Skip to content

fix: bump threaded-annotations to 4.1.12 and activity-feed to 2.2.20#4714

Merged
mergify[bot] merged 1 commit into
box:masterfrom
jackiejou:bump-activity-feed-threaded-annotations
Jul 22, 2026
Merged

fix: bump threaded-annotations to 4.1.12 and activity-feed to 2.2.20#4714
mergify[bot] merged 1 commit into
box:masterfrom
jackiejou:bump-activity-feed-threaded-annotations

Conversation

@jackiejou

@jackiejou jackiejou commented Jul 22, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Description

Bumps @box/threaded-annotations to 4.1.12 and @box/activity-feed to 2.2.20, along with the peer versions threaded-annotations 4.1.x requires.

Package Before After
@box/threaded-annotations ^4.0.3 ^4.1.12
@box/activity-feed ^2.2.18 (dev) / ^2.2.1 (peer) ^2.2.20
@box/blueprint-web ^16.8.0 ^16.13.2
@box/blueprint-web-assets ^5.4.3 ^5.5.11
@box/collaboration-popover ^2.1.23 ^2.1.36
@box/readable-time ^2.1.23 ^2.1.36
@box/user-selector ^2.1.24 ^2.1.39

Ranges updated in both devDependencies and peerDependencies; lockfile deduplicated so each bumped package resolves to a single version.

Testing

  • yarn test --watchAll=false --testPathPattern="activity-feed-v2" - 11 suites, 350 tests passed.

Summary by CodeRabbit

  • Chores
    • Updated supported package versions to align with newer releases.
    • Refreshed development and peer package requirements for improved compatibility.

@jackiejou
jackiejou requested a review from a team as a code owner July 22, 2026 02:09
@socket-security

socket-security Bot commented Jul 22, 2026

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security		 Vulnerability Quality Maintenance License
Updatednpm/​@​box/​activity-feed@​2.2.18 ⏵ 2.2.2076 +110087 +199 +150
Updatednpm/​@​box/​collaboration-popover@​2.1.23 ⏵ 2.1.367410085 -299 +150
Updatednpm/​@​box/​readable-time@​2.1.23 ⏵ 2.1.367310010099 +150
Updatednpm/​@​box/​threaded-annotations@​4.0.3 ⏵ 4.1.1276 -110087 -199 +150
Updatednpm/​@​box/​user-selector@​2.1.24 ⏵ 2.1.3981 -110085 +19950
Updatednpm/​@​box/​blueprint-web@​16.8.0 ⏵ 16.13.286 +1100969980
Updatednpm/​@​box/​blueprint-web-assets@​5.4.3 ⏵ 5.5.1188 +11001009980

View full report

@coderabbitai

coderabbitai Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Review Change Stack

Walkthrough

Updates version constraints for several @box/* packages in devDependencies and peerDependencies within package.json.

Changes

Box dependency updates

Layer / File(s) Summary
Update @box dependency ranges
package.json		 Newer version constraints are applied to selected @box/* packages in development and peer dependencies; peer @box/cldr-data remains at >=34.2.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

Suggested labels: ready-to-merge

Suggested reviewers: ahorowitz123, jchan106, reneshen0328

Poem

I’m a rabbit with packages bright,
Version bumps hop into sight.
Dev peers align in a tidy row,
With cldr-data steady below.
One quick review, then off we go!

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly reflects the main dependency bumps in the pull request, especially threaded-annotations and activity-feed.
Description check ✅ Passed The description covers the change summary and testing, which is sufficient for the provided template.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@jackiejou jackiejou changed the title chore: bump threaded-annotations to 4.1.12 and activity-feed to 2.2.20 fix: bump threaded-annotations to 4.1.12 and activity-feed to 2.2.20 Jul 22, 2026
@mergify mergify Bot added the queued label Jul 22, 2026
@mergify

mergify Bot commented Jul 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Merge Queue Status

  • ✅ Entered queue — 2026-07-22 03:36 UTC · Rule: Automatic strict merge · triggered by rule Automatic merge queue
  • ✅ Checks skipped · PR is already up-to-date
  • ✅ Merged — 2026-07-22 03:37 UTC · at 5ee0cad04cce775a274fa2f4c8a4f9ae6f1817d6 · squash

This pull request spent 11 seconds in the queue, including 2 seconds running CI.

Required conditions to merge

@mergify
mergify Bot merged commit 729d329 into box:master Jul 22, 2026
11 of 12 checks passed
@mergify mergify Bot removed the queued label Jul 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tjuanitas tjuanitas tjuanitas approved these changes
@jfox-box jfox-box jfox-box approved these changes

Assignees

No one assigned

Labels

ready-to-merge

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@jackiejou @tjuanitas @jfox-box