From e8adedea7112e43ebb26938a9805e79a24cf78df Mon Sep 17 00:00:00 2001 From: Ruben van der Linde Date: Mon, 31 Aug 2026 04:35:06 +0200 Subject: [PATCH 1/3] chore(deps): @conduction/nextcloud-vue 2.24.3 -> 2.25.1 (#524) Picks up the fix for the Buildiq edit button, which had disappeared from every host app in the fleet. The shared library gated the button on `useAppStatus('openbuild')`, an `OC.appswebroots` lookup keyed by the Nextcloud app id. That id moved when Buildiq shipped `buildiq`, so the lookup missed, availability stayed false, and the button rendered nothing: no error, no failed request, no console warning. 2.25.1 checks the current id and falls back to the legacy one. The caret range already permitted the newer library, so the lockfile pin was the thing actually holding this app back. Lockfile edited surgically rather than regenerated: a full re-resolve rewrote ~3000 lines and pulled in 161 unrelated transitive packages. Only version, resolved, integrity and the widened pinia peer range change. The integrity hash was checked against the published tarball bytes, and `npm ci` was run against the result. --- package-lock.json | 10 +++++----- package.json | 2 +- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 0bcde6f0..368d34c4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "@fontsource/fira-sans": "^5.0.0" }, "devDependencies": { - "@conduction/nextcloud-vue": "^2.22.1", + "@conduction/nextcloud-vue": "^2.25.1", "@cyclonedx/cyclonedx-npm": "^6.0.1", "@nextcloud/prettier-config": "^1.2.0", "@openfun/cunningham-tokens": "^3.0.0", @@ -387,9 +387,9 @@ } }, "node_modules/@conduction/nextcloud-vue": { - "version": "2.24.3", - "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.24.3.tgz", - "integrity": "sha512-Hflys+AxGNNSkDxuMf04RdFzijhWDKtcRJAHtmtYLj6ntwoIT51k0rfRju6S5GuTNF+daJDUv9tHDVVXb9ZIWw==", + "version": "2.25.1", + "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.25.1.tgz", + "integrity": "sha512-c5sY4XnHrfGUIUEatJEIT5jK78k9REj2UCqXylbHiDPkv1HpUx7Sf3XtfDxAd4xPjn/kbO094rNqShK4tPnY7w==", "dev": true, "license": "EUPL-1.2", "dependencies": { @@ -454,7 +454,7 @@ "eslint-plugin-vue": "^9.21.0 || ^10.0.0", "gridstack": "^12.0.0 || ^13.0.0", "marked": "^12.0.0", - "pinia": "^2.0.0 || ^3.0.0", + "pinia": "^2.0.0 || ^3.0.0 || ^4.0.0", "vue": "^3.5.0", "vue-eslint-parser": "^9.4.0 || ^10.0.0", "vue-material-design-icons": "^5.0.0" diff --git a/package.json b/package.json index 40ea3744..a8659a5a 100644 --- a/package.json +++ b/package.json @@ -56,7 +56,7 @@ "@gouvfr/dsfr": "^1.15.1" }, "devDependencies": { - "@conduction/nextcloud-vue": "^2.22.1", + "@conduction/nextcloud-vue": "^2.25.1", "@cyclonedx/cyclonedx-npm": "^6.0.1", "@nextcloud/prettier-config": "^1.2.0", "@openfun/cunningham-tokens": "^3.0.0", From 0f1bbd024a962911542030ddb111ec826d3788ad Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 07:34:50 +0200 Subject: [PATCH 2/3] chore(release): 1.1.10-unstable.20260831053139 (#528) Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- appinfo/info.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/appinfo/info.xml b/appinfo/info.xml index b232b2c4..0a1cb3d7 100644 --- a/appinfo/info.xml +++ b/appinfo/info.xml @@ -64,7 +64,7 @@ Gratis en open source onder de EUPL-1.2 licentie. which quoted the grep command in order to WARN about the problem — made it read ")[^". The warning reproduced the bug it described. --> - 1.1.7-unstable.20260830174749 + 1.1.10-unstable.20260831053139 EUPL-1.2 Conduction Thematiq From 4bc8417c0fead8aa15fd89eeb55bcb7fb5c48e85 Mon Sep 17 00:00:00 2001 From: Ruben van der Linde Date: Mon, 31 Aug 2026 07:37:25 +0200 Subject: [PATCH 3/3] chore(deps): refresh the shared Conduction locks (#527) hydra-gates v1.10.0 -> v1.10.0 nc-vue 2.25.1 -> 2.26.0 Lock-only: both packages are already declared with caret ranges that permit these versions, so nothing about what this app ACCEPTS changes - only what it currently resolves to. Opened by the weekly fleet shared-dependency bump, because a lock nobody re-resolves is a pin nobody chose. Merging is gated by this repository's own suite, deliberately: taking hydra-gates v1.8.1 added patchObject() to a published interface, which is a load-time fatal for any concrete double that implements it without the method. CI is the only thing that can tell a safe bump from that. Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> --- package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/package-lock.json b/package-lock.json index 368d34c4..3bbc156b 100644 --- a/package-lock.json +++ b/package-lock.json @@ -387,9 +387,9 @@ } }, "node_modules/@conduction/nextcloud-vue": { - "version": "2.25.1", - "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.25.1.tgz", - "integrity": "sha512-c5sY4XnHrfGUIUEatJEIT5jK78k9REj2UCqXylbHiDPkv1HpUx7Sf3XtfDxAd4xPjn/kbO094rNqShK4tPnY7w==", + "version": "2.26.0", + "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.26.0.tgz", + "integrity": "sha512-PrEd1Ej9UMXTw7qzq6WqqPnwdO2yLlJvj8/Lz7fGbtrUbO8xUAkPwgJlKNbsWHv2DhhF5G/MRN4ZA+YvNDaJIg==", "dev": true, "license": "EUPL-1.2", "dependencies": {