Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates - #11

Merged
LukasHirt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-95115be2a1
Jul 21, 2026
Merged

chore(deps): bump the minor-and-patch group across 1 directory with 8 updates#11
LukasHirt merged 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-95115be2a1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 8 updates in the /frontend directory:

Package From To
vue 3.5.39 3.5.40
vue-router 5.1.0 5.2.0
@ownclouders/eslint-config 12.3.2 12.5.0
@ownclouders/extension-sdk 12.3.2 12.5.0
happy-dom 20.10.6 20.11.0
prettier 3.8.3 3.9.6
vitest 4.1.7 4.1.10
vue-tsc 3.3.2 3.3.7

Updates vue from 3.5.39 to 3.5.40

Release notes

Sourced from vue's releases.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

Changelog

Sourced from vue's changelog.

3.5.40 (2026-07-16)

Bug Fixes

Commits

Updates vue-router from 5.1.0 to 5.2.0

Release notes

Sourced from vue-router's releases.

v5.2.0

   🚀 Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @ownclouders/eslint-config from 12.3.2 to 12.5.0

Release notes

Sourced from @​ownclouders/eslint-config's releases.

12.5.0

Changelog for ownCloud Web 12.5.0 (2026-07-01)

Summary

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Bugfix - Validate URL before opening password-protected folder: #13924
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894
  • Enhancement - Add an HTML editor app: #13895
  • Enhancement - Save a copy of office documents to another format (Collabora): #13906

Details

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Fix danger filled button text color on focus: #13887

    We've fixed the OcButton danger filled variant not applying the correct text color when focused via keyboard.

    owncloud/web#13887

  • Bugfix - Open external apps based on the file mime type: #13888

    We've fixed the external app redirect (/external) picking an arbitrary app when no app query parameter was present. It fell back to the first registered app provider, which might not support the file's mime type, so the following request to open the file failed with an "app not found" error that surfaced as a generic error to the user.

    The redirect now resolves the app from the file's mime type, preferring the configured default application, and shows an explicit error when no suitable app is available instead of silently redirecting to the wrong one.

    owncloud/web#13888

  • Bugfix - Validate URL before opening password-protected folder: #13924

... (truncated)

Changelog

Sourced from @​ownclouders/eslint-config's changelog.

Changelog for ownCloud Web unreleased (UNRELEASED)

The following sections list the changes in ownCloud web unreleased relevant to ownCloud admins and users.

Summary

  • Security - Validate postMessage origin in embed mode modals: #13844
  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Add explicit size to space header image: #13822
  • Bugfix - Apply vault theme after OIDC callback: #13826
  • Bugfix - Gate MFA expiry dialog on vault capability: #13827
  • Bugfix - Logo not rendering in Firefox: #13834
  • Bugfix - Fix theme switching issues: #13843
  • Bugfix - Pass vault parameter to capabilities endpoint: #13867
  • Bugfix - Filter notifications by vault mode: #13877
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894

Details

  • Security - Validate postMessage origin in embed mode modals: #13844

    We've fixed a cross-site request forgery (CSRF) vulnerability where the embed mode modals (Save As, Export As PDF and the file picker) processed incoming postMessage events without verifying the sender's origin. A malicious page holding a reference to an authenticated ownCloud window could forge owncloud-embed:select, owncloud-embed:file-pick or owncloud-embed:cancel messages and trigger authenticated file writes in the victim's space. Incoming messages are now validated against an allowlist consisting of the application's own origin and the optionally configured embed.messagesOrigin.

    owncloud/web#13844

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Add explicit size to space header image: #13822

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ownclouders/eslint-config since your current version.


Updates @ownclouders/extension-sdk from 12.3.2 to 12.5.0

Release notes

Sourced from @​ownclouders/extension-sdk's releases.

12.5.0

Changelog for ownCloud Web 12.5.0 (2026-07-01)

Summary

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Bugfix - Validate URL before opening password-protected folder: #13924
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894
  • Enhancement - Add an HTML editor app: #13895
  • Enhancement - Save a copy of office documents to another format (Collabora): #13906

Details

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Fix danger filled button text color on focus: #13887

    We've fixed the OcButton danger filled variant not applying the correct text color when focused via keyboard.

    owncloud/web#13887

  • Bugfix - Open external apps based on the file mime type: #13888

    We've fixed the external app redirect (/external) picking an arbitrary app when no app query parameter was present. It fell back to the first registered app provider, which might not support the file's mime type, so the following request to open the file failed with an "app not found" error that surfaced as a generic error to the user.

    The redirect now resolves the app from the file's mime type, preferring the configured default application, and shows an explicit error when no suitable app is available instead of silently redirecting to the wrong one.

    owncloud/web#13888

  • Bugfix - Validate URL before opening password-protected folder: #13924

... (truncated)

Changelog

Sourced from @​ownclouders/extension-sdk's changelog.

Changelog for ownCloud Web unreleased (UNRELEASED)

The following sections list the changes in ownCloud web unreleased relevant to ownCloud admins and users.

Summary

  • Security - Validate postMessage origin in embed mode modals: #13844
  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Add explicit size to space header image: #13822
  • Bugfix - Apply vault theme after OIDC callback: #13826
  • Bugfix - Gate MFA expiry dialog on vault capability: #13827
  • Bugfix - Logo not rendering in Firefox: #13834
  • Bugfix - Fix theme switching issues: #13843
  • Bugfix - Pass vault parameter to capabilities endpoint: #13867
  • Bugfix - Filter notifications by vault mode: #13877
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894

Details

  • Security - Validate postMessage origin in embed mode modals: #13844

    We've fixed a cross-site request forgery (CSRF) vulnerability where the embed mode modals (Save As, Export As PDF and the file picker) processed incoming postMessage events without verifying the sender's origin. A malicious page holding a reference to an authenticated ownCloud window could forge owncloud-embed:select, owncloud-embed:file-pick or owncloud-embed:cancel messages and trigger authenticated file writes in the victim's space. Incoming messages are now validated against an allowlist consisting of the application's own origin and the optionally configured embed.messagesOrigin.

    owncloud/web#13844

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Add explicit size to space header image: #13822

... (truncated)

Commits
  • b16a34f [full-ci] chore: prepare final release from web repo (#13930)
  • be0f6ac Chore/sync master branch with stable 12.4 (#13814)
  • 0215824 chore: sync 12.3 branch changelog and version (#13729)
  • 02ec681 fix(deps): update dependency @​vitejs/plugin-vue to ^6.0.6 (#13700)
  • 06dab4f fix(deps): update dependency @​vitejs/plugin-vue to ^6.0.5
  • 6e4fcf5 Revert "Merge pull request #13521 from owncloud/chore/revert-changes-to-master"
  • 69b4edc Revert "Merge pull request #13519 from owncloud/stable-12.3"
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ownclouders/extension-sdk since your current version.


Updates happy-dom from 20.10.6 to 20.11.0

Release notes

Sourced from happy-dom's releases.

v20.11.0

🎨 Features

Commits

Updates prettier from 3.8.3 to 3.9.6

Release notes

Sourced from prettier's releases.

3.9.6

What's Changed

🔗 Changelog

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.6

diff

TypeScript: Preserve quotes for methods named new (#19621 by @​kovsu)

// Input
interface Container {
  "new"(id: string): number;
}
// Prettier 3.9.5
interface Container {
new(id: string): number;
}
// Prettier 3.9.6
interface Container {
"new"(id: string): number;
}

TypeScript: Support import defer (#19624, #19675 by @​fisker)

// Input
import defer * as foo from "foo";
// Prettier 3.9.5
import * as foo from "foo";
// Prettier 3.9.6
import defer * as foo from "foo";

JavaScript: Added a new official plugin @prettier/plugin-yuku (#19628, #19629 by @​fisker)

@prettier/plugin-yuku is powered by Yuku (A high-performance JavaScript/TypeScript compiler toolchain written in Zig).

This plugin includes two new parsers: yuku (JavaScript syntax) and yuku-ts (TypeScript syntax).

To use this plugin:

  1. Install the plugin:

    yarn add --dev prettier @prettier/plugin-yuku

... (truncated)

Commits

Updates vitest from 4.1.7 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • See full diff in compare view

Updates vue-tsc from 3.3.2 to 3.3.7

Release notes

Sourced from vue-tsc's releases.

v3.3.7

language-core

  • fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

  • fix: filter const globals from template completions

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.7 (2026-07-08)

language-core

  • fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

  • fix: filter const globals from template completions

3.3.6 (2026-06-30)

language-core

  • fix: make generic component internal context inference type-safe across .d.ts boundary (#6104) - Thanks to @​Holiden!
  • fix: do not treat non-trivial property accesses as compound - Thanks to @​KazariEX!
  • fix: treat semicolon-terminated expressions as compound - Thanks to @​KazariEX!
  • fix: preserve return types for compound event handlers - Thanks to @​KazariEX!
  • fix: use WeakMap to cache inline TS ASTs - Thanks to @​KazariEX!
  • fix: match upstream CSS v-bind parsing behavior - Thanks to @​KazariEX!
  • fix: include setup bindings as potential component names (#6111) - Thanks to @​KazariEX!
  • perf: reduce boundary code feature allocations - Thanks to @​KazariEX!
  • refactor: centralize code features and deprecate allCodeFeatures - Thanks to @​KazariEX!

3.3.5 (2026-06-13)

language-core

  • fix: include event modifiers in duplicate listener checks (#6097) - Thanks to @​KazariEX!

3.3.4 (2026-06-08)

language-core

  • fix: only exclude already-set props from inherited attrs when checkRequiredFallthroughAttributes is enabled (#6088) - Thanks to @​KazariEX!
  • fix: camelize slot props regardless of htmlAttributes option (#6089) - Thanks to @​KazariEX!
  • fix: detect duplicate event listeners across name formats (#6094) - Thanks to @​whysopaul!

language-service

  • fix: respect var hoisting for destructured props hints (#6092) - Thanks to @​KazariEX!

typescript-plugin

  • fix: do not treat class and style as a boolean property (#6081) - Thanks to @​KazariEX!

3.3.3 (2026-05-30)

vscode

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 21, 2026
@LukasHirt LukasHirt mentioned this pull request Jul 21, 2026
Merged
3 tasks
@LukasHirt

LukasHirt commented Jul 21, 2026

Copy link
Copy Markdown
Collaborator

@dependabot rebase

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 8…
4c9be80 
… updates

Bumps the minor-and-patch group with 8 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [vue](https://github.com/vuejs/core) | `3.5.39` | `3.5.40` |
| [vue-router](https://github.com/vuejs/router) | `5.1.0` | `5.2.0` |
| [@ownclouders/eslint-config](https://github.com/owncloud/web/tree/HEAD/packages/eslint-config) | `12.3.2` | `12.5.0` |
| [@ownclouders/extension-sdk](https://github.com/owncloud/web/tree/HEAD/packages/extension-sdk) | `12.3.2` | `12.5.0` |
| [happy-dom](https://github.com/capricorn86/happy-dom) | `20.10.6` | `20.11.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.6` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.10` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.2` | `3.3.7` |



Updates `vue` from 3.5.39 to 3.5.40
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](vuejs/core@v3.5.39...v3.5.40)

Updates `vue-router` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/vuejs/router/releases)
- [Commits](vuejs/router@v5.1.0...v5.2.0)

Updates `@ownclouders/eslint-config` from 12.3.2 to 12.5.0
- [Release notes](https://github.com/owncloud/web/releases)
- [Changelog](https://github.com/owncloud/web/blob/master/CHANGELOG.md)
- [Commits](https://github.com/owncloud/web/commits/v12.5.0/packages/eslint-config)

Updates `@ownclouders/extension-sdk` from 12.3.2 to 12.5.0
- [Release notes](https://github.com/owncloud/web/releases)
- [Changelog](https://github.com/owncloud/web/blob/master/CHANGELOG.md)
- [Commits](https://github.com/owncloud/web/commits/v12.5.0/packages/extension-sdk)

Updates `happy-dom` from 20.10.6 to 20.11.0
- [Release notes](https://github.com/capricorn86/happy-dom/releases)
- [Commits](capricorn86/happy-dom@v20.10.6...v20.11.0)

Updates `prettier` from 3.8.3 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.6)

Updates `vitest` from 4.1.7 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `vue-tsc` from 3.3.2 to 3.3.7
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.7/packages/tsc)

---
updated-dependencies:
- dependency-name: "@ownclouders/eslint-config"
  dependency-version: 12.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ownclouders/extension-sdk"
  dependency-version: 12.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: happy-dom
  dependency-version: 20.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vue
  dependency-version: 3.5.40
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vue-router
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the minor-and-patch group in /frontend with 8 updates chore(deps): bump the minor-and-patch group across 1 directory with 8 updates Jul 21, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/frontend/minor-and-patch-95115be2a1 branch from 7b4a72a to 4c9be80 Compare July 21, 2026 14:30
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 14:30
@LukasHirt
LukasHirt merged commit b9cb879 into main Jul 21, 2026
5 checks passed
@LukasHirt
LukasHirt deleted the dependabot/npm_and_yarn/frontend/minor-and-patch-95115be2a1 branch July 21, 2026 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@LukasHirt LukasHirt LukasHirt approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@LukasHirt