Skip to content

build(deps): Bump vue and @nextcloud/vue - #152

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7482eae201
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-7482eae201

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 25, 2026

Copy link
Copy Markdown
Contributor

Bumps vue and @nextcloud/vue. These dependencies needed to be updated together.
Updates vue from 2.7.16 to 3.5.44

Release notes

Sourced from vue's releases.

v3.5.44

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.43

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.42

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.41

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.40

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.39

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.38

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.37

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.35

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.34

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.33

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.32

For stable releases, please refer to CHANGELOG.md for details. For pre-releases, please refer to CHANGELOG.md of the minor branch.

v3.5.31

For stable releases, please refer to CHANGELOG.md for details.

... (truncated)

Changelog

Sourced from vue's changelog.

3.5.44 (2026-10-13)

Bug Fixes

  • compat: expose _setupProxy for Vue 2.7 compiled script setup (fix #11164) (#15618) (f08059d)
  • compiler-core: parenthesise v-for key in v-memo cache guard (#15724) (d084b90), closes #15723
  • compiler-dom: correctly stringify 0 and false in v-html (#15571) (9f3b437)
  • compiler-dom: inject transition persisted for v-show in production (#15783) (89cb272)
  • compiler-sfc: error when defineModel prop options reference a destructured prop (#15604) (38012a5), closes #15602
  • custom-element: skip mounting an async custom element removed while its component loads (#15777) (0f8e7b4), closes #15775
  • hydration: observe children of a display: contents root in hydrateOnVisible (#15773) (7f688e8)
  • KeepAlive: unmount pruned current component when its vnode was cloned on mount (#15711) (92798ac), closes #15710
  • reactivity: avoid mutating native array iterators (#15703) (7f9d45d), closes #15643
  • reactivity: do not track deps in watcher callbacks run inside another effect (#15782) (db00fe9), closes #5009
  • reactivity: once watcher should stop when its callback throws (#15755) (ae4bd94)
  • reactivity: preserve shallow collection semantics (#15793) (b600466), closes #15792
  • runtime-core: detect new prop keys when comparing full props (#15634) (702fa61), closes #15632
  • runtime-core: keep async placeholder for block patching and pending component updates (#15554) (05ec25f), closes #15551
  • runtime-core: only flush jobs queued by the root render itself (#15757) (0bea14b), closes #6728
  • runtime-core: render nothing for an invalid v-for range in production (#15742) (ad19e7d)
  • runtime-dom: preserve v-show display for unchanged style strings (#15794) (c0a6d3f)
  • runtime-dom: treat playsinline as a boolean attribute (#15627) (a084e44)
  • server-renderer: propagate async setup errors (#15857) (6930374), closes #15716
  • ssr: honor falsy vnode content overrides (#15769) (c11c5c8)
  • suspense: mount resolved async component with its own namespace (#15640) (2a086a2), closes #15639
  • suspense: skip rendering async components unmounted while pending (4ab865a)
  • teleport: move targetStart and keep children before targetAnchor (#15818) (d3c6e02), closes #15817
  • transition-group: measure nested groups against their moving outer item (#15848) (1936c87), closes #5385 #1531
  • transition: handle comment-wrapped component roots (#15853) (ff35014), closes #6080 #5500

3.5.43 (2026-09-17)

Bug Fixes

  • compiler-sfc: ignore comment delimiters inside strings and url() when parsing css vars (#15548) (2fde323)
  • compiler-sfc: prepend semicolon for await in switch case (#15498) (9a1df69), closes #15495
  • compiler-sfc: restore await scope when leaving nested blocks (5409708), closes #15465
  • compiler-sfc: reuse parsed parent configs across tsconfig walks (fix #15478) (#15480) (d6febaa)
  • hydration: run leave hooks for hydration placeholders (#15431) (5dda192)
  • reactivity: preserve readonly wrappers in array copy methods (#15469) (599f35b)
  • runtime-core: unmount v-once children after parent rerenders (#15435) (d720338)
  • shared: handle circular references in looseEqual (#15499) (718f782), closes #15496
  • shared: preserve comment-like text in style values (#15471) (b9456cb)
  • suspense: don't drop nested suspense patches during hydration (#15429) (76d42dc)
  • suspense: keep the boundary pending while its branch is patched (#15411) (bfcfe9e), closes #7506
  • suspense: patch a hydrating boundary's pending branch in place (#15432) (2cde6f7)
  • suspense: unmount the DOM an interrupted async component claimed (#15430) (fb9b45c)
  • types: keep optional props when a runtime prop uses a generic PropType (#15523) (243aabc), closes #9546

3.5.42 (2026-08-27)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vue since your current version.


Updates @nextcloud/vue from 8.42.0 to 9.14.0

Release notes

Sourced from @​nextcloud/vue's releases.

v9.14.0

v9.14.0 (2026-10-22)

Full Changelog

🚀 Enhancements

  • feat(NcModal): start the name of a full size modal at the leading edge #9026 (skjnldsv)
  • feat(NcDateTimePickerNative): add 'clearable' prop #9038 (Antreesy)
  • feat(useHotKey): add allowInInput option to allow hotkey while focus is on an input field #9014 (SebastianKrupinski)

🐛 Fixed bugs

  • fix(linkify): skip linkifying strings over 10000 characters #9013 (skjnldsv)
  • fix(NcDateTimePickerNative): prevent changing on invalid input #9012 (kristian-zendato)
  • fix(styleguide): scroll to section from the URL hash #9046 (Antreesy)
  • fix(NcPopover): properly set fallback focus #9045 (susnux)
  • fix(NcAppContent): app name in page title is [object Object] #9051 (pringelmann)
  • fix(NcModal): only set the header theme attribute that applies #9084 (skjnldsv)
  • fix(NcRichContenteditable): do not submit on Enter confirming IME #9093 (Antreesy)
  • fix(NcReferencePickerModal): don't cancel after a pick with initial provider #9095 (mejo-)
  • fix(NcAppSettingsDialog): move focus to section on navigation click #9101 (Antreesy)
  • fix(NcRichContenteditable): align composition event confirmation between browsers #9096 (Antreesy)
  • fix(NcSelect): fix two accessibility violations (axe) on the selected value and the spinner #9098 (odolbeau)

Other Changes

  • docs: add "supported" statement to the library #9006 (susnux)
  • Updated dependencies
  • Updated translations

New Contributors

v9.13.1

Full Changelog

🐛 Fixed bugs

  • fix(NcPopover): afterShow and afterHide events are not fired with floating-vue >= 5.3.0 #8994 (rotdrop)
  • fix(NcModal): center the slideshow progress ring #8990 (skjnldsv)
  • fix(NcSelect): new style variables are lost when appendToBody breaking z-index #8996 (ShGKme)
  • fix(NcDateTimePicker): warn about usage of non-standard formatting tokens #8934 (odzhychko)
  • fix(NcReferenceWidget): show description even on smaller embeds #8545 (tyzbit)

Other changes

  • Updated translations

v9.13.0

v9.13.0 (2026-09-17)

Full Changelog

🚀 Enhancements

  • feat(NcModal): expose the slideshow state as a model #8955 (skjnldsv)

... (truncated)

Changelog

Sourced from @​nextcloud/vue's changelog.

v9.14.0 (2026-10-22)

Full Changelog

🚀 Enhancements

  • feat(NcModal): start the name of a full size modal at the leading edge #9026 (skjnldsv)
  • feat(NcDateTimePickerNative): add 'clearable' prop #9038 (Antreesy)
  • feat(useHotKey): add allowInInput option to allow hotkey while focus is on an input field #9014 (SebastianKrupinski)

🐛 Fixed bugs

  • fix(linkify): skip linkifying strings over 10000 characters #9013 (skjnldsv)
  • fix(NcDateTimePickerNative): prevent changing on invalid input #9012 (kristian-zendato)
  • fix(styleguide): scroll to section from the URL hash #9046 (Antreesy)
  • fix(NcPopover): properly set fallback focus #9045 (susnux)
  • fix(NcAppContent): app name in page title is [object Object] #9051 (pringelmann)
  • fix(NcModal): only set the header theme attribute that applies #9084 (skjnldsv)
  • fix(NcRichContenteditable): do not submit on Enter confirming IME #9093 (Antreesy)
  • fix(NcReferencePickerModal): don't cancel after a pick with initial provider #9095 (mejo-)
  • fix(NcAppSettingsDialog): move focus to section on navigation click #9101 (Antreesy)
  • fix(NcRichContenteditable): align composition event confirmation between browsers #9096 (Antreesy)
  • fix(NcSelect): fix two accessibility violations (axe) on the selected value and the spinner #9098 (odolbeau)

Other Changes

  • docs: add "supported" statement to the library #9006 (susnux)
  • Updated dependencies
  • Updated translations

New Contributors

v9.13.1 (2026-09-24)

Full Changelog

🐛 Fixed bugs

  • fix(NcPopover): afterShow and afterHide events are not fired with floating-vue >= 5.3.0 #8994 (rotdrop)
  • fix(NcModal): center the slideshow progress ring #8990 (skjnldsv)
  • fix(NcSelect): new style variables are lost when appendToBody breaking z-index #8996 (ShGKme)
  • fix(NcDateTimePicker): warn about usage of non-standard formatting tokens #8934 (odzhychko)
  • fix(NcReferenceWidget): show description even on smaller embeds #8545 (tyzbit)

Other changes

  • Updated translations

v9.13.0 (2026-09-17)

Full Changelog

🚀 Enhancements

  • feat(NcModal): expose the slideshow state as a model #8955 (skjnldsv)
  • feat(NcAvatar): add a version prop for longer avatar caching #8959 (pringelmann)

... (truncated)

Commits
  • a190372 Merge pull request #9113 from nextcloud-libraries/chore/release-9.14.0
  • 33708ef chore(release): v9.14.0
  • b332e9d Merge pull request #9098 from odolbeau/fix/a11y-select-loading-icon-and-dimme...
  • 7d0fe9a Merge pull request #9006 from nextcloud-libraries/doc/supported
  • 5b786fa Merge pull request #9110 from nextcloud-libraries/dependabot/github_actions/a...
  • 2afb916 chore(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2
  • c8e4bbb Merge pull request #9096 from nextcloud-libraries/fix/noid/richcontenteditabl...
  • 09ac9c3 Merge pull request #9101 from nextcloud-libraries/fix/2027/appsettings-a11y
  • af924a4 Merge pull request #9083 from nextcloud-libraries/feat/workflow-auto-update-a...
  • c299c12 ci(playwright): keep the Playwright image in the workflow patch
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [vue](https://github.com/vuejs/core) and [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue). These dependencies needed to be updated together.

Updates `vue` from 2.7.16 to 3.5.44
- [Release notes](https://github.com/vuejs/core/releases)
- [Changelog](https://github.com/vuejs/core/blob/main/CHANGELOG.md)
- [Commits](https://github.com/vuejs/core/commits/v3.5.44)

Updates `@nextcloud/vue` from 8.42.0 to 9.14.0
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/nextcloud-vue@v8.42.0...v9.14.0)

---
updated-dependencies:
- dependency-name: vue
  dependency-version: 3.5.44
  dependency-type: direct:production
- dependency-name: "@nextcloud/vue"
  dependency-version: 9.14.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested review from hamza221 and kesselb as code owners October 25, 2026 01:33
@dependabot dependabot Bot added 3. to review Waiting for reviews dependencies Pull requests that update a dependency file labels Oct 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

3. to review Waiting for reviews dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants