Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Config Migration Needed

• Select this checkbox to let Renovate create an automated Config Migration PR.

Deprecations / Replacements

Warning

These dependencies are either deprecated or have replacements available:

Datasource	Name	Replacement PR?
npm	@ckeditor/ckeditor5-vue2

Awaiting Schedule

The following updates are awaiting their schedule. To get an update now, click on a checkbox below.

• chore(deps): bump actions/checkout action from v4.3.0 to v4.3.1 (main)
• chore(deps): bump autoprefixer from 10.4.22 to ^10.4.23 (main)
• chore(deps): bump codecov/codecov-action action from v5.5.1 to v5.5.2 (main)
• chore(deps): bump peter-evans/create-pull-request action from v7.0.8 to v7.0.11 (main)
• fix(deps): bump node-forge from 1.3.2 to ^1.3.3 (main)
• chore(deps): bump @nextcloud/babel-config from 1.2.0 to ^1.3.0 (main)
• chore(deps): bump @nextcloud/browserslist-config from 3.0.1 to ^3.1.2 (main)
• chore(deps): bump @playwright/test from 1.56.1 to ^1.57.0 (main)
• chore(deps): bump christophwurst/nextcloud_testing from 1.0.4 to ^1.1.0 (main)
• chore(deps): bump jsdom from 27.2.0 to ^27.3.0 (main)
• chore(deps): bump php-cs-fixer/shim from 3.89.2 to ^3.92.3 (main)
• chore(deps): bump sass from 1.93.2 to ^1.97.1 (main)
• chore(deps): bump webpack from 5.102.1 to ^5.104.1 (main)
• fix(deps): bump @nextcloud/paths from 2.3.0 to ^2.4.0 (main)
• chore(deps): bump actions/checkout action (main)
• chore(deps): bump actions/setup-node action from v4 to v6 (main)
• chore(deps): bump actions/stale action from v9 to v10 (main)
• chore(deps): bump actions/upload-artifact action from v4 to v6 (main)
• chore(deps): bump eslint-plugin-perfectionist from 4.15.1 to v5 (main)
• chore(deps): bump node-polyfill-webpack-plugin from 3.0.0 to v4 (main)
• chore(deps): bump peter-evans/create-pull-request action from v7.0.8 to v8 (main)
• chore(deps): bump tripss/conventional-changelog-action action from v3 to v6 (main)
• chore(deps): bump vitest from 3.2.4 to v4 (main)
• chore(deps): bump webpack-cli from 5.1.4 to v6 (main)
• chore(deps): bump webpack-merge from 5.10.0 to v6 (main)
• fix(deps): bump @nextcloud/dialogs from 6.4.1 to v7 (main)
• fix(deps): bump @nextcloud/paths from 2.3.0 to v3 (main)
• fix(deps): bump @nextcloud/timezones from 0.2.0 to v1 (main)
• fix(deps): bump @nextcloud/vue from 8.35.0 to v9 (main)
• fix(deps): bump ckeditor5 from 45.2.2 to v47 (main)
• fix(deps): bump color-convert from 2.0.1 to v3 (main)
• fix(deps): bump p-limit from 6.2.0 to v7 (main)
• fix(deps): bump pinia from 2.3.1 to v3 (main)
• fix(deps): bump sabberworm/php-css-parser from 8.9.0 to v9 (main)
• fix(deps): bump uuid from 11.1.0 to v13 (main)
• fix(deps): bump webdav from 4.11.5 to v5 (main)
• 🔐 Create all awaiting schedule PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): bump @nextcloud/eslint-config from 9.0.0-rc.5 to ^9.0.0-rc.6 (main)
• fix(deps): bump @nextcloud/calendar-js from 8.1.4 to ^8.1.6 (main)
• fix(deps): bump @nextcloud/dialogs from 6.4.1 to ^6.4.2 (main)
• fix(deps): bump @nextcloud/vue from 8.35.0 to ^8.35.0 (main)
• chore(deps): bump psalm/phar from 5.26.1 to v7 (main)
• Click on this checkbox to rebase all open PRs at once

PR Closed (Blocked)

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• fix(deps): bump vue from 2.7.16 to v3 (main)
• fix(deps): bump @pinia/testing from 0.1.7 to v1 (main)
• fix(deps): bump vue from 2.7.16 to v3 (stable5.6)

Detected Dependencies

Branch main

composer (7)

composer.json (30)

• arthurhoaro/favicon ^2.0.1
• bamarni/composer-bin-plugin ^1.8.3
• bytestream/horde-exception ^2.2.0
• bytestream/horde-imap-client ^2.33.6
• bytestream/horde-mail ^2.7.1
• bytestream/horde-mime ^2.13.2
• bytestream/horde-stream ^1.7.2
• bytestream/horde-stringprep ^1.2.1
• bytestream/horde-support ^2.4.0
• bytestream/horde-text-filter ^2.5.0
• bytestream/horde-text-flowed ^2.1
• bytestream/horde-util ^2.8.0
• cerdic/css-tidy v2.2.1
• ezyang/htmlpurifier 4.19.0
• glenscott/url-normalizer ^1.4
• hamza221/html2text ^1.0
• jeremykendall/php-domain-parser ^6.4.0
• nextcloud/horde-managesieve ^1.0
• nextcloud/horde-smtp ^1.0.2
• nextcloud/kitinerary ^1.0
• nextcloud/kitinerary-bin ^1.0.4
• nextcloud/kitinerary-flatpak ^1.0
• nextcloud/kitinerary-sys ^2.0.0
• phpmailer/dkimvalidator ^0.3.1
• psr/log ^3.0.2
• rubix/ml 2.5.3
• sabberworm/php-css-parser ^8.9.0
• youthweb/urllinker ^2.1.0
• fig/log-test ^1.2.1
• psalm/phar ^5.26.1

vendor-bin/cs-fixer/composer.json (2)

• nextcloud/coding-standard ^1.4.0
• php-cs-fixer/shim ^3.89.2

vendor-bin/mozart/composer.json (1)

• coenjacobs/mozart ^0.7.1

vendor-bin/openapi/composer.json (1)

• nextcloud/openapi-extractor ^1.8.7

vendor-bin/phpunit/composer.json (1)

• christophwurst/nextcloud_testing ^1.0.4

vendor-bin/psalm-stubs/composer.json (1)

• psr/log ^3.0.2

vendor-bin/rector/composer.json (1)

• rector/rector ^2.2.14

github-actions (5)

.github/workflows/appstore-conventional-build-publish.yml (4)

• skjnldsv/check-actor-permission v3.0@69e92a3c4711150929bca9fcf34448c5bf5526e7
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• TriPSs/conventional-changelog-action v3@b7f32a8347e86c26ea2f4823cc7c160b9014c6a0
• actions/create-release v1@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e

.github/workflows/package.yml (4)

• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5
• skjnldsv/read-package-engines-version-actions v2.2@8205673bab74a63eb9b8093402fd9e0e018663a1
• ChristophWurst/setup-nextcloud v0.3.2@fc0790385c175d97e88a7cb0933490de6e990374
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/stale.yml (1)

• actions/stale v9@5bef64f19d7facfb25b37b414482c7164d639639

.github/workflows/test.yml (15)

• ChristophWurst/setup-nextcloud v0.3.2@fc0790385c175d97e88a7cb0933490de6e990374
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• ChristophWurst/setup-nextcloud v0.3.2@fc0790385c175d97e88a7cb0933490de6e990374
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5
• codecov/codecov-action v5.5.1@5a1091511ad55cbe89839c7260b706298ca349f7
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5
• skjnldsv/read-package-engines-version-actions v2.2@8205673bab74a63eb9b8093402fd9e0e018663a1
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020
• actions/checkout v4.3.0@08eba0b27e820071cde6df949e0beb9ba4906955
• icewind1991/nextcloud-version-matrix v1.3.1@58becf3b4bb6dc6cef677b15e2fd8e7d48c0908f
• ChristophWurst/setup-nextcloud v0.3.2@fc0790385c175d97e88a7cb0933490de6e990374
• actions/checkout v4@34e114876b0b11c390a56381ad16ebd13914f8d5
• actions/setup-node v4@49933ea5288caeca8642d1e84afbd3f7d6820020
• actions/upload-artifact v4@ea165f8d65b6e75b540449e92b4886f43607fa02

.github/workflows/update-public-suffix-list.yml (2)

• actions/checkout 8e8c483db84b4bee98b60c0593521ed34d9990e8
• peter-evans/create-pull-request v7.0.8@271a8d0340265f705b14b6d32b9829c1cb33d45e

npm (1)

package.json (90)

• @ckeditor/ckeditor5-vue2 ^3.0.1
• @iframe-resizer/child ^5.5.7
• @iframe-resizer/parent ^5.5.7
• @mdi/svg ^7.4.47
• @nextcloud/auth ^2.5.3
• @nextcloud/axios ^2.5.2
• @nextcloud/calendar-js ^8.1.4
• @nextcloud/cdav-library ^2.1.1
• @nextcloud/dialogs ^6.4.1
• @nextcloud/files ^3.12.2
• @nextcloud/initial-state ^3.0.0
• @nextcloud/l10n ^3.4.1
• @nextcloud/logger ^3.0.3
• @nextcloud/moment ^1.3.5
• @nextcloud/paths ^2.3.0
• @nextcloud/router ^3.1.0
• @nextcloud/sharing ^0.3.0
• @nextcloud/timezones ^0.2.0
• @nextcloud/vue ^8.34.0
• @pinia/testing ^0.1.7
• @riophae/vue-treeselect ^0.4.0
• address-rfc2822 ^2.2.3
• ckeditor5 ^45.2.2
• color-convert ^2.0.1
• core-js ^3.47.0
• debounce-promise ^3.1.2
• dompurify ^3.3.1
• escape-html ^1.0.3
• html-to-text ^9.0.5
• ical.js ^2.2.1
• js-base64 ^3.7.8
• jstz ^2.1.1
• lodash ^4.17.21
• md5 ^2.3.0
• mitt ^3.0.1
• nextcloud_issuetemplate_builder ^0.1.0
• node-forge ^1.3.2
• p-limit ^6.2.0
• pinia ^2.3.1
• printscout 2.0.3
• process ^0.11.10
• ramda ^0.32.0
• raw-loader ^4.0.2
• stylelint ^16.26.1
• uuid ^11.1.0
• v-tooltip ^2.1.3
• vue ^2.7.16
• vue-autosize ^1.0.2
• vue-click-outside ^1.1.0
• vue-dndrop ^1.3.4
• vue-frag ^1.4.3
• vue-material-design-icons ^5.3.1
• vue-on-click-outside ^1.0.3
• vue-router ^3.6.5
• vue-scroll ^2.1.13
• vue-shortkey ^3.1.7
• vue-tabs-component ^1.5.0
• webdav 4.11.5
• @nextcloud/babel-config ^1.2.0
• @nextcloud/browserslist-config ^3.0.1
• @nextcloud/eslint-config ^9.0.0-rc.5
• @nextcloud/stylelint-config ^3.1.1
• @playwright/test ^1.56.1
• @vitejs/plugin-vue2 ^2.3.4
• @vue/test-utils ^1.3.6
• autoprefixer ^10.4.22
• babel-loader ^10.0.0
• babel-loader-exclude-node-modules-except ^1.2.1
• css-loader ^7.1.2
• eslint-plugin-import ^2.32.0
• eslint-plugin-perfectionist ^4.15.1
• eslint-plugin-vitest-globals ^1.5.0
• file-loader ^6.2.0
• jsdom ^27.2.0
• node-polyfill-webpack-plugin ^3.0.0
• patch-package ^8.0.1
• postcss ^8.5.6
• sass ^1.93.2
• sass-loader ^16.0.6
• style-loader ^4.0.0
• svg-inline-loader ^0.8.2
• ts-loader ^9.5.4
• typescript ^5.9.3
• url-loader ^4.1.1
• vitest ^3.2.4
• vue-loader ^15.11.1
• vue-template-compiler ^2.7.16
• webpack ^5.102.1
• webpack-cli ^5.1.4
• webpack-merge ^5.10.0

Branch stable5.6

composer (7)

composer.json

vendor-bin/cs-fixer/composer.json

vendor-bin/mozart/composer.json

vendor-bin/openapi/composer.json

vendor-bin/phpunit/composer.json

vendor-bin/psalm-stubs/composer.json

vendor-bin/rector/composer.json

github-actions (5)

.github/workflows/appstore-conventional-build-publish.yml

.github/workflows/package.yml

.github/workflows/stale.yml

.github/workflows/test.yml

.github/workflows/update-public-suffix-list.yml

npm (1)

package.json (2)

• vue ^2.7.16
• vue-template-compiler ^2.7.16

---

• Check this box to trigger a request for Renovate to run again on this repository