This issue lists Renovate updates and detected dependencies. Read the [Dependency Dashboard](https://docs.renovatebot.com/key-concepts/dashboard/) docs to learn more.<br>[View this repository on the Mend.io Web Portal](https://developer.mend.io/github/nextcloud/mail). ## Awaiting Schedule The following updates are awaiting their schedule. To get an update now, click on a checkbox below. - [ ] <!-- unschedule-branch=renovate/main-php-cs-fixer-shim-3.x -->chore(deps): bump php-cs-fixer/shim from ^3.95.26 to ^3.95.27 (main) - [ ] <!-- unschedule-branch=renovate/main-sass-1.x -->chore(deps): bump sass from ^1.105.0 to ^1.105.1 (main) - [ ] <!-- unschedule-branch=renovate/main-vitest-monorepo -->chore(deps): bump vitest from ^5.0.1 to ^5.0.3 (main) - [ ] <!-- unschedule-branch=renovate/main-bytestream-horde-imap-client-2.x -->fix(deps): bump bytestream/horde-imap-client from ^2.34.1 to ^2.34.2 (main) - [ ] <!-- unschedule-branch=renovate/main-dompurify-3.x -->fix(deps): bump dompurify from ^3.4.15 to ^3.4.16 (main) - [ ] <!-- unschedule-branch=renovate/main-stylelint-17.x -->fix(deps): bump stylelint from ^17.15.0 to ^17.16.0 (main) - [ ] <!-- unschedule-branch=renovate/main-playwright-monorepo -->chore(deps): bump @playwright/test from ^1.63.0 to ^1.64.0-alpha-2026-10-03 (main) - [ ] <!-- unschedule-branch=renovate/main-floating-vue-5.x -->chore(deps): bump floating-vue from ~5.2.2 to ~5.4.0 (main) - [ ] <!-- unschedule-branch=renovate/main-patch-package-6.x -->chore(deps): bump patch-package from ^6.0.7 to ^6.5.1 (main) - [ ] <!-- unschedule-branch=renovate/main-sebastiankrupinski-jmap-client-php-2.x -->fix(deps): bump sebastiankrupinski/jmap-client-php from ^2.1.0 to ^2.2.0 (main) - [ ] <!-- unschedule-branch=renovate/main-patch-package-8.x -->chore(deps): bump patch-package from ^6.0.7 to v8 (main) - [ ] <!-- unschedule-branch=renovate/main-skjnldsv-read-package-engines-version-actions-4.x -->chore(deps): bump skjnldsv/read-package-engines-version-actions action from v3 to v4 (main) - [ ] <!-- unschedule-branch=renovate/main-ckeditor-ckeditor5-vue-9.x -->fix(deps): bump @ckeditor/ckeditor5-vue from ^8.2.0 to v9 (main) - [ ] <!-- unschedule-branch=renovate/main-major-ckeditor-monorepo -->fix(deps): bump ckeditor5 from ~47.6.2 to v49 (main) - [ ] <!-- create-all-awaiting-schedule-prs -->🔐 **Create all awaiting schedule PRs at once** 🔐 ## Pending Status Checks The following updates await pending status checks. To force their creation now, click on a checkbox below. - [ ] <!-- unpend-branch=renovate/main-ghcr.io-christophwurst-docker-imap-devel-latest -->chore(deps): bump ghcr.io/christophwurst/docker-imap-devel:latest docker digest to 1baf0e6 (main) - [ ] <!-- unpend-branch=renovate/main-ghcr.io-nextcloud-continuous-integration-redis-latest -->chore(deps): bump ghcr.io/nextcloud/continuous-integration-redis:latest docker digest to 022165f (main) - [ ] <!-- unpend-branch=renovate/main-vitejs-plugin-vue-6.x -->chore(deps): bump @vitejs/plugin-vue from ^6.0.9 to ^6.0.10 (main) - [ ] <!-- unpend-branch=renovate/main-actions-upload-artifact-7.x -->chore(deps): bump actions/upload-artifact action from v7.0.1 to v7.0.2 (main) - [ ] <!-- unpend-branch=renovate/main-babel-monorepo -->chore(deps): bump babel monorepo from ^8.0.6 to ^8.0.7 (main) (`@babel/core`, `@babel/preset-env`) - [ ] <!-- unpend-branch=renovate/main-jsdom-30.x -->chore(deps): bump jsdom from ^30.1.1 to ^30.1.2 (main) - [ ] <!-- unpend-branch=renovate/main-postcss-8.x -->chore(deps): bump postcss from ^8.5.28 to ^8.5.29 (main) - [ ] <!-- unpend-branch=renovate/main-rubix-ml-2.x -->fix(deps): bump rubix/ml from 2.6.0 to v2.6.1 (main) - [ ] <!-- unpend-branch=renovate/main-uuid-14.x -->fix(deps): bump uuid from ^14.0.2 to ^14.0.3 (main) - [ ] <!-- unpend-branch=renovate/main-actions-setup-node-7.x -->chore(deps): bump actions/setup-node action from v7.0.0 to v7.1.0 (main) - [ ] <!-- unpend-branch=renovate/main-rector-rector-2.x -->chore(deps): bump rector/rector from ^2.6.7 to ^2.7.0 (main) - [ ] <!-- unpend-branch=renovate/main-vue-router-5.x -->fix(deps): bump vue-router from ^5.3.1 to ^5.4.0 (main) - [ ] <!-- unpend-branch=renovate/main-ubuntu-26.x -->chore(deps): bump ubuntu from 24.04 to v26 (main) ## Open The following updates have all been created. To force a retry/rebase of any, click on a checkbox below. - [ ] <!-- rebase-branch=renovate/main-stalwartlabs-stalwart-0.x -->[chore(deps): bump stalwartlabs/stalwart docker tag to v0.16.24 (main)](../pull/13750) - [ ] <!-- rebase-branch=renovate/main-ckeditor-monorepo -->[fix(deps): bump ckeditor5 from ~47.6.2 to ~47.7.5 (main)](../pull/13754) - [ ] <!-- rebase-branch=renovate/main-youthweb-urllinker-2.x -->[fix(deps): bump youthweb/urllinker from ^2.1.0 to ^2.2.1 (main)](../pull/13761) - [ ] <!-- rebase-branch=renovate/main-christophwurst-nextcloud_testing-3.x -->[chore(deps): bump christophwurst/nextcloud_testing from ^2.0.0 to v3 (main)](../pull/13764) - [ ] <!-- rebase-branch=renovate/main-psalm-phar-7.x -->[chore(deps): bump psalm/phar from ^5.26.1 to v7 (main)](../pull/13243) - [ ] <!-- rebase-branch=renovate/main-tripss-conventional-changelog-action-6.x -->[chore(deps): bump tripss/conventional-changelog-action action from v3 to v6 (main)](../pull/13246) - [ ] <!-- rebase-branch=renovate/main-typescript-7.x -->[chore(deps): bump typescript from ~6.0.3 to v7 (main)](../pull/13765) - [ ] <!-- rebase-branch=renovate/main-coenjacobs-mozart-1.x -->[fix(deps): bump coenjacobs/mozart from ^0.7.1 to v1 (main)](../pull/13769) - [ ] <!-- rebase-branch=renovate/main-rubix-ml-3.x -->[fix(deps): bump rubix/ml from 2.6.0 to v3 (main)](../pull/13771) - [ ] <!-- rebase-branch=renovate/stable5.13-npm-vue-vulnerability -->[fix(deps): bump vue from ^2.7.16 to v3 (stable5.13)](../pull/13814) - [ ] <!-- rebase-branch=renovate/stable5.12-npm-dompurify-vulnerability -->[fix(deps): bump dompurify from ^3.4.13 to v3.4.16 (stable5.12)](../pull/13794) - [ ] <!-- rebase-branch=renovate/stable5.12-npm-vue-vulnerability -->[fix(deps): bump vue from ^2.7.16 to v3 (stable5.12)](../pull/13639) - [ ] <!-- rebase-all-open-prs -->**Click on this checkbox to rebase all open PRs at once** ## Detected Dependencies <details><summary>Branch main</summary> <blockquote> <details><summary>composer (7)</summary> <blockquote> <details><summary>composer.json (30)</summary> - `arthurhoaro/favicon ^2.0.1` - `bamarni/composer-bin-plugin ^1.9.1` - `bytestream/horde-exception ^2.2.0` - `bytestream/horde-imap-client ^2.34.1` → [Updates: `^2.34.2`] - `bytestream/horde-mail ^2.7.2` - `bytestream/horde-mime ^2.14.1` - `bytestream/horde-stream ^1.7.2` - `bytestream/horde-stringprep ^1.2.1` - `bytestream/horde-support ^2.4.0` - `bytestream/horde-text-filter ^2.5.0` - `bytestream/horde-text-flowed ^2.1` - `bytestream/horde-util ^2.8.1` - `cerdic/css-tidy v2.2.1` - `cweagans/composer-patches ~2.0` - `ezyang/htmlpurifier 4.19.1` - `glenscott/url-normalizer ^1.4` - `hamza221/html2text ^1.0` - `jeremykendall/php-domain-parser ^6.4.0` - `nextcloud/horde-managesieve ^1.0.1` - `nextcloud/horde-smtp ^1.0.3` - `nextcloud/kitinerary ^1.0` - `nextcloud/kitinerary-bin ^1.0.4` - `nextcloud/kitinerary-flatpak ^1.0` - `nextcloud/kitinerary-sys ^2.0.0` - `phpmailer/dkimvalidator ^0.3.1` - `rubix/ml 2.6.0` → [Updates: `2.6.1`, `3.0.0-rc4`] - `sabberworm/php-css-parser ^9.5.0` - `sebastiankrupinski/jmap-client-php ^2.1.0` → [Updates: `^2.2.0`] - `youthweb/urllinker ^2.1.0` → [Updates: `^2.2.1`] - `psalm/phar ^5.26.1` → [Updates: `^7.0.0-beta24`] </details> <details><summary>vendor-bin/cs-fixer/composer.json (2)</summary> - `nextcloud/coding-standard ^1.5.0` - `php-cs-fixer/shim ^3.95.26` → [Updates: `^3.95.27`] </details> <details><summary>vendor-bin/mozart/composer.json (1)</summary> - `coenjacobs/mozart ^0.7.1` → [Updates: `^1.2.3`] </details> <details><summary>vendor-bin/openapi/composer.json (1)</summary> - `nextcloud/openapi-extractor ^1.9.1` </details> <details><summary>vendor-bin/phpunit/composer.json (2)</summary> - `christophwurst/nextcloud_testing ^2.0.0` → [Updates: `^3.0.0`] - `fig/log-test ^1.2.1` </details> <details><summary>vendor-bin/psalm-stubs/composer.json (1)</summary> - `psr/log ^3.0.2` </details> <details><summary>vendor-bin/rector/composer.json (2)</summary> - `rector/rector ^2.6.7` → [Updates: `^2.7.0`] - `nextcloud/rector ^0.5.2` </details> </blockquote> </details> <details><summary>github-actions (7)</summary> <blockquote> <details><summary>.github/workflows/appstore-conventional-build-publish.yml (4)</summary> - `skjnldsv/check-actor-permission v3.0@69e92a3c4711150929bca9fcf34448c5bf5526e7` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `TriPSs/conventional-changelog-action v3@b7f32a8347e86c26ea2f4823cc7c160b9014c6a0` → [Updates: `v6`] - `actions/create-release v1@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e` </details> <details><summary>.github/workflows/package.yml (3)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `skjnldsv/read-package-engines-version-actions v3@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4` → [Updates: `v4`] - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` → [Updates: `v7.0.2`] </details> <details><summary>.github/workflows/release-relay.yml (2)</summary> - `skjnldsv/check-actor-permission v3.0@69e92a3c4711150929bca9fcf34448c5bf5526e7` - `peter-evans/repository-dispatch v4.0.1@28959ce8df70de7be546dd1250a005dd32156697` </details> <details><summary>.github/workflows/stale.yml (1)</summary> - `actions/stale v11.0.0@4391f3da665fdf50b6810c1a66712fb9ba21aa93` </details> <details><summary>.github/workflows/sync-workflow-templates.yml (4)</summary> - `skjnldsv/check-actor-permission v3.0@69e92a3c4711150929bca9fcf34448c5bf5526e7` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` </details> <details><summary>.github/workflows/test.yml (23)</summary> - `dorny/paths-filter v4.0.3@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `skjnldsv/read-package-engines-version-actions v3@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4` → [Updates: `v4`] - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` → [Updates: `v7.1.0`] - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `icewind1991/nextcloud-version-matrix v1.3.3@cd0211ffcef1065e2020cd579e4843b8746e7a58` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/setup-node v7.0.0@820762786026740c76f36085b0efc47a31fe5020` → [Updates: `v7.1.0`] - `actions/upload-artifact v7.0.1@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a` → [Updates: `v7.0.2`] - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `codecov/codecov-action v7.1.1@303a32d7a59b442fa8d48b6a1cc6825c09c847a5` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `ghcr.io/christophwurst/docker-imap-devel latest@sha256:b76a062268d7342ccec549f5323a0b6dc1b6ac55b03367f474934927653f5cb5` → [Updates: `latest`] - `stalwartlabs/stalwart v0.15.5` → [Updates: `v0.16.24`] - `ghcr.io/nextcloud/continuous-integration-mariadb-11.8 latest@sha256:9232089007ddc49b42e5a7e4cc158ac373efebed6885ea0f76e3d4e5f8532bac` - `ghcr.io/nextcloud/continuous-integration-postgres-15 latest@sha256:1939108b31fd841cf01906c431c1802cd984fcfb0e57fb0d714b9e6895c340b0` - `ghcr.io/nextcloud/continuous-integration-redis latest@sha256:4ae220629fc544cd1396b35723137628a4cf7e5355b1d86649073f30249d7cbe` → [Updates: `latest`] - `ubuntu 24.04` → [Updates: `26.04`] </details> <details><summary>.github/workflows/update-public-suffix-list.yml (2)</summary> - `actions/checkout v7.0.1@3d3c42e5aac5ba805825da76410c181273ba90b1` - `peter-evans/create-pull-request v8.1.1@5f6978faf089d4d20b00c7766989d076bb2fc7f1` </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>package.json (83)</summary> - `24 ^0.0.0` - `@ckeditor/ckeditor5-vue ^8.2.0` → [Updates: `^9.0.0-alpha.2`] - `@iframe-resizer/child ^5.5.9` - `@iframe-resizer/parent ^5.5.9` - `@mdi/svg ^7.4.47` - `@nextcloud/auth ^2.6.0` - `@nextcloud/axios ^2.6.0` - `@nextcloud/calendar-js ^8.1.7` - `@nextcloud/cdav-library ^2.8.0` - `@nextcloud/dialogs ^7.5.0` - `@nextcloud/files ^4.1.0` - `@nextcloud/initial-state ^3.0.0` - `@nextcloud/l10n ^3.4.1` - `@nextcloud/logger ^3.0.3` - `@nextcloud/moment ^1.3.5` - `@nextcloud/router ^3.2.0` - `@nextcloud/sharing ^0.4.0` - `@nextcloud/timezones ^1.0.2` - `@nextcloud/vue ^9.13.1` - `@pinia/testing ^2.0.1` - `address-rfc2822 ^2.2.4` - `ckeditor5 ~47.6.2` → [Updates: `~47.7.5`, `~49.0.0-alpha.3`] - `cldr-core ^48.2.0` - `color-convert ^3.1.3` - `core-js ^3.50.0` - `debounce-promise ^3.1.2` - `dompurify ^3.4.15` → [Updates: `^3.4.16`] - `escape-html ^1.0.3` - `franc ^6.2.0` - `html-to-text ^10.0.1` - `ical.js ^2.2.1` - `js-base64 ^3.9.4` - `jstz ^2.1.1` - `lodash ^4.18.1` - `md5 ^2.3.0` - `mitt ^3.0.1` - `nextcloud_issuetemplate_builder ^0.1.0` - `node-forge ^1.4.0` - `p-limit ^7.3.3` - `pinia ^4.0.3` - `process ^0.11.10` - `ramda ^0.32.0` - `raw-loader ^4.0.2` - `stylelint ^17.15.0` → [Updates: `^17.16.0`] - `uuid ^14.0.2` → [Updates: `^14.0.3`] - `vue ^3.5.43` - `vue-dndrop ^1.3.5` - `vue-material-design-icons ^5.3.1` - `vue-router ^5.3.1` → [Updates: `^5.4.0`] - `vue3-shortkey ^4.0.0` - `webdav 5.11.0` - `@babel/core ^8.0.6` → [Updates: `^8.0.7`] - `@babel/preset-env ^8.0.6` → [Updates: `^8.0.7`] - `@nextcloud/babel-config ^2.0.0` - `@nextcloud/browserslist-config ^3.1.2` - `@nextcloud/eslint-config ^9.0.1` - `@nextcloud/stylelint-config ^3.2.2` - `@playwright/test ^1.63.0` → [Updates: `^1.64.0-alpha-2026-10-03`] - `@vitejs/plugin-vue ^6.0.9` → [Updates: `^6.0.10`] - `@vue/test-utils ^2.5.1` - `autoprefixer ^10.6.1` - `babel-loader ^10.1.1` - `babel-loader-exclude-node-modules-except ^1.2.4` - `css-loader ^7.1.5` - `eslint-plugin-vitest-globals ^1.6.1` - `file-loader ^6.2.0` - `jsdom ^30.1.1` → [Updates: `^30.1.2`] - `node-polyfill-webpack-plugin ^4.1.0` - `patch-package ^6.0.7` → [Updates: `^6.5.1`, `^8.0.1`] - `postcss ^8.5.28` → [Updates: `^8.5.29`] - `sass ^1.105.0` → [Updates: `^1.105.1`] - `sass-loader ^17.0.1` - `style-loader ^4.0.0` - `svg-inline-loader ^0.8.2` - `ts-loader ^9.6.2` - `typescript ~6.0.3` → [Updates: `~7.0.2`] - `url-loader ^4.1.1` - `vitest ^5.0.1` → [Updates: `^5.0.3`] - `vue-loader ^17.4.2` - `webpack ^5.111.1` - `webpack-cli ^7.2.3` - `webpack-merge ^6.0.1` - `floating-vue ~5.2.2` → [Updates: `~5.4.0`] </details> </blockquote> </details> </blockquote> </details> <details><summary>Branch stable5.12</summary> <blockquote> <details><summary>composer (7)</summary> <blockquote> <details><summary>composer.json</summary> </details> <details><summary>vendor-bin/cs-fixer/composer.json</summary> </details> <details><summary>vendor-bin/mozart/composer.json</summary> </details> <details><summary>vendor-bin/openapi/composer.json</summary> </details> <details><summary>vendor-bin/phpunit/composer.json</summary> </details> <details><summary>vendor-bin/psalm-stubs/composer.json</summary> </details> <details><summary>vendor-bin/rector/composer.json</summary> </details> </blockquote> </details> <details><summary>github-actions (6)</summary> <blockquote> <details><summary>.github/workflows/appstore-conventional-build-publish.yml</summary> </details> <details><summary>.github/workflows/package.yml</summary> </details> <details><summary>.github/workflows/release-relay.yml</summary> </details> <details><summary>.github/workflows/stale.yml</summary> </details> <details><summary>.github/workflows/test.yml</summary> </details> <details><summary>.github/workflows/update-public-suffix-list.yml</summary> </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>package.json (3)</summary> - `dompurify ^3.4.13` → [Updates: `^3.4.13`] - `node-forge ^1.4.0` - `vue ^2.7.16` → [Updates: `^3.0.0-alpha`] </details> </blockquote> </details> </blockquote> </details> <details><summary>Branch stable5.13</summary> <blockquote> <details><summary>composer (7)</summary> <blockquote> <details><summary>composer.json</summary> </details> <details><summary>vendor-bin/cs-fixer/composer.json</summary> </details> <details><summary>vendor-bin/mozart/composer.json</summary> </details> <details><summary>vendor-bin/openapi/composer.json</summary> </details> <details><summary>vendor-bin/phpunit/composer.json</summary> </details> <details><summary>vendor-bin/psalm-stubs/composer.json</summary> </details> <details><summary>vendor-bin/rector/composer.json</summary> </details> </blockquote> </details> <details><summary>github-actions (7)</summary> <blockquote> <details><summary>.github/workflows/appstore-conventional-build-publish.yml</summary> </details> <details><summary>.github/workflows/package.yml</summary> </details> <details><summary>.github/workflows/release-relay.yml</summary> </details> <details><summary>.github/workflows/stale.yml</summary> </details> <details><summary>.github/workflows/sync-workflow-templates.yml</summary> </details> <details><summary>.github/workflows/test.yml</summary> </details> <details><summary>.github/workflows/update-public-suffix-list.yml</summary> </details> </blockquote> </details> <details><summary>npm (1)</summary> <blockquote> <details><summary>package.json (2)</summary> - `node-forge ^1.4.0` - `vue ^2.7.16` → [Updates: `^3.0.0-alpha`] </details> </blockquote> </details> </blockquote> </details> --- - [ ] <!-- manual job -->Check this box to trigger a request for Renovate to run again on this repository
This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.
Awaiting Schedule
The following updates are awaiting their schedule. To get an update now, click on a checkbox below.
Pending Status Checks
The following updates await pending status checks. To force their creation now, click on a checkbox below.
@babel/core,@babel/preset-env)Open
The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.
Detected Dependencies
Branch main
Branch stable5.12
Branch stable5.13