build(deps): bump com.kingsrook.qqq:qqq-frontend-next from 1.0.0-RC.35 to 1.0.0-RC.37 in /demo #4

Open
dependabot[bot] wants to merge 1 commits from dependabot/maven/demo/develop/com.kingsrook.qqq-qqq-frontend-next-1.0.0-RC.37 into develop
pull from: dependabot/maven/demo/develop/com.kingsrook.qqq-qqq-frontend-next-1.0.0-RC.37
dependabot[bot] commented 2026-10-29 19:17:30 +00:00 (Migrated from github.com)

Bumps com.kingsrook.qqq:qqq-frontend-next from 1.0.0-RC.35 to 1.0.0-RC.37.

Release notes

Sourced from com.kingsrook.qqq:qqq-frontend-next's releases.

Next UI 1.0.0-RC.36

Next UI 1.0.0-RC.36 fixes accessibility on app homes (PR175, Dashboard Wave 0): link text now meets 4.5:1 contrast through a derived link color, clear buttons have 24px targets, widget titles are h2 headings, and the skip link takes focus correctly.

RC35 and earlier remain immutable. Final 1.0 remains held for application soak and explicit owner approval.

Artifacts: com.kingsrook.qqq:qqq-frontend-next:1.0.0-RC.36 and ghcr.io/qrun-io/qqq-frontend-next:1.0.0-RC.36 (linux/amd64 and linux/arm64). The signed annotated tag v1.0.0-RC.36 fixes source 1b37e5efa954e31d00db8c4434836d100d1da50f (merge of PR176). Change summary: docs/releases/1.0.0-RC.36.md.

Publishers: Maven Central and GHCR succeeded. The tag build (node_app_build 738) passed.

  • Public JAR SHA-256: 47a803bc230c0de9bada1a24cafeabb7072386ff00d17192d0cbfb8f835bcd87.
  • Public POM SHA-256: 4eb475c6042e184caf755210843111230580971b3fb2760827fea4aec123511c.
  • OCI index: sha256:4a3dd72e3598b3fb4e9de1d99a2e5de62a6bf518ebba9402ed45a400d4349ea9.
  • OCI linux/amd64: sha256:84b143c03bdedb6ac60397f48352d69c1bbc1edbe479f8510c3a9b1512f1628a.
  • OCI linux/arm64: sha256:93e537572a639f0ca7f294ea6964abee6e9608283bbd4cc43035f2f7534bd0f1.

Backend: unchanged from RC35. This release does not publish QQQ 4.1. The bundle budget is report-only.

The automatic tag real-backend acceptance run was started at publication. Its result will be appended here, and a failure will not be recorded as a success. No GA approval is implied.

Commits
  • 13abaa7 fix: patch frontend RC development tool advisories
  • 2f556af release: prepare RC37 collaboration frontend candidate
  • dce92cf test: verify marking mentions read refreshes My Work
  • 8d37214 test: wait for help results before search navigation
  • 0f0ebc5 fix: retain Auth0 display profile with canonical presence identity
  • dad2a79 fix: patch frontend dependencies for collaboration candidate
  • de5c1bd feat: integrate issued collaboration presence leases
  • 09828ab ci: adopt central orb 0.7.12 and stable gates (#190)
  • c39748b test: stabilize widget layout and report reload acceptance (#189)
  • 829ef6b ci: align canonical shared orb workers (#188)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps [com.kingsrook.qqq:qqq-frontend-next](https://github.com/QRun-IO/qqq-frontend-next) from 1.0.0-RC.35 to 1.0.0-RC.37. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/QRun-IO/qqq-frontend-next/releases">com.kingsrook.qqq:qqq-frontend-next's releases</a>.</em></p> <blockquote> <h2>Next UI 1.0.0-RC.36</h2> <p>Next UI <strong>1.0.0-RC.36</strong> fixes <strong>accessibility</strong> on app homes (<a href="https://redirect.github.com/QRun-IO/qqq-frontend-next/pull/175">PR175</a>, Dashboard Wave 0): link text now meets 4.5:1 contrast through a derived link color, clear buttons have 24px targets, widget titles are h2 headings, and the skip link takes focus correctly.</p> <p>RC35 and earlier remain immutable. Final 1.0 remains held for application soak and explicit owner approval.</p> <p>Artifacts: <code>com.kingsrook.qqq:qqq-frontend-next:1.0.0-RC.36</code> and <code>ghcr.io/qrun-io/qqq-frontend-next:1.0.0-RC.36</code> (linux/amd64 and linux/arm64). The signed annotated tag <code>v1.0.0-RC.36</code> fixes source <code>1b37e5efa954e31d00db8c4434836d100d1da50f</code> (merge of <a href="https://redirect.github.com/QRun-IO/qqq-frontend-next/pull/176">PR176</a>). Change summary: <a href="https://github.com/QRun-IO/qqq-frontend-next/blob/v1.0.0-RC.36/docs/releases/1.0.0-RC.36.md">docs/releases/1.0.0-RC.36.md</a>.</p> <p>Publishers: <a href="https://circleci.com/gh/QRun-IO/qqq-frontend-next/737">Maven Central</a> and <a href="https://github.com/QRun-IO/qqq-frontend-next/actions/runs/38925787676">GHCR</a> succeeded. The tag build (<a href="https://circleci.com/gh/QRun-IO/qqq-frontend-next/738">node_app_build 738</a>) passed.</p> <ul> <li>Public JAR SHA-256: <code>47a803bc230c0de9bada1a24cafeabb7072386ff00d17192d0cbfb8f835bcd87</code>.</li> <li>Public POM SHA-256: <code>4eb475c6042e184caf755210843111230580971b3fb2760827fea4aec123511c</code>.</li> <li>OCI index: <code>sha256:4a3dd72e3598b3fb4e9de1d99a2e5de62a6bf518ebba9402ed45a400d4349ea9</code>.</li> <li>OCI linux/amd64: <code>sha256:84b143c03bdedb6ac60397f48352d69c1bbc1edbe479f8510c3a9b1512f1628a</code>.</li> <li>OCI linux/arm64: <code>sha256:93e537572a639f0ca7f294ea6964abee6e9608283bbd4cc43035f2f7534bd0f1</code>.</li> </ul> <p>Backend: unchanged from RC35. This release does not publish QQQ 4.1. The bundle budget is report-only.</p> <p>The automatic tag <a href="https://github.com/QRun-IO/qqq-frontend-next/actions/runs/38925787603">real-backend acceptance run</a> was started at publication. Its result will be appended here, and a failure will not be recorded as a success. No GA approval is implied.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/13abaa795d71f0a2213409fb910003920b82f3c3"><code>13abaa7</code></a> fix: patch frontend RC development tool advisories</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/2f556afadfaada5aa975f7b956080f32b8e34732"><code>2f556af</code></a> release: prepare RC37 collaboration frontend candidate</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/dce92cfba1f02f7969c19b59d4442f5488b3821e"><code>dce92cf</code></a> test: verify marking mentions read refreshes My Work</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/8d372142f8af0c41a75a353edc6d150c33ccf613"><code>8d37214</code></a> test: wait for help results before search navigation</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/0f0ebc524f2bfb51dff5e19aadc7af983f20f417"><code>0f0ebc5</code></a> fix: retain Auth0 display profile with canonical presence identity</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/dad2a798244f5878f214c8776e7b96fd0415e2ff"><code>dad2a79</code></a> fix: patch frontend dependencies for collaboration candidate</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/de5c1bd0662094278eaa23ad29212b0c06618329"><code>de5c1bd</code></a> feat: integrate issued collaboration presence leases</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/09828ab1ccf5acb76dcd24ac564023fb4f3e85c7"><code>09828ab</code></a> ci: adopt central orb 0.7.12 and stable gates (<a href="https://redirect.github.com/QRun-IO/qqq-frontend-next/issues/190">#190</a>)</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/c39748b1a07ee78bda4452c1968b5620763e4d51"><code>c39748b</code></a> test: stabilize widget layout and report reload acceptance (<a href="https://redirect.github.com/QRun-IO/qqq-frontend-next/issues/189">#189</a>)</li> <li><a href="https://github.com/QRun-IO/qqq-frontend-next/commit/829ef6b3849cbd43c748ff4100425a5f259b67f3"><code>829ef6b</code></a> ci: align canonical shared orb workers (<a href="https://redirect.github.com/QRun-IO/qqq-frontend-next/issues/188">#188</a>)</li> <li>Additional commits viewable in <a href="https://github.com/QRun-IO/qqq-frontend-next/compare/v1.0.0-RC.35...v1.0.0-RC.37">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.kingsrook.qqq:qqq-frontend-next&package-manager=maven&previous-version=1.0.0-RC.35&new-version=1.0.0-RC.37)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
KofTwentyTwo (Migrated from github.com) reviewed 2026-10-29 19:17:30 +00:00
This pull request has changes conflicting with the target branch.
  • demo/pom.xml
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin dependabot/maven/demo/develop/com.kingsrook.qqq-qqq-frontend-next-1.0.0-RC.37:dependabot/maven/demo/develop/com.kingsrook.qqq-qqq-frontend-next-1.0.0-RC.37
git checkout dependabot/maven/demo/develop/com.kingsrook.qqq-qqq-frontend-next-1.0.0-RC.37
Sign in to join this conversation.