidebarTabs): use custom components for tab buttons #7516 (susnux)
  • refactor(NcAppSettingsSection): migrate to <script setup lang="ts"> #7651 (ShGKme)
  • refactor: use named export for logger #7655 (ShGKme)

v9.0.1 (2025-10-06)

Full Changelog

🐛 Fixed bugs

  • fix(NcAppContent): avoid double content mount #7590 (ShGKme)
  • fix(NcAppContent): add reactivity to pane config key #7574

Other Changes

  • Updated translations

v9.0.0 (2025-09-25)

Full Changelog

💥 Breaking Changes

  • The package now uses Vue 3 instead of Vue 2.7
  • The package is now a native ESM package and the CommonJS entry points were dropped!
  • The package has dropped compatibility with Nextcloud before version 31. This mostly affects the visual appearance of components.
  • The NcSettingsInputText component was deprecated in v8 and is now removed.

Plugin registering removed

The plugin registering all the components and directives globally is removed. Instead use local registration of components and directives. If you really need an alternative we recommend using unplugin-vue-components.

Import paths changed

The old import paths like @nextcloud/vue/dist/Components/NcComponent.js were removed. Instead use the new ones (@nextcloud/vue/components/NcComponent).

Example shell command to do the refactoring:

... (truncated)

Commits
  • 0399ae0 Merge pull request #7706 from nextcloud-libraries/release/v9.1.0
  • 940c1f4 Merge pull request #7713 from nextcloud-libraries/dependabot/npm_and_yarn/tab...
  • b28674d chore(deps): bump tabbable from 6.2.0 to 6.3.0
  • aef03b8 chore(release): v9.1.0
  • 60ca468 chore(release): add v9.1.0 changelog
  • 7062a64 chore(release): add v8.33.0 changelog
  • e891603 Merge pull request #7703 from nextcloud-libraries/translations_a29bf79827304d...
  • 6c677ec fix(l10n): Translate l10n/messages.pot in gl
  • ce5f587 Merge pull request #7682 from nextcloud-libraries/dependabot/npm_and_yarn/jsd...
  • e92db6b chore(deps-dev): bump jsdom from 26.1.0 to 27.0.1
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by skjnldsv, a new releaser for @​nextcloud/vue since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Nov 6, 2025
Bumps [vue](https://github.com/vuejs/core) and [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue). These dependencies needed to be updated together.

Updates `vue` from 2.7.14 to 3.5.23
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/core/commits/v3.5.23)

Updates `@nextcloud/vue` from 7.4.0 to 9.1.0
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/nextcloud-vue@v7.4.0...v9.1.0)

---
updated-dependencies:
- dependency-name: vue
  dependency-version: 3.5.23
  dependency-type: direct:production
- dependency-name: "@nextcloud/vue"
  dependency-version: 9.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/multi-cf3bb6b408 branch from b2fdacd to 1222910 Compare November 15, 2025 10:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant