chore(deps): move to @conduction/nextcloud-vue 2.2.0-vue3.1

[rubenvdlinde]

Moves off the withdrawn 3.0.0-vue3.* line onto the resumed 2.x prerelease line.

The 3.0 major was cut from a genuine BREAKING CHANGE: footer (the retired action-list flow editors), but it applied to a prerelease channel only our own apps consume, so the line is resumed at 2.x rather than carried forward. The six 3.0.0-vue3.* versions are being withdrawn from npm once every app is off them.

Despite the lower version number this is not a downgrade in content. 2.2.0-vue3.1 is a superset of 3.0.0-vue3.6: it additionally carries the recovered Vue 2 -> Vue 3 component conversion (196 specs, 137 components, 51 missing emits) and the CnGraphCanvas port/loop work.

Verification

Two traps had to be stepped around, so the evidence is stated precisely:

• Lockfile regenerated with npm 10.8.2, matching CI's node 20 toolchain. Local npm 11 prunes optional entries that do not apply to the current platform, which makes CI's npm ci fail with Missing: pinia@4.0.2 / vite@8.2.0 ... from lock file. Running npm ci locally does not reproduce it — npm 11 accepts the lockfile it just wrote. Verified with npx npm@10.8.2 ci --dry-run (exit 0).
• Build run as USE_LOCAL_LIB=false npm run build (exit 0, no unresolved modules). That flag is load-bearing: this repo's webpack.config.js aliases @conduction/nextcloud-vue to a sibling ../nextcloud-vue/src checkout whenever one exists, so a plain build can silently compile the sibling's source instead of the package under test.

[github-actions]

Quality Report — ConductionNL/procest @ 840292d

Check	PHP	Vue	Security	License	Tests
lint	✅
phpcs	✅
phpmd	✅
psalm	✅
phpstan	✅
phpmetrics	✅
eslint		✅
stylelint		✅
build		✅
check-manifest		✅
check-vue3-compile		✅
test-l10n		✅
composer			✅	✅ 100/100
npm			✅	✅ 550/550
PHPUnit					✅
Newman					⏭️
Playwright					✅

---

Quality workflow — 2026-08-05 12:03 UTC

Download the full PDF report from the workflow artifacts.