style(deps): bump activity-feed and threaded-annotations by jackiejou · Pull Request #4619 · box/box-ui-elements

jackiejou · 2026-06-09T20:12:28Z

Summary

Bump @box/activity-feed to ^1.23.0 and @box/threaded-annotations to ^1.96.1, plus their peer Box deps (@box/blueprint-web major to ^15.6.0, @box/blueprint-web-assets, @box/collaboration-popover, @box/readable-time, @box/user-selector).
Drop two adapter rules in ActivityFeedV2.scss that became redundant once the published list ships its own scroll container and row padding: switch the wrapper from overflow: hidden auto to overflow: hidden so the inner ul is the single scroller, and remove the &-list > ul > li padding override.
Refresh the SidebarFileProperties snapshot for the new Blueprint Text CSS-module hash.

Test plan

yarn install clean, npx yarn-deduplicate yarn.lock no further changes
yarn test --watchAll=false --testPathPattern="activity-feed-v2" -> 192/192 passing
yarn test --watchAll=false --testPathPattern="SidebarFileProperties" -> 4/4 passing
yarn lint:ts clean
Visually verify activity feed scrolls fully to the bottom and rows have correct horizontal padding in the sidebar

Summary by CodeRabbit

Chores
- Updated dependency versions for multiple Box packages across development and peer dependencies.
Style
- Adjusted Activity Feed v2 styling to simplify overflow behavior and improve list layout/spacing.

coderabbitai · 2026-06-09T20:12:44Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 1e5e5831-58c7-4059-a34a-72979c4cd023

📥 Commits

Reviewing files that changed from the base of the PR and between 3ad052b and c981107.

⛔ Files ignored due to path filters (2)

src/elements/content-sidebar/__tests__/__snapshots__/SidebarFileProperties.test.js.snap is excluded by !**/*.snap
yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

package.json

✅ Files skipped from review due to trivial changes (1)

package.json

Walkthrough

This PR updates several @box/* dependency versions in package.json (dev and peer) and adjusts ActivityFeed V2 SCSS: sets wrapper overflow to hidden and removes list-item left/right padding rules.

Changes

Activity Feed Component Updates

Layer / File(s)	Summary
Dependency Version Updates `package.json`	Updated `@box/activity-feed`, `@box/blueprint-web`, `@box/blueprint-web-assets`, `@box/cldr-data`, `@box/collaboration-popover`, `@box/readable-time`, `@box/threaded-annotations`, and `@box/user-selector` versions in both `devDependencies` and `peerDependencies`.
ActivityFeed V2 Styling Adjustments `src/elements/content-sidebar/activity-feed-v2/ActivityFeedV2.scss`	Changed ActivityFeed V2 wrapper overflow to `overflow: hidden` and removed the `&-list > ul > li` left/right padding reset while preserving `&-list { display: contents }`.

Possibly related PRs

box/box-ui-elements#4359: Also updates package.json dependency versions for @box/* packages.
box/box-ui-elements#4555: Bumps the same @box/* dependencies in dev/peer deps.
box/box-ui-elements#4587: Overlaps on @box/* dependency version bumps.

Suggested labels

ready-to-merge

Suggested reviewers

jmcbgaston
jpan-box
jfox-box

🐰 I hopped through diffs with a twitch and a twitchy ear,
bumped versions and smoothed one CSS tear.
Overflow quiet, list spacing gone,
dependencies tuned, the build hums on.
A little rabbit clap — the changes are clear!

🎯 2 (Simple) | ⏱️ ~8 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately summarizes the main changes: bumping dependency versions for activity-feed and threaded-annotations packages, which is the primary focus of the PR.
Description check	✅ Passed	The PR description includes a comprehensive summary of changes, test plan with passing results, and is well-organized. However, it does not follow the provided template structure, which appears to be about merge process instructions.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

The published @box/activity-feed list now scrolls on its own ul (overflow-y: auto) and applies horizontal padding to its rows. The adapter wrapper was also setting overflow: hidden auto and a &-list > ul > li padding rule, which created a second scroll container and double-applied padding. Use overflow: hidden so the inner ul is the single scroller, and drop the item padding rule.

socket-security · 2026-06-09T20:13:24Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@box/activity-feed@1.21.9 ⏵ 1.23.0	⁺¹	⁺¹	⁺¹
npm/@box/collaboration-popover@1.62.27 ⏵ 1.63.13			⁺¹
npm/@box/readable-time@1.41.27 ⏵ 1.42.13			⁺¹
npm/@box/threaded-annotations@1.93.2 ⏵ 1.96.1	⁺¹	⁺¹	⁺¹
npm/@box/user-selector@1.76.27 ⏵ 1.77.13
npm/@box/blueprint-web@14.38.0 ⏵ 15.6.0	⁺¹	⁺¹
npm/@box/blueprint-web-assets@4.120.5 ⏵ 4.123.2	⁺¹	⁺¹

View full report

Blueprint Text CSS-module hash shifted with the blueprint-web bump.

mergify · 2026-06-09T23:40:11Z

jackiejou requested review from a team as code owners June 9, 2026 20:12

jackiejou added 2 commits June 9, 2026 13:13

chore(deps): bump activity-feed and threaded-annotations

8aa4720

jackiejou force-pushed the chore/bump-activity-feed-threaded-annotations-4 branch from b1a68cc to 3ad052b Compare June 9, 2026 20:13

jackiejou commented Jun 9, 2026

View reviewed changes

Comment thread src/elements/content-sidebar/activity-feed-v2/ActivityFeedV2.scss

jackiejou changed the title ~~chore(deps): bump activity-feed and threaded-annotations~~ style(deps): bump activity-feed and threaded-annotations Jun 9, 2026

jackiejou added 2 commits June 9, 2026 13:36

test(content-sidebar): update SidebarFileProperties snapshot

25580e2

Blueprint Text CSS-module hash shifted with the blueprint-web bump.

chore(deps): bump activity-feed to 1.23.0

c981107

JChan106 approved these changes Jun 9, 2026

View reviewed changes

jmcbgaston approved these changes Jun 9, 2026

View reviewed changes

tjuanitas approved these changes Jun 9, 2026

View reviewed changes

Comment thread package.json

jackiejou added the ready-to-merge label Jun 9, 2026

mergify Bot added the queued label Jun 9, 2026

mergify Bot merged commit b129717 into box:master Jun 9, 2026
11 of 12 checks passed

mergify Bot removed the queued label Jun 9, 2026

This was referenced Jun 18, 2026

fix(deps): bump activity-feed and threaded-annotations #4640

Merged

fix(deps): bump activity-feed and threaded-annotations to v2 #4643

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

style(deps): bump activity-feed and threaded-annotations#4619

style(deps): bump activity-feed and threaded-annotations#4619
mergify[bot] merged 4 commits into
box:masterfrom
jackiejou:chore/bump-activity-feed-threaded-annotations-4

jackiejou commented Jun 9, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Uh oh!

Uh oh!

mergify Bot commented Jun 9, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

jackiejou commented Jun 9, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Possibly related PRs

Suggested labels

Suggested reviewers

Uh oh!

socket-security Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

mergify Bot commented Jun 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

jackiejou commented Jun 9, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 9, 2026 •

edited

Loading

socket-security Bot commented Jun 9, 2026 •

edited

Loading

mergify Bot commented Jun 9, 2026 •

edited

Loading