Skip to content

chore(deps): track @conduction/nextcloud-vue ^2.3.0 - #285

Merged
rubenvdlinde merged 1 commit into
developmentfrom
chore/ncvue-2.3.0
Aug 15, 2026
Merged

chore(deps): track @conduction/nextcloud-vue ^2.3.0#285
rubenvdlinde merged 1 commit into
developmentfrom
chore/ncvue-2.3.0

Conversation

@rubenvdlinde

Copy link
Copy Markdown
Contributor

What

Moves @conduction/nextcloud-vue from the exact pin 2.2.0-vue3.16 to the range ^2.3.0, and drops the overrides."@conduction/nextcloud-vue".eslint entry.

Why

The Vue 3 line used to ship as a prerelease series (2.2.0-vue3.x) alongside a Vue 2 latest. That split is gone: the Vue 3 line has been folded into the mainline 2.x series and now ships as 2.3.0 on latest. All 40 vue3.x prereleases — including the 2.2.0-vue3.16 this app pinned — are deprecated, so npm install warns until the pin moves.

A caret range instead of an exact pin means future 2.x releases of the shared library reach the app without a per-repo edit.

The overrides entry existed for exactly one reason: the old prerelease declared eslint: "^8.56.0 || ^9.0.0" and so could not see this app's eslint 10, which broke peer resolution. 2.3.0 declares "^8.56.0 || ^9.0.0 || ^10.0.0" itself — visible in the lockfile diff — so the workaround is now dead weight.

Risk

Low, and measured rather than assumed:

  • No API change. 252 components before, 252 after; no export removed. The only public-surface addition is the BSN validator block.
  • Peer ranges identical apart from the eslint widening described above.
  • No dependency-tree change. The lockfile churn is version, resolved, integrity and the eslint peer string. Zero packages added or removed.

Internally the library did move — 2,542 changed lines across 36 files, touching CnDataTable, CnDetailPage, CnAppNav and CnDashboardGrid — which is why this was verified per app rather than swept.

Verification

Run locally against the real 2.3.0 tarball:

check result
resolved version 2.3.0 (confirmed in node_modules and the lockfile)
npm run build exit 0
npm run lint exit 0
npm test exit 0

The app pinned the exact prerelease 2.2.0-vue3.16, which is now deprecated:
the Vue 3 line was folded into the mainline 2.x release series and ships as
2.3.0 on the `latest` dist-tag. A caret range replaces the exact pin so
future 2.x releases roll out without a per-app edit.

Drops the `overrides.@conduction/nextcloud-vue.eslint` entry. That override
existed only because the old prerelease declared `eslint: ^8.56.0 || ^9.0.0`
and could not see the app's eslint 10; 2.3.0 declares `|| ^10.0.0` itself,
so the peer resolves without help.

No API change: 252 components in and 252 out, no export removed, one added
(the BSN validators). Peer ranges are otherwise identical.
@github-actions

Copy link
Copy Markdown
Contributor

Quality Report — ConductionNL/nldesign @ a369c14

Check PHP Vue Security License Tests
lint
phpcs
phpmd
psalm
phpstan
phpmetrics
eslint
stylelint
build
check-manifest
test-l10n
format
composer ✅ 104/104
npm ✅ 2/2
app:check-code ⏭️
info.xml
REUSE
PHPUnit
Newman
Playwright
Hydra gates

Quality workflow — 2026-08-15 17:42 UTC

Download the full PDF report from the workflow artifacts.

@rubenvdlinde
rubenvdlinde merged commit 17c5436 into development Aug 15, 2026
42 of 72 checks passed
@rubenvdlinde
rubenvdlinde deleted the chore/ncvue-2.3.0 branch August 15, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant