Skip to content

chore(deps-dev): bump @nextcloud/webpack-vue-config from 6.3.2 to 7.0.4 - #1734

Closed
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/development/nextcloud/webpack-vue-config-7.0.4
Closed

chore(deps-dev): bump @nextcloud/webpack-vue-config from 6.3.2 to 7.0.4#1734
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/npm_and_yarn/development/nextcloud/webpack-vue-config-7.0.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 30, 2026

Copy link
Copy Markdown
Contributor

Bumps @nextcloud/webpack-vue-config from 6.3.2 to 7.0.4.

Release notes

Sourced from @​nextcloud/webpack-vue-config's releases.

v7.0.4

Notes

terser-webpack-plugin was replaces with its successor minimizer-webpack-plugin as in Webpack itself. If you were using terser-webpack-plugin in your config, it is recommended to migrate to minimizer-webpack-plugin.

See for details:

Fixes

Changes

What's Changed

Full Changelog: nextcloud-libraries/webpack-vue-config@v7.0.3...v7.0.4

v7.0.3

Fixes

What's Changed

... (truncated)

Changelog

Sourced from @​nextcloud/webpack-vue-config's changelog.

7.0.4 (2026-08-10)

Full Changelog

Fixes

Changes

7.0.3 (2026-08-04)

Full Changelog

Fixes

7.0.2 (2025-11-18)

Full Changelog

Fixes

7.0.1 (2025-11-07)

Full Changelog

Changed

7.0.0 (2025-11-03)

Full Changelog

💥 BREAKING CHANGES

Apps on Vue 2 are now required an explicit legacy vue-loader installation:

npm i -D vue-loader@legacy
Commits
  • 3e2ef54 Merge pull request #806 from nextcloud-libraries/release/v7.0.4
  • 9beaaed chore(release): v7.0.4
  • 69416fe Merge pull request #808 from nextcloud-libraries/feat/workflow-auto-update-al...
  • 9faee5a Merge pull request #804 from nextcloud-libraries/automated/noid/main-fix-npm-...
  • f270c32 fix(deps): Fix npm audit
  • 316a4a7 ci: update all workflow templates from organization template repository
  • 56b1071 Merge pull request #805 from nextcloud-libraries/build/minimizer-webpack-plugin
  • cdfefa9 build: replace terser-webpack-plugin with minimizer-webpack-plugin
  • e11bfd0 build(deps): replace terser-webpack-plugin with minimizer-webpack-plugin
  • 66098b7 Merge pull request #802 from nextcloud-libraries/fix/node-polyfill-4-0-0
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​nextcloud/webpack-vue-config since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps-dev): bump @nextcloud/webpack-vue-config from 6.3.2 to 7.0.4
3e93022 
Bumps [@nextcloud/webpack-vue-config](https://github.com/nextcloud-libraries/webpack-vue-config) from 6.3.2 to 7.0.4.
- [Release notes](https://github.com/nextcloud-libraries/webpack-vue-config/releases)
- [Changelog](https://github.com/nextcloud-libraries/webpack-vue-config/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/webpack-vue-config@v6.3.2...v7.0.4)

---
updated-dependencies:
- dependency-name: "@nextcloud/webpack-vue-config"
  dependency-version: 7.0.4
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 30, 2026
@dependabot
dependabot Bot requested a review from SudoThijn as a code owner August 30, 2026 19:15
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 30, 2026
@dependabot
dependabot Bot requested a review from remko48 as a code owner August 30, 2026 19:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 30, 2026
@github-actions

github-actions Bot commented Aug 30, 2026

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/integriq @ 3e24d35

Check PHP Vue Security License Tests
lint ✅
phpcs ✅
phpmd ✅
psalm ✅
phpstan ✅
phpmetrics ✅
eslint ✅
stylelint ✅
build ✅
build ✅
check-specs ✅
test-l10n ✅
format ✅
check-schema-l10n ✅
check-l10n-js ✅
composer ✅ ✅ 146/146
npm ✅ ✅ 538/538
app:check-code ⏭️
info.xml ✅
REUSE ❌
PHPUnit ✅
Newman ✅
Playwright 🚨 NO VERDICT — enabled but never ran
Hydra gates ✅

Quality workflow — 2026-08-30 23:03 UTC

Download the full PDF report from the workflow artifacts.

@rubenvdlinde

rubenvdlinde commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Closing: this bump cannot be installed, verified rather than assumed.

Applying @nextcloud/webpack-vue-config@^7.0.4 to this app's own package.json and asking npm to resolve the tree fails:

peer sass-loader@"^17.0.0" from @nextcloud/webpack-vue-config@7.0.4

The package is peered by something else this app depends on, at a range the new major does not satisfy — so npm rejects the entire tree, not just this package. Merging it would leave npm ci unable to run, and every frontend job fails at install before reporting anything about the code.

That is not hypothetical. Eight apps were in exactly that state tonight — planninq, filinq, stackiq, integriq, dossiq, pipelinq, decidiq and hermiq — from majors of this same family landing without the peers that must move with them. Each one had every frontend check failing at install while looking like ordinary CI redness.

This is not a judgement that the upgrade is undesirable. It is that the upgrade is not available yet: it needs the packages that peer it to move first, and then the whole set adopted together. Dependabot will reopen it when that changes.

Measured across the fleet: of 51 npm majors tested this way, 24 could not install and 27 could.

@rubenvdlinde
rubenvdlinde deleted the dependabot/npm_and_yarn/development/nextcloud/webpack-vue-config-7.0.4 branch August 31, 2026 01:45
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SudoThijn SudoThijn Awaiting requested review from SudoThijn SudoThijn is a code owner
@remko48 remko48 Awaiting requested review from remko48 remko48 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rubenvdlinde