Skip to content

chore(deps): Bump @nextcloud/vue from 9.5.0 to 9.7.0 - #23

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nextcloud/vue-9.7.0
Closed

chore(deps): Bump @nextcloud/vue from 9.5.0 to 9.7.0#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/nextcloud/vue-9.7.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor

Bumps @nextcloud/vue from 9.5.0 to 9.7.0.

Release notes

Sourced from @​nextcloud/vue's releases.

v9.7.0

v9.7.0 (2026-04-24)

Full Changelog

📝 Notes

  • NcRichText component used with useMarkdown = true or useExtendedMarkdown = true no longer renders relative links that can not be resolved by Vue Router. They are might interfere with routing logic and considered not belonging to the application. Examples that are not rendered as a clickable link:
    • [unknown protocols](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/unknown:protocol)
    • [unresolved relative link](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/internal_route)
    • [relative parameters](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/?parameters=1)
    • [relative anchor](https://github.com/nextcloud-libraries/nextcloud-vue/blob/HEAD/#anchor)

🚀 Enhancements

  • feat(NcRichContenteditable): allow to pass menuContainer as string #8417 (Antreesy)

🐛 Fixed bugs

  • fix(NcCheckboxRadioSwitch): use reactive state for group checkbox toggle #8324 (pringelmann)
  • fix(NcRichText): do not escape markdown syntax when resolving reference #8351 (Antreesy)
  • fix(NcPasswordField): reset validation state on change #8350 (Antreesy)
  • fix(NcAppNavigation): close navigation on click outside for mobile dimensions #8284 (grnd-alt)
  • fix(NcAvatar): redirect to guest avatar if avatar does not exist #8440 (skjnldsv)
  • fix(NcModal): prevent focus trap race condition #8093 (nikhil2297)
  • fix(NcRichText): do not render nested links in markdown #8449 (Antreesy)
  • fix(NcRichText)!: do not render invalid relative markdown links #8397 (Antreesy)
  • fix(NcAppNavigationSearch): Show search clear icon only when field contains something #8454 (jancborchardt)

Other Changes

  • Updated translations

New Contributors

v9.6.0

v9.6.0 (2026-03-13)

🚀 Enhancements

  • feat(NcFilePicker): add picker component to select local files #7097 (susnux)
  • feat(emoji): extend 'emojiAddRecent' to allow pass emoji as an argument #8288 (Antreesy)

🐛 Fixed bugs

  • fix(NcTextArea): area resize does not resize component #8175
  • fix(NcButton): remove active effect from disabled buttons #8176 (Antreesy)
  • fix(NcInputField): use overflow-wrap: anywhere instead of word-break: break-all for the helper text #8225 (Sector6759)
  • fix(NcModal): properly handle modal name size #8263 (susnux)
  • fix(NcRichContenteditable): restore native undo/redo events #8286 (Antreesy)
  • fix(NcAppContent): list is not scrollable on mobile #8292
  • fix(NcRichText): ignore links resolving in Markdown #8154 (Antreesy)

Other Changes

  • Updated translations
  • fix: add missing initialization to keep the old behaviour #8291
Changelog

Sourced from @​nextcloud/vue's changelog.

v9.7.0 (2026-04-24)

Full Changelog

📝 Notes

  • NcRichText component used with useMarkdown = true or useExtendedMarkdown = true no longer renders relative links that can not be resolved by Vue Router. They are might interfere with routing logic and considered not belonging to the application. Examples that are not rendered as a clickable link:
    • [unknown protocols](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/unknown:protocol)
    • [unresolved relative link](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/internal_route)
    • [relative parameters](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/?parameters=1)
    • [relative anchor](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/#anchor)

🚀 Enhancements

  • feat(NcRichContenteditable): allow to pass menuContainer as string #8417 (Antreesy)

🐛 Fixed bugs

  • fix(NcCheckboxRadioSwitch): use reactive state for group checkbox toggle #8324 (pringelmann)
  • fix(NcRichText): do not escape markdown syntax when resolving reference #8351 (Antreesy)
  • fix(NcPasswordField): reset validation state on change #8350 (Antreesy)
  • fix(NcAppNavigation): close navigation on click outside for mobile dimensions #8284 (grnd-alt)
  • fix(NcAvatar): redirect to guest avatar if avatar does not exist #8440 (skjnldsv)
  • fix(NcModal): prevent focus trap race condition #8093 (nikhil2297)
  • fix(NcRichText): do not render nested links in markdown #8449 (Antreesy)
  • fix(NcRichText)!: do not render invalid relative markdown links #8397 (Antreesy)
  • fix(NcAppNavigationSearch): Show search clear icon only when field contains something #8454 (jancborchardt)

Other Changes

  • Updated translations

New Contributors

v9.6.0 (2026-03-13)

Full Changelog

🚀 Enhancements

  • feat(NcFilePicker): add picker component to select local files #7097 (susnux)
  • feat(emoji): extend 'emojiAddRecent' to allow pass emoji as an argument #8288 (Antreesy)

🐛 Fixed bugs

  • fix(NcTextArea): area resize does not resize component #8175
  • fix(NcButton): remove active effect from disabled buttons #8176 (Antreesy)
  • fix(NcInputField): use overflow-wrap: anywhere instead of word-break: break-all for the helper text #8225 (Sector6759)
  • fix(NcModal): properly handle modal name size #8263 (susnux)
  • fix(NcRichContenteditable): restore native undo/redo events #8286 (Antreesy)
  • fix(NcAppContent): list is not scrollable on mobile #8292
  • fix(NcRichText): ignore links resolving in Markdown #8154 (Antreesy)

Other Changes

  • Updated translations
  • fix: add missing initialization to keep the old behaviour #8291
Commits
  • 034beb5 Merge pull request #8470 from nextcloud-libraries/release/v9.7.0
  • 1b75828 chore: prepare release v9.7.0
  • 591e966 Merge pull request #8454 from nextcloud-libraries/fix/search-clear-icon
  • ea71fe9 Merge pull request #8475 from nextcloud-libraries/dependabot/npm_and_yarn/p-q...
  • 4153189 chore(deps): bump p-queue from 9.1.2 to 9.2.0
  • 883b975 Merge pull request #8476 from nextcloud-libraries/dependabot/npm_and_yarn/jsd...
  • f120df4 Merge pull request #8474 from nextcloud-libraries/dependabot/npm_and_yarn/foc...
  • 1d01ee6 chore(deps-dev): bump jsdom from 29.0.2 to 29.1.0
  • ca7c0bc chore(deps): bump focus-trap from 8.0.1 to 8.1.0
  • e2dc416 Merge pull request #8472 from nextcloud-libraries/translations_a29bf79827304d...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@nextcloud/vue](https://github.com/nextcloud-libraries/nextcloud-vue) from 9.5.0 to 9.7.0.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-vue/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-vue/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/nextcloud-vue@v9.5.0...v9.7.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/vue"
  dependency-version: 9.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 2, 2026
@rubenvdlinde

Copy link
Copy Markdown
Contributor

Closing during repository cleanup. Main has just been brought up to date through #25, #28, #29#30 (dev→beta) → #31 (beta→main), commit 9d47273. If anything in this PR is still relevant, please reopen against the new main.

@rubenvdlinde
rubenvdlinde deleted the dependabot/npm_and_yarn/nextcloud/vue-9.7.0 branch May 2, 2026 15:06
@dependabot @github

dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

MWest2020 pushed a commit that referenced this pull request Jul 16, 2026
…he fallback

Ordering-only change to signal to admins that Codeberg is the current
canonical Conduction release channel (post ConductionNL → Codeberg
org migration). No source kind was removed and no trust pattern was
dropped, so existing bindings and custom allowlists keep working.

Changes:

- **SourceRegistry::listAvailable()** — picker order is now App Store
  → Gitea → GitHub. The Gitea entry's label is updated to "Codeberg /
  Gitea / Forgejo Releases (recommended)"; GitHub's label is
  simplified to "GitHub Releases" (was "GitHub Releases (public)" —
  the "(public)" qualifier confusingly implied private wasn't
  supported, which was never the case).

- **TrustedSourceList::DEFAULT_PATTERNS** — reordered so
  codeberg.org/Conduction/* is first and ConductionNL/* second.
  Ordering is cosmetic for fnmatch (all patterns are still evaluated)
  but signals intent in `occ config:app:get app_versions
  trusted_sources` output and in the tutorial.

- **README.md** — Supported-sources table reordered to match:
  App Store → gitea-release (recommended) → github-release.

- **docs/tutorials/admin/02-bind-alternate-source.md** — three tables
  reordered (source-kinds overview, bind fields, default trust
  patterns) with a short paragraph explaining why: "For Conduction
  apps, gitea-release pointed at codeberg.org/Conduction/<app> is the
  recommended default — that's the source of truth after the
  ConductionNL GitHub → Codeberg migration. github-release is
  retained for apps that still publish releases to GitHub."

- **CHANGELOG.md** — new `Changed` entry under `[Unreleased]`.

Tests: 121/283 unchanged (order isn't asserted anywhere).

Stacked on top of PR #23 (docs) — the docs tables live in that branch,
this PR reorders them; if #23 merges first, this rebases cleanly onto
main, if this merges first #23 auto-updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
MWest2020 pushed a commit that referenced this pull request Jul 16, 2026
MWest2020 pushed a commit that referenced this pull request Jul 16, 2026
Adds an admin-only UI affordance to switch an installed app's release
source between App Store, Codeberg/Gitea, and GitHub without leaving the
picker — the /api/source/{appId}/bind endpoint was already there since
PR #21 but had no frontend.

**Info panel (per selected app)**

- New "Version source" card showing the current binding label, e.g.
  `Codeberg / Gitea (codeberg.org/Conduction/opencatalogi)`.
- Four buttons: App Store · Codeberg · GitHub · Advanced… — active
  binding gets a highlight (Codeberg quick-switch has a blue accent to
  signal "recommended" per PR #24).
- Codeberg quick-switch posts `{host:codeberg.org, owner:Conduction,
  repo:{appId}}`; GitHub quick-switch posts `{owner:ConductionNL,
  repo:{appId}}`; both use assetPattern `*.tar.gz`.

**Advanced dialog (NcDialog)**

- Full form for overrides: source kind, host (Gitea only), owner, repo,
  assetPattern. Pre-populates from the current binding when one exists;
  otherwise defaults to Codeberg + {appId}.
- Inline validation hint + error surface for the bind response.

**Wiring**

- New helpers: loadSources, loadCurrentBinding, submitBind,
  quickBindCodeberg / quickBindGithub / quickBindAppStore.
- Honors PasswordConfirmationRequired via the existing
  ensurePasswordConfirmation helper.
- On successful bind, re-runs checkVersions so the picker immediately
  reflects the new source.

**Notes**

- Pure frontend change — no PHP or spec changes; the /bind route was
  already fully documented in openapi.json and the admin tutorial added
  in PR #23.
- Backwards-compatible: if /api/source/{appId}/binding returns null
  (never bound), the UI shows "Nextcloud App Store" and the App Store
  quick-switch button as active.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
MWest2020 pushed a commit that referenced this pull request Jul 16, 2026
…kind dropdown

Follow-up on the source-binding UI now that #23 (docs) and #24 (Codeberg-first
ordering) are merged into main. Three coordinated updates:

**Dialog options now driven by /api/sources**

- `bindKindOptions` computed reads from `availableSources` (populated by
  `loadSources()` on mount from `GET /api/sources`).
- Labels + ordering therefore inherit from `SourceRegistry::listAvailable()`
  so the "(recommended)" suffix on Gitea introduced by #24 appears without
  the frontend hardcoding it.
- Hardcoded three-option list retained as a fallback for when `/api/sources`
  fails (network hiccup, forbidden, etc.), with ordering matching #24.

**Bind-alternate-source tutorial (docs/tutorials/admin/02-…)**

- New "Which path — UI or API?" section immediately after "When to use
  this" — both routes hit the same endpoint; pick whichever fits.
- Step 3 gains two subsections: "Path A — via the UI" (quick-switch
  buttons + Advanced… dialog) and "Path B — via the OCS API" (the
  existing curl / PowerShell examples, unchanged).
- Step 4 (Verify in the UI) split by path — Path A needs no refresh, Path
  B calls out the hard-refresh + relabels the confirmation string to
  match the new card copy.
- Sidebar description + Goal step 3 updated to acknowledge both paths.

**README.md**

- "What it does" bullet on non-App-Store binding gains a one-liner
  pointing at the Version source card and the OCS endpoint side by
  side.
- Quickstart step 3 rewritten: the UI is now the primary suggestion,
  with the tutorial linked for the automation/CI path.

**CHANGELOG.md** — new "In-app source-binding UI" entry under
[Unreleased] Added; the tutorial entry gets a trailing sentence noting
the step-3 side-by-side rewrite.

No PHP or spec changes; pure follow-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
MWest2020 pushed a commit that referenced this pull request Jul 16, 2026
Bumps appinfo/info.xml from 1.1.0 → 1.2.0 and closes the
CHANGELOG [Unreleased] block into a [1.2.0] - 2026-07-10
section.

1.2.0 is a semver minor — additive-only:

- **Added** In-app source-binding UI (this PR).
- **Added** Admin tutorial + product README + full OpenAPI spec (#23).
- **Changed** Codeberg/Gitea is now the recommended alternate source
  order in `SourceRegistry::listAvailable()` + `TrustedSourceList`
  defaults (#24) — ordering-only, no source kind or trust pattern
  removed.

No breaking API changes; existing bindings, custom trust allowlists,
and installed apps are unaffected.

The tutorial text already reads "ships a first-class UI for source
binding as of 1.2.0" — this bump makes that statement true.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
rubenvdlinde pushed a commit that referenced this pull request Jul 23, 2026
rubenvdlinde pushed a commit that referenced this pull request Jul 23, 2026
…he fallback

Ordering-only change to signal to admins that Codeberg is the current
canonical Conduction release channel (post ConductionNL → Codeberg
org migration). No source kind was removed and no trust pattern was
dropped, so existing bindings and custom allowlists keep working.

Changes:

- **SourceRegistry::listAvailable()** — picker order is now App Store
  → Gitea → GitHub. The Gitea entry's label is updated to "Codeberg /
  Gitea / Forgejo Releases (recommended)"; GitHub's label is
  simplified to "GitHub Releases" (was "GitHub Releases (public)" —
  the "(public)" qualifier confusingly implied private wasn't
  supported, which was never the case).

- **TrustedSourceList::DEFAULT_PATTERNS** — reordered so
  codeberg.org/Conduction/* is first and ConductionNL/* second.
  Ordering is cosmetic for fnmatch (all patterns are still evaluated)
  but signals intent in `occ config:app:get app_versions
  trusted_sources` output and in the tutorial.

- **README.md** — Supported-sources table reordered to match:
  App Store → gitea-release (recommended) → github-release.

- **docs/tutorials/admin/02-bind-alternate-source.md** — three tables
  reordered (source-kinds overview, bind fields, default trust
  patterns) with a short paragraph explaining why: "For Conduction
  apps, gitea-release pointed at codeberg.org/Conduction/<app> is the
  recommended default — that's the source of truth after the
  ConductionNL GitHub → Codeberg migration. github-release is
  retained for apps that still publish releases to GitHub."

- **CHANGELOG.md** — new `Changed` entry under `[Unreleased]`.

Tests: 121/283 unchanged (order isn't asserted anywhere).

Stacked on top of PR #23 (docs) — the docs tables live in that branch,
this PR reorders them; if #23 merges first, this rebases cleanly onto
main, if this merges first #23 auto-updates.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
rubenvdlinde pushed a commit that referenced this pull request Jul 23, 2026
Adds an admin-only UI affordance to switch an installed app's release
source between App Store, Codeberg/Gitea, and GitHub without leaving the
picker — the /api/source/{appId}/bind endpoint was already there since
PR #21 but had no frontend.

**Info panel (per selected app)**

- New "Version source" card showing the current binding label, e.g.
  `Codeberg / Gitea (codeberg.org/Conduction/opencatalogi)`.
- Four buttons: App Store · Codeberg · GitHub · Advanced… — active
  binding gets a highlight (Codeberg quick-switch has a blue accent to
  signal "recommended" per PR #24).
- Codeberg quick-switch posts `{host:codeberg.org, owner:Conduction,
  repo:{appId}}`; GitHub quick-switch posts `{owner:ConductionNL,
  repo:{appId}}`; both use assetPattern `*.tar.gz`.

**Advanced dialog (NcDialog)**

- Full form for overrides: source kind, host (Gitea only), owner, repo,
  assetPattern. Pre-populates from the current binding when one exists;
  otherwise defaults to Codeberg + {appId}.
- Inline validation hint + error surface for the bind response.

**Wiring**

- New helpers: loadSources, loadCurrentBinding, submitBind,
  quickBindCodeberg / quickBindGithub / quickBindAppStore.
- Honors PasswordConfirmationRequired via the existing
  ensurePasswordConfirmation helper.
- On successful bind, re-runs checkVersions so the picker immediately
  reflects the new source.

**Notes**

- Pure frontend change — no PHP or spec changes; the /bind route was
  already fully documented in openapi.json and the admin tutorial added
  in PR #23.
- Backwards-compatible: if /api/source/{appId}/binding returns null
  (never bound), the UI shows "Nextcloud App Store" and the App Store
  quick-switch button as active.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
rubenvdlinde pushed a commit that referenced this pull request Jul 23, 2026
…kind dropdown

Follow-up on the source-binding UI now that #23 (docs) and #24 (Codeberg-first
ordering) are merged into main. Three coordinated updates:

**Dialog options now driven by /api/sources**

- `bindKindOptions` computed reads from `availableSources` (populated by
  `loadSources()` on mount from `GET /api/sources`).
- Labels + ordering therefore inherit from `SourceRegistry::listAvailable()`
  so the "(recommended)" suffix on Gitea introduced by #24 appears without
  the frontend hardcoding it.
- Hardcoded three-option list retained as a fallback for when `/api/sources`
  fails (network hiccup, forbidden, etc.), with ordering matching #24.

**Bind-alternate-source tutorial (docs/tutorials/admin/02-…)**

- New "Which path — UI or API?" section immediately after "When to use
  this" — both routes hit the same endpoint; pick whichever fits.
- Step 3 gains two subsections: "Path A — via the UI" (quick-switch
  buttons + Advanced… dialog) and "Path B — via the OCS API" (the
  existing curl / PowerShell examples, unchanged).
- Step 4 (Verify in the UI) split by path — Path A needs no refresh, Path
  B calls out the hard-refresh + relabels the confirmation string to
  match the new card copy.
- Sidebar description + Goal step 3 updated to acknowledge both paths.

**README.md**

- "What it does" bullet on non-App-Store binding gains a one-liner
  pointing at the Version source card and the OCS endpoint side by
  side.
- Quickstart step 3 rewritten: the UI is now the primary suggestion,
  with the tutorial linked for the automation/CI path.

**CHANGELOG.md** — new "In-app source-binding UI" entry under
[Unreleased] Added; the tutorial entry gets a trailing sentence noting
the step-3 side-by-side rewrite.

No PHP or spec changes; pure follow-up.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
rubenvdlinde pushed a commit that referenced this pull request Jul 23, 2026
Bumps appinfo/info.xml from 1.1.0 → 1.2.0 and closes the
CHANGELOG [Unreleased] block into a [1.2.0] - 2026-07-10
section.

1.2.0 is a semver minor — additive-only:

- **Added** In-app source-binding UI (this PR).
- **Added** Admin tutorial + product README + full OpenAPI spec (#23).
- **Changed** Codeberg/Gitea is now the recommended alternate source
  order in `SourceRegistry::listAvailable()` + `TrustedSourceList`
  defaults (#24) — ordering-only, no source kind or trust pattern
  removed.

No breaking API changes; existing bindings, custom trust allowlists,
and installed apps are unaffected.

The tutorial text already reads "ships a first-class UI for source
binding as of 1.2.0" — this bump makes that statement true.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant