chore(deps): bump @conduction/nextcloud-vue to 3.0.0-vue3.4

[rubenvdlinde]

What

Bumps @conduction/nextcloud-vue from 3.0.0-vue3.3 to 3.0.0-vue3.4, pinned exactly (no caret, no tilde).

Patch bump on the existing 3.x / Vue 3 line — this is not a major migration.

Lockfile verification

Read out of package-lock.json itself (not package.json, not npm ls):

package	resolved version	note
@conduction/nextcloud-vue	3.0.0-vue3.4	exact target
vue3-apexcharts	1.8.0	below 1.9.0 — 1.9.0+ is proprietary and forbids sublicensing in our EUPL-1.2 apps. No override was added.
apexcharts (core)	4.7.0	still MIT

• lockfileVersion: 3, 2338 package entries, 1.2 MB — sane, not a collapsed/empty resolve.
• overrides contains no // key (a // key makes npm resolve zero deps while reporting "up to date").

Install chain: rm -rf package-lock.json node_modules -> npm install (npm 11.13.0 / node 22.22.0) -> npm install --package-lock-only (npm 10.9.8 / node 20.20.2) -> npm ci (npm 10.9.8).

Breaking surface — three removed components

3.0.0 removes CnFlowCanvas, CnEditFlowsModal and CnFlowCanvasModal. OpenRegister owns the flow engine, so it is the app most likely to reference them.

Grep of the built output (js/, built with USE_LOCAL_LIB=false):

symbol	occurrences in js/	expected
CnFlowCanvas	0	removed
CnEditFlowsModal	0	removed
CnFlowCanvasModal	0	removed
CnFlowEditModal	4 (1 file)	positive control — grep is working

The positive control is non-zero, so the three zeros are real absences rather than a broken query.

src/ greps clean for all three removed names as well. The flow components OpenRegister actually imports are CnFlowSidebar, CnFlowIndexPage, CnFlowDetail — all still present in the library. No app code was deleted or rewritten.

Local gates

gate	result
USE_LOCAL_LIB=false npm run build	pass — webpack 5.109.2, 0 errors, 15 warnings (pre-existing asset-size warnings)
npm run lint	pass — exit 0, 0 errors, 1051 pre-existing jsdoc warnings
npm test (jest)	pass — 35 suites, 298 tests, all green

composer check:strict was not run: this is a JS-only dependency pin and touches no PHP.

Note on docs/features.json

Running the build executes the prebuild features-manifest generator, which rewrites docs/features.json into a different schema shape ({schemaVersion, generatedAt, features[]} with 5 entries) than the committed flat array (20 entries). This drift is pre-existing and unrelated to this PR — it was reproduced by running the generator on a pristine checkout of the base SHA 41f2963, which produces the identical divergent output. The generated file is therefore deliberately not included in this commit.

[github-actions]

Quality Report — ConductionNL/openregister @ ab4a459

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
composer			✅	✅ 174/174
npm			✅	✅ 713/713
PHPUnit					✅
Newman					✅
Playwright					✅

---

Quality workflow — 2026-08-03 22:28 UTC

Download the full PDF report from the workflow artifacts.