Skip to content

chore(deps): adopt dialogs 8 with isolated native viewer - #9301

Open
dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/nextcloud/dialogs-8.0.0
Open

dependabot[bot] wants to merge 8 commits into
mainfrom
dependabot/npm_and_yarn/nextcloud/dialogs-8.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 30, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Migrate LibreSign's own notifications and PDF file picker to @nextcloud/dialogs 8.0.0, using the official package name without npm aliases, peer overrides, or forced installation.

Native Viewer compatibility

The native @nextcloud/viewer and its Image Editor still require dialogs 7 as a peer dependency. The Viewer is essential to LibreSign's signed-document preview, including the protection that prevents a signed UUID PDF from exposing the owner's original file ID.

To preserve that public Viewer API and keep each package's declared peer contract intact:

  • The main LibreSign manifest depends directly on dialogs 8, as normal.
  • src/viewer/ contains a minimal, private installation boundary for the existing Viewer and its dialogs 7 peer, with its own lockfile and a public-API re-export. The root postinstall installs this lockfile reproducibly.
  • The native Viewer uses its original supported API. LibreSign continues to use getViewer(), getHandlers(), and canView(), with existing signed-UUID access safeguards unchanged.
  • Vite/Vitest resolve a shared Vue runtime, and Dependabot includes the Viewer dependency directory.

No upstream package files were modified. No external pull requests, issues, or comments were created.

Visual behavior

Dialogs 8 replaces Toastify-based notifications with accessible Vue toasts. Success, warning, and error notifications now appear at the bottom-start corner, with close buttons and appropriate accessible roles. The new CSS is imported by dialogs itself; LibreSign does not use the removed style.css entry point.

Browser capture of the real dialogs 8 toast components in an isolated preview. The surrounding page is a test harness, not a screenshot of the production LibreSign app:

Isolated browser preview: success, warning and error toast components from dialogs 8

The screenshot is attached to this PR description; no screenshots or temporary test pages are versioned.

Verification

  • Clean npm ci, including the native Viewer's nested npm ci: passed.
  • Root and Viewer npm ls: passed with no peer conflicts, no aliases and no overrides.
  • npm run ts:check, npm run lint, npm run stylelint, npm run build: passed locally.
  • npm run test: 3,549 tests passed across 273 files.
  • 15 native Viewer behavior/security tests and 4 real dialogs 8 notification/file picker integration tests: passed.
  • Browser capture: real dialogs 8 success/warning/error toasts rendered, correct roles, no browser console errors.
  • The compiled CSS includes dialogs 8 toast styles.

GitHub CI on the latest commit remains the authoritative merge gate. No merge was performed.

Bumps [@nextcloud/dialogs](https://github.com/nextcloud-libraries/nextcloud-dialogs) from 7.5.0 to 8.0.0.
- [Release notes](https://github.com/nextcloud-libraries/nextcloud-dialogs/releases)
- [Changelog](https://github.com/nextcloud-libraries/nextcloud-dialogs/blob/main/CHANGELOG.md)
- [Commits](nextcloud-libraries/nextcloud-dialogs@v7.5.0...v8.0.0)

---
updated-dependencies:
- dependency-name: "@nextcloud/dialogs"
  dependency-version: 8.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Oct 30, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 30, 2026 16:03
@dependabot dependabot Bot added the javascript Work involving JavaScript code label Oct 30, 2026
github-actions[bot]
github-actions Bot previously approved these changes Oct 30, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
@vitormattos vitormattos changed the title chore(deps): Bump @nextcloud/dialogs from 7.5.0 to 8.0.0 chore(deps): adopt dialogs 8 in LibreSign with compatible viewer Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
@vitormattos vitormattos changed the title chore(deps): adopt dialogs 8 in LibreSign with compatible viewer chore(deps): adopt dialogs 8 while retaining viewer's v7 peer Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
@vitormattos vitormattos changed the title chore(deps): adopt dialogs 8 while retaining viewer's v7 peer chore(deps): bump @nextcloud/dialogs from 7.5.0 to 7.6.0 Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
github-actions[bot]
github-actions Bot previously approved these changes Nov 1, 2026
Signed-off-by: Vitor Mattos <1079143+vitormattos@users.noreply.github.com>
@vitormattos vitormattos changed the title chore(deps): bump @nextcloud/dialogs from 7.5.0 to 7.6.0 chore(deps): adopt dialogs 8 with isolated native viewer Nov 1, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates javascript Work involving JavaScript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant