-
Notifications
You must be signed in to change notification settings - Fork 5
build(deps): bump the all-minors group across 1 directory with 2 updates - #2248
build(deps): bump the all-minors group across 1 directory with 2 updates #2248dependabot[bot] wants to merge 1 commit into
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, routine dependency bump.
What was reviewed: confirmed package.json changes are limited to @ nextcloud/dialogs (^7.4.0 → ^7.5.0) and @ types/node (^26.1.1 → ^26.3.0), verified package-lock.json reflects matching resolved versions, and confirmed no application source/config files were touched.
Extended reasoning...
Overview
This PR (opened by dependabot) touches only nextcloud-app/package.json and nextcloud-app/package-lock.json. It bumps @ nextcloud/dialogs from ^7.4.0 to ^7.5.0 and the devDependency @ types/node from ^26.1.1 to ^26.3.0, with the lockfile updated accordingly (including transitive dependency shifts like the drop of toastify-js/@ types/toastify-js in favor of the accessible toast rework upstream). I verified the package.json diff directly and it matches exactly what's described — no other lines changed.
Security risks
None identified. This is a minor version bump of a well-known Nextcloud UI library and a TypeScript type definitions package (dev-only, no runtime impact). No application logic, auth, permissions, or config files in the main iHub Apps server/client are affected.
Level of scrutiny
Low. This is a mechanical, auto-generated dependency bump PR from Dependabot, scoped to a single subproject (nextcloud-app) that is a companion app outside the core server/client architecture the root CLAUDE.md governs. The change is self-contained, matches the PR description, and involves no design decisions.
Other factors
No CLAUDE.md-mandated changelog entry is needed per the project's own rule that pure dependency bumps are excluded. No lint/format concerns apply since no application source was modified. The bug hunter run found no issues, consistent with the trivial nature of this change.
Bumps the all-minors group with 2 updates in the /nextcloud-app directory: [@nextcloud/dialogs](https://github.com/nextcloud-libraries/nextcloud-dialogs) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `@nextcloud/dialogs` from 7.4.1 to 7.5.0 - [Release notes](https://github.com/nextcloud-libraries/nextcloud-dialogs/releases) - [Changelog](https://github.com/nextcloud-libraries/nextcloud-dialogs/blob/main/CHANGELOG.md) - [Commits](nextcloud-libraries/nextcloud-dialogs@v7.4.1...v7.5.0) Updates `@types/node` from 26.2.0 to 26.4.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@nextcloud/dialogs" dependency-version: 7.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-minors - dependency-name: "@types/node" dependency-version: 26.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all-minors ... Signed-off-by: dependabot[bot] <support@github.com>
d20fb6e to
febcf38
Compare
Uh oh!
There was an error while loading. Please reload this page.
Bumps the all-minors group with 2 updates in the /nextcloud-app directory: @nextcloud/dialogs and @types/node.
Updates
@nextcloud/dialogsfrom 7.4.1 to 7.5.0Release notes
Sourced from @nextcloud/dialogs's releases.
Changelog
Sourced from @nextcloud/dialogs's changelog.
Commits
dec5ccfMerge pull request #2579 from nextcloud-libraries/chore/prepare-rel395a38fchore: add note about toasts6d2dd27chore: prepare v7.5.04030af4Merge pull request #2575 from nextcloud-libraries/dependabot/npm_and_yarn/mai...a07e474chore(deps-dev): bump the vitest group with 2 updates40d0492Merge pull request #2565 from nextcloud-libraries/automated/noid/main-fix-npm...20df0f0Merge pull request #2539 from nextcloud-libraries/feat/timeout-configurationf4e2981chore: adjust to comply with ESLintc8e9080feat: toast timeout configuration19882e5Merge pull request #2574 from nextcloud-libraries/translations_441be4f7621043...Updates
@types/nodefrom 26.2.0 to 26.4.1Commits