chore(deps): Bump @box/activity-feed and @box/threaded-annotations by jackiejou · Pull Request #4567 · box/box-ui-elements

jackiejou · 2026-05-18T18:05:02Z

Summary

Bump @box/activity-feed from ^1.19.4 to ^1.20.1 and @box/threaded-annotations from ^1.89.1 to ^1.89.8
Bump matching peer dependencies to satisfy the new versions: @box/blueprint-web ^14.30.1 → ^14.31.0, @box/blueprint-web-assets ^4.117.3 → ^4.118.3, @box/collaboration-popover ^1.62.3 → ^1.62.9, @box/readable-time ^1.41.3 → ^1.41.9, @box/user-selector ^1.76.5 → ^1.76.9
Deduplicated yarn.lock

Test plan

yarn test --watchAll=false --testPathPattern="activity-feed-v2|ActivitySidebar" passes (290/290)
npx tsc --noEmit -p tsconfig.json is clean
CI green

Summary by CodeRabbit

Chores
- Updated internal framework and utility dependencies to ensure compatibility and access to the latest improvements.

Bump @box/activity-feed from ^1.19.4 to ^1.20.1 and @box/threaded-annotations from ^1.89.1 to ^1.89.8, along with their required peer dependencies (@box/blueprint-web, @box/blueprint-web-assets, @box/collaboration-popover, @box/readable-time, @box/user-selector). Deduplicated yarn.lock.

coderabbitai · 2026-05-18T18:05:11Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: cc0b9302-cdbd-4668-8e7d-06bad862f211

📥 Commits

Reviewing files that changed from the base of the PR and between 0b102a4 and 793ba62.

⛔ Files ignored due to path filters (1)

yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

package.json

Walkthrough

This PR updates multiple @box/* package versions in both devDependencies and peerDependencies within package.json. Versions are bumped for @box/activity-feed, @box/blueprint-web, @box/blueprint-web-assets, @box/cldr-data, @box/collaboration-popover, @box/readable-time, @box/threaded-annotations, and @box/user-selector.

Changes

@box/\ Dependency Version Updates*

Layer / File(s)	Summary
devDependencies version bumps `package.json`	`@box/activity-feed`, `@box/blueprint-web`, `@box/blueprint-web-assets`, `@box/cldr-data`, `@box/collaboration-popover`, `@box/readable-time`, `@box/threaded-annotations`, and `@box/user-selector` versions are advanced in devDependencies.
peerDependencies version bumps `package.json`	Corresponding `@box/activity-feed`, `@box/blueprint-web`, `@box/blueprint-web-assets`, `@box/collaboration-popover`, `@box/readable-time`, `@box/threaded-annotations`, and `@box/user-selector` versions are advanced in peerDependencies.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

box/box-ui-elements#4362: Both PRs bump @box/blueprint-web and @box/blueprint-web-assets versions in devDependencies and peerDependencies.
box/box-ui-elements#4555: Both PRs update @box/activity-feed and @box/threaded-annotations versions in package.json dependencies.
box/box-ui-elements#4505: Both PRs bump overlapping @box/* packages including @box/blueprint-web and @box/user-selector.

Suggested labels

ready-to-merge

Suggested reviewers

jfox-box
reneshen0328
ahorowitz123

Poem

🐰 Dependencies dance, versions ascend,
@box packages strengthen, updates blend,
Dev and peer alike, synchronized and bright,
Building blocks upgrade to reach new height! ✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title mentions only `@box/activity-feed` and `@box/threaded-annotations`, but the changeset also updates 5 additional `@box` packages (`@box/blueprint-web`, `@box/blueprint-web-assets`, `@box/collaboration-popover`, `@box/readable-time`, `@box/user-selector`), making it partially incomplete.	Consider revising the title to reflect the broader scope (e.g., 'chore(deps): Bump `@box` packages for activity-feed and threaded-annotations compatibility') or accept that it highlights the primary focus while other updates are secondary dependency bumps.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description check	✅ Passed	The pull request description provides a comprehensive Summary with all dependency version changes, a detailed Test plan with specific test commands and results, and mentions yarn.lock deduplication. However, it does not follow the repository's required template structure or address the merge queue/label instructions provided in the template.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

socket-security · 2026-05-18T18:06:25Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@box/collaboration-popover@1.62.3 ⏵ 1.62.9			⁺¹
npm/@box/readable-time@1.41.3 ⏵ 1.41.9			⁺¹
npm/@box/user-selector@1.76.5 ⏵ 1.76.9
npm/@box/activity-feed@1.19.4 ⏵ 1.20.1	⁺¹	⁺¹	⁺¹
npm/@box/threaded-annotations@1.89.1 ⏵ 1.89.8	⁺¹	⁺¹	⁺¹
npm/@box/blueprint-web-assets@4.117.3 ⏵ 4.118.3
npm/@box/blueprint-web@14.30.1 ⏵ 14.31.0	⁺¹	⁺¹

View full report

mergify · 2026-05-18T18:46:57Z

jackiejou marked this pull request as ready for review May 18, 2026 18:06

jackiejou requested a review from a team as a code owner May 18, 2026 18:06

tjiang-box approved these changes May 18, 2026

View reviewed changes

jackiejou added the ready-to-merge label May 18, 2026

ahorowitz123 approved these changes May 18, 2026

View reviewed changes

mergify Bot added the queued label May 18, 2026

mergify Bot merged commit 431105e into box:master May 18, 2026
10 of 11 checks passed

mergify Bot removed the queued label May 18, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump @box/activity-feed and @box/threaded-annotations#4567

chore(deps): Bump @box/activity-feed and @box/threaded-annotations#4567
mergify[bot] merged 1 commit into
box:masterfrom
jackiejou:chore/bump-activity-feed-threaded-annotations-2

jackiejou commented May 18, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented May 18, 2026 •

edited

Loading

❌ Failed checks (1 inconclusive)

Uh oh!

socket-security Bot commented May 18, 2026

Uh oh!

mergify Bot commented May 18, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

jackiejou commented May 18, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Poem

❌ Failed checks (1 inconclusive)

Uh oh!

socket-security Bot commented May 18, 2026

Uh oh!

mergify Bot commented May 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

jackiejou commented May 18, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 18, 2026 •

edited

Loading

mergify Bot commented May 18, 2026 •

edited

Loading