Skip to content

chore(deps-dev): Bump the minor-and-patch group in /frontend with 5 updates - #4

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-a0f97b8ed2
Closed

chore(deps-dev): Bump the minor-and-patch group in /frontend with 5 updates#4
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/frontend/minor-and-patch-a0f97b8ed2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /frontend with 5 updates:

Package From To
@ownclouders/eslint-config 12.3.2 12.5.0
@ownclouders/extension-sdk 12.3.2 12.5.0
prettier 3.8.3 3.9.5
vitest 4.1.7 4.1.10
vue-tsc 3.3.2 3.3.7

Updates @ownclouders/eslint-config from 12.3.2 to 12.5.0

Release notes

Sourced from @​ownclouders/eslint-config's releases.

12.5.0

Changelog for ownCloud Web 12.5.0 (2026-07-01)

Summary

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Bugfix - Validate URL before opening password-protected folder: #13924
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894
  • Enhancement - Add an HTML editor app: #13895
  • Enhancement - Save a copy of office documents to another format (Collabora): #13906

Details

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Fix danger filled button text color on focus: #13887

    We've fixed the OcButton danger filled variant not applying the correct text color when focused via keyboard.

    owncloud/web#13887

  • Bugfix - Open external apps based on the file mime type: #13888

    We've fixed the external app redirect (/external) picking an arbitrary app when no app query parameter was present. It fell back to the first registered app provider, which might not support the file's mime type, so the following request to open the file failed with an "app not found" error that surfaced as a generic error to the user.

    The redirect now resolves the app from the file's mime type, preferring the configured default application, and shows an explicit error when no suitable app is available instead of silently redirecting to the wrong one.

    owncloud/web#13888

  • Bugfix - Validate URL before opening password-protected folder: #13924

... (truncated)

Changelog

Sourced from @​ownclouders/eslint-config's changelog.

Changelog for ownCloud Web unreleased (UNRELEASED)

The following sections list the changes in ownCloud web unreleased relevant to ownCloud admins and users.

Summary

  • Security - Validate postMessage origin in embed mode modals: #13844
  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Add explicit size to space header image: #13822
  • Bugfix - Apply vault theme after OIDC callback: #13826
  • Bugfix - Gate MFA expiry dialog on vault capability: #13827
  • Bugfix - Logo not rendering in Firefox: #13834
  • Bugfix - Fix theme switching issues: #13843
  • Bugfix - Pass vault parameter to capabilities endpoint: #13867
  • Bugfix - Filter notifications by vault mode: #13877
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894

Details

  • Security - Validate postMessage origin in embed mode modals: #13844

    We've fixed a cross-site request forgery (CSRF) vulnerability where the embed mode modals (Save As, Export As PDF and the file picker) processed incoming postMessage events without verifying the sender's origin. A malicious page holding a reference to an authenticated ownCloud window could forge owncloud-embed:select, owncloud-embed:file-pick or owncloud-embed:cancel messages and trigger authenticated file writes in the victim's space. Incoming messages are now validated against an allowlist consisting of the application's own origin and the optionally configured embed.messagesOrigin.

    owncloud/web#13844

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Add explicit size to space header image: #13822

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ownclouders/eslint-config since your current version.


Updates @ownclouders/extension-sdk from 12.3.2 to 12.5.0

Release notes

Sourced from @​ownclouders/extension-sdk's releases.

12.5.0

Changelog for ownCloud Web 12.5.0 (2026-07-01)

Summary

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Bugfix - Validate URL before opening password-protected folder: #13924
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894
  • Enhancement - Add an HTML editor app: #13895
  • Enhancement - Save a copy of office documents to another format (Collabora): #13906

Details

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Fix danger filled button text color on focus: #13887

    We've fixed the OcButton danger filled variant not applying the correct text color when focused via keyboard.

    owncloud/web#13887

  • Bugfix - Open external apps based on the file mime type: #13888

    We've fixed the external app redirect (/external) picking an arbitrary app when no app query parameter was present. It fell back to the first registered app provider, which might not support the file's mime type, so the following request to open the file failed with an "app not found" error that surfaced as a generic error to the user.

    The redirect now resolves the app from the file's mime type, preferring the configured default application, and shows an explicit error when no suitable app is available instead of silently redirecting to the wrong one.

    owncloud/web#13888

  • Bugfix - Validate URL before opening password-protected folder: #13924

... (truncated)

Changelog

Sourced from @​ownclouders/extension-sdk's changelog.

Changelog for ownCloud Web unreleased (UNRELEASED)

The following sections list the changes in ownCloud web unreleased relevant to ownCloud admins and users.

Summary

  • Security - Validate postMessage origin in embed mode modals: #13844
  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797
  • Bugfix - Add explicit size to space header image: #13822
  • Bugfix - Apply vault theme after OIDC callback: #13826
  • Bugfix - Gate MFA expiry dialog on vault capability: #13827
  • Bugfix - Logo not rendering in Firefox: #13834
  • Bugfix - Fix theme switching issues: #13843
  • Bugfix - Pass vault parameter to capabilities endpoint: #13867
  • Bugfix - Filter notifications by vault mode: #13877
  • Bugfix - Fix danger filled button text color on focus: #13887
  • Bugfix - Open external apps based on the file mime type: #13888
  • Enhancement - OwnCloud branded login background: #13875
  • Enhancement - Add a documentation screenshot capture tool: #13894

Details

  • Security - Validate postMessage origin in embed mode modals: #13844

    We've fixed a cross-site request forgery (CSRF) vulnerability where the embed mode modals (Save As, Export As PDF and the file picker) processed incoming postMessage events without verifying the sender's origin. A malicious page holding a reference to an authenticated ownCloud window could forge owncloud-embed:select, owncloud-embed:file-pick or owncloud-embed:cancel messages and trigger authenticated file writes in the victim's space. Incoming messages are now validated against an allowlist consisting of the application's own origin and the optionally configured embed.messagesOrigin.

    owncloud/web#13844

  • Bugfix - Add open button to PDF viewer on iOS/iPadOS: #13797

    On iOS/iPadOS, we now display a button to open the PDF file in the browser instead of the native PDF viewer. This is a workaround to avoid issues with the native PDF viewer on iOS/iPadOS.

    owncloud/web#13797 owncloud/web#13816

  • Bugfix - Add explicit size to space header image: #13822

... (truncated)

Commits
  • b16a34f [full-ci] chore: prepare final release from web repo (#13930)
  • be0f6ac Chore/sync master branch with stable 12.4 (#13814)
  • 0215824 chore: sync 12.3 branch changelog and version (#13729)
  • 02ec681 fix(deps): update dependency @​vitejs/plugin-vue to ^6.0.6 (#13700)
  • 06dab4f fix(deps): update dependency @​vitejs/plugin-vue to ^6.0.5
  • 6e4fcf5 Revert "Merge pull request #13521 from owncloud/chore/revert-changes-to-master"
  • 69b4edc Revert "Merge pull request #13519 from owncloud/stable-12.3"
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​ownclouders/extension-sdk since your current version.


Updates prettier from 3.8.3 to 3.9.5

Release notes

Sourced from prettier's releases.

3.9.5

🔗 Changelog

3.9.4

  • Angular: Format @content(name) -> @content (name) to align with other block syntax (#19499 by @​fisker)

🔗 Changelog

3.9.3

🔗 Changelog

3.9.1

🔗 Changelog

3.9.0

diff

🔗 Prettier 3.9: Major parser upgrades and Formatting improvements

3.8.5

🔗 Changelog

3.8.4

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.9.5

diff

Markdown: Cap ordered list mark at 999,999,999 (#19351 by @​tats-u)

CommonMark parsers only support ordered list item numbers up to 999,999,999.

With this change, Prettier now caps the ordered list item number at 999,999,999 to ensure that the output is correctly parsed as an ordered list by CommonMark parsers. Numbers larger than 999,999,999 are not parsed as list item numbers and are left unchanged in the output:

<!-- Input -->
999999998. text
999999998. text
999999998. text
999999998. text
1234567890123456789012) text
<!-- Prettier 3.9.4 -->
999999998. text
999999999. text
1000000000. text
1000000001. text
1234567890123456789012) text
<!-- Prettier 3.9.5 -->
999999998. text
999999999. text
999999999. text
999999999. text
1234567890123456789012) text

Markdown: Avoid corrupting empty link with title (#19487 by @​andersk)

Do not remove <> from an inline link or image with an empty URL and a title, as this removal would change its interpretation.

<!-- Input -->
[link](https://github.com/prettier/prettier/blob/main/<> "title")
<!-- Prettier 3.9.4 -->
[link](https://github.com/prettier/prettier/blob/main/ "title")
<!-- Prettier 3.9.5 -->
</tr></table>

... (truncated)

Commits

Updates vitest from 4.1.7 to 4.1.10

Release notes

Sourced from vitest's releases.

v4.1.10

   🐞 Bug Fixes

    View changes on GitHub

v4.1.9

🐞 Bug Fixes

View changes on GitHub

v4.1.8

   🐞 Bug Fixes

    View changes on GitHub
Commits
  • db616d2 chore: release v4.1.10 (#10718)
  • bae52b5 fix(vm): fix external module resolve error with deps optimizer query for enco...
  • a7a61e7 chore: release v4.1.9 (#10598)
  • 934b0f5 fix(pool): prevent test run hang on worker crash (#10543) [backport to v4] (#...
  • 7fb2965 fix(browser): wait for orchestrator readiness before resolving browser sessio...
  • a518019 fix: fix importOriginal with optimizer and query import [backport to v4] (#...
  • e61f2dd chore: release v4.1.8
  • e4067b3 fix(browser): disable client cdp API when allowWrite/allowExec: false [ba...
  • See full diff in compare view

Updates vue-tsc from 3.3.2 to 3.3.7

Release notes

Sourced from vue-tsc's releases.

v3.3.7

language-core

  • fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

  • fix: filter const globals from template completions

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.7 (2026-07-08)

language-core

  • fix: wrap single expression event handlers to avoid ASI after return (#6115) - Thanks to @​KazariEX!

typescript-plugin

  • fix: filter const globals from template completions

3.3.6 (2026-06-30)

language-core

  • fix: make generic component internal context inference type-safe across .d.ts boundary (#6104) - Thanks to @​Holiden!
  • fix: do not treat non-trivial property accesses as compound - Thanks to @​KazariEX!
  • fix: treat semicolon-terminated expressions as compound - Thanks to @​KazariEX!
  • fix: preserve return types for compound event handlers - Thanks to @​KazariEX!
  • fix: use WeakMap to cache inline TS ASTs - Thanks to @​KazariEX!
  • fix: match upstream CSS v-bind parsing behavior - Thanks to @​KazariEX!
  • fix: include setup bindings as potential component names (#6111) - Thanks to @​KazariEX!
  • perf: reduce boundary code feature allocations - Thanks to @​KazariEX!
  • refactor: centralize code features and deprecate allCodeFeatures - Thanks to @​KazariEX!

3.3.5 (2026-06-13)

language-core

  • fix: include event modifiers in duplicate listener checks (#6097) - Thanks to @​KazariEX!

3.3.4 (2026-06-08)

language-core

  • fix: only exclude already-set props from inherited attrs when checkRequiredFallthroughAttributes is enabled (#6088) - Thanks to @​KazariEX!
  • fix: camelize slot props regardless of htmlAttributes option (#6089) - Thanks to @​KazariEX!
  • fix: detect duplicate event listeners across name formats (#6094) - Thanks to @​whysopaul!

language-service

  • fix: respect var hoisting for destructured props hints (#6092) - Thanks to @​KazariEX!

typescript-plugin

  • fix: do not treat class and style as a boolean property (#6081) - Thanks to @​KazariEX!

3.3.3 (2026-05-30)

vscode

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): Bump the minor-and-patch group
c1c19f7 
Bumps the minor-and-patch group in /frontend with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [@ownclouders/eslint-config](https://github.com/owncloud/web/tree/HEAD/packages/eslint-config) | `12.3.2` | `12.5.0` |
| [@ownclouders/extension-sdk](https://github.com/owncloud/web/tree/HEAD/packages/extension-sdk) | `12.3.2` | `12.5.0` |
| [prettier](https://github.com/prettier/prettier) | `3.8.3` | `3.9.5` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.7` | `4.1.10` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.2` | `3.3.7` |


Updates `@ownclouders/eslint-config` from 12.3.2 to 12.5.0
- [Release notes](https://github.com/owncloud/web/releases)
- [Changelog](https://github.com/owncloud/web/blob/master/CHANGELOG.md)
- [Commits](https://github.com/owncloud/web/commits/v12.5.0/packages/eslint-config)

Updates `@ownclouders/extension-sdk` from 12.3.2 to 12.5.0
- [Release notes](https://github.com/owncloud/web/releases)
- [Changelog](https://github.com/owncloud/web/blob/master/CHANGELOG.md)
- [Commits](https://github.com/owncloud/web/commits/v12.5.0/packages/extension-sdk)

Updates `prettier` from 3.8.3 to 3.9.5
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.8.3...3.9.5)

Updates `vitest` from 4.1.7 to 4.1.10
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.10/packages/vitest)

Updates `vue-tsc` from 3.3.2 to 3.3.7
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.7/packages/tsc)

---
updated-dependencies:
- dependency-name: "@ownclouders/eslint-config"
  dependency-version: 12.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: "@ownclouders/extension-sdk"
  dependency-version: 12.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: prettier
  dependency-version: 3.9.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: vitest
  dependency-version: 4.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: vue-tsc
  dependency-version: 3.3.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 14, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 19, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 19, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/frontend/minor-and-patch-a0f97b8ed2 branch July 19, 2026 22:06
@dj4oC dj4oC mentioned this pull request Jul 28, 2026
Open
4 tasks
@LukasHirt LukasHirt mentioned this pull request Jul 29, 2026
Open
10 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants