chore(deps): Bump @box/activity-feed and @box/threaded-annotations by jackiejou · Pull Request #4555 · box/box-ui-elements

jackiejou · 2026-05-12T18:03:46Z

Summary

Bump @box/activity-feed from ^1.17.0 to ^1.18.3
Bump @box/threaded-annotations from ^1.83.6 to ^1.86.0
Bump required peer deps to match: @box/blueprint-web (^14.18.0 → ^14.27.0), @box/blueprint-web-assets (^4.115.4 → ^4.116.6), @box/collaboration-popover (^1.61.5 → ^1.61.30), @box/readable-time (^1.40.5 → ^1.40.30), @box/user-selector (^1.75.5 → ^1.75.30)
Deduplicated yarn.lock

Test Plan

yarn install succeeds
Full unit test suite passes (973 suites, 11,035 tests)
Verify activity feed and threaded annotations render and behave correctly in Storybook

Summary by CodeRabbit

Chores
- Updated internal dependencies to latest versions for improved stability and compatibility.

Bump @box/activity-feed from ^1.17.0 to ^1.18.3 and @box/threaded-annotations from ^1.83.6 to ^1.86.0, along with their required peer dependencies (@box/blueprint-web, @box/blueprint-web-assets, @box/collaboration-popover, @box/readable-time, @box/user-selector). Deduplicated yarn.lock.

coderabbitai · 2026-05-12T18:03:55Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 19057373-3aa1-4063-a3a0-fc222203d5a6

📥 Commits

Reviewing files that changed from the base of the PR and between e219ed3 and e603532.

⛔ Files ignored due to path filters (1)

yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

package.json

Walkthrough

This PR updates version ranges for seven @box/* packages in package.json: @box/activity-feed, @box/blueprint-web, @box/blueprint-web-assets, @box/collaboration-popover, @box/readable-time, @box/threaded-annotations, and @box/user-selector. The same packages are bumped in both devDependencies and peerDependencies to maintain consistency.

Changes

Box package dependency version updates

Layer / File(s)	Summary
devDependencies `@box/` package bumps* `package.json`	Version ranges for `@box/activity-feed`, `@box/blueprint-web`, `@box/blueprint-web-assets`, `@box/collaboration-popover`, `@box/readable-time`, `@box/threaded-annotations`, and `@box/user-selector` bumped in devDependencies.
peerDependencies `@box/` package bumps* `package.json`	Version ranges for the same seven `@box/`* packages bumped in peerDependencies to mirror devDependencies updates and maintain consistency across dependency declarations.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

box/box-ui-elements#4505: Updates the same @box/* dependency version ranges in package.json.
box/box-ui-elements#4490: Modifies package.json dependency version ranges for several @box/* packages.
box/box-ui-elements#4101: Updates @box/blueprint-web and @box/blueprint-web-assets dependency entries.

Suggested labels

ready-to-merge

Suggested reviewers

tjuanitas
jfox-box
reneshen0328

Poem

🐰 Hop, hop! Dependencies gleam,
Seven packages in the dev/peer stream,
Versions aligned with coordinated care,
Blueprints and feeds now compatible share!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main dependency updates (activity-feed and threaded-annotations), though it omits other bumped peer dependencies.
Description check	✅ Passed	The PR description provides a clear summary of changes with explicit version ranges, test results, and a test plan, but follows a custom format rather than the repository's template.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

Generate code and open pull requests
Plan features and break down work
Investigate incidents and troubleshoot customer tickets together
Automate recurring tasks and respond to alerts with triggers
Summarize progress and report instantly

Built for teams:

Shared memory across your entire org—no repeating context
Per-thread sandboxes to safely plan and execute work
Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Regenerate en-US.properties from a clean build to drop the boxui.shareMenu.* entries left behind after the share module was deprecated. CI rebuilds locales from scratch and was failing the check_generated_files step on this diff.

socket-security · 2026-05-12T19:55:05Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality	Maintenance
npm/@box/activity-feed@1.17.0 ⏵ 1.18.3			⁺⁴
npm/@box/collaboration-popover@1.61.15 ⏵ 1.61.30	⁺¹		⁺¹
npm/@box/readable-time@1.40.15 ⏵ 1.40.30	⁺¹		⁺¹
npm/@box/threaded-annotations@1.83.6 ⏵ 1.86.0	⁺¹	⁺¹	⁺²
npm/@box/user-selector@1.75.15 ⏵ 1.75.30	⁺¹
npm/@box/blueprint-web@14.22.0 ⏵ 14.27.0	⁺¹	⁺¹
npm/@box/blueprint-web-assets@4.115.9 ⏵ 4.116.6	⁺¹	⁺¹

View full report

jfox-box

LGTM

reneshen0328

Love it

mergify · 2026-05-12T23:58:03Z

chore(i18n): Remove stale shareMenu translations

e603532

Regenerate en-US.properties from a clean build to drop the boxui.shareMenu.* entries left behind after the share module was deprecated. CI rebuilds locales from scratch and was failing the check_generated_files step on this diff.

jackiejou marked this pull request as ready for review May 12, 2026 21:29

jackiejou requested a review from a team as a code owner May 12, 2026 21:29

jfox-box approved these changes May 12, 2026

View reviewed changes

jackiejou added the ready-to-merge label May 12, 2026

reneshen0328 approved these changes May 12, 2026

View reviewed changes

Merge branch 'master' into chore/bump-activity-feed-threaded-annotations

b08902b

mergify Bot added the queued label May 12, 2026

mergify Bot merged commit 4ebbbd3 into box:master May 12, 2026
9 of 10 checks passed

mergify Bot removed the queued label May 12, 2026

coderabbitai Bot mentioned this pull request May 14, 2026

feat(activity-feed-v2): Wire edit, copy link, scroll to end #4557

Open

9 tasks

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump @box/activity-feed and @box/threaded-annotations#4555

chore(deps): Bump @box/activity-feed and @box/threaded-annotations#4555
mergify[bot] merged 3 commits into
box:masterfrom
jackiejou:chore/bump-activity-feed-threaded-annotations

jackiejou commented May 12, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented May 12, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 12, 2026 •

edited

Loading

Uh oh!

jfox-box left a comment

Uh oh!

reneshen0328 left a comment

Uh oh!

mergify Bot commented May 12, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

jackiejou commented May 12, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test Plan

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested labels

Suggested reviewers

Poem

Uh oh!

socket-security Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

jfox-box left a comment

Choose a reason for hiding this comment

Uh oh!

reneshen0328 left a comment

Choose a reason for hiding this comment

Uh oh!

mergify Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Merge Queue Status

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

jackiejou commented May 12, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented May 12, 2026 •

edited

Loading

socket-security Bot commented May 12, 2026 •

edited

Loading

mergify Bot commented May 12, 2026 •

edited

Loading