chore(deps): update dependency @nextcloud/vue to v9.11.0

[renovate-bot-cbcoutinho]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@nextcloud/vue	9.9.0 → 9.11.0

---

Release Notes

nextcloud-libraries/nextcloud-vue (@​nextcloud/vue)

v9.11.0

Compare Source

Full Changelog

🚀 Enhancements

• feat(NcAppSidebarTab): add animation effect for tab button #​8793 (jancborchardt)
• feat(NcSelect): add helperText support #​8787 (skjnldsv)

🐛 Fixed bugs

• fix(NcActionInput): display arrow icon for submit #​8884 (odzhychko)
• fix(NcActions) Listen on afterHide instead of non-existing afterClosed. #​8870 (rotdrop)
• fix(NcSelect): align the multiple variant width with the single one #​8893 (skjnldsv)
• fix(NcAppNavigationItem): backwards tabbing action selection #​8821 ([GVodyanov)

v9.10.0

Compare Source

Full Changelog

🚀 Enhancements

• fix(NcSelect): floating label design using NcTextField #​8570 (skjnldsv)
• feat(NcPopover): animate open/close and remove arrow, fix #​8690 #​8769 (jancborchardt)
• feat(NcHeaderMenu): animate open/close and remove caret #​8770 (jancborchardt)
• feat(styling): Clicky controls #​8579 (kra-mo)
• feat: profile popover card #​8845 (kristian-zendato)
• feat(NcAppNavigation): add animation effect for navigation items #​8685 (jancborchardt)
• feat(NcDateTimePickerNative): floating label design #​8768 (skjnldsv)

🐛 Fixed bugs

• fix(actions): top-align icons with multi-line action labels #​8730 (jancborchardt)
• fix(NcAppNavigationToggle): Use more common left panel toggle icon #​8746 (kra-mo)
• fix(NcAppNavigationItem): close mobile navigation on router-link click #​8732 (jancborchardt)
• fix(NcDateTimePicker): use translated words in dates formatted with a format string #​8644 (odzhychko)
• fix(NcAppNavigationItem): tabbing on editable items #​8212 (GVodyanov)
• fix: generating avatar with unusual display name #​8792 (madbob)
• fix(NcDateTimePicker): handle text input for default formatting #​8657 (odzhychko)
• fix(NcAppNavigation, NcAppSidebar): More graceful animations #​8691 (kra-mo)
• fix(NcDateTimePicker): avoid rerendering picker on locale change #​8836 (odzhychko)
• fix(useFormatDateTime): properly handle invalid dates #​8852 (susnux)
• fix(NcProgressBar): properly assign attributes #​8851 (susnux)
• fix(NcSelect): truncate long selected labels without overflowing the input #​8829 (Koc)
• fix(NcCheckboxRadioSwitch): expose switch type with role=switch #​8747 (skjnldsv)

Other Changes

• chore: make prerelease script reusable, ignore bots #​8731 (Antreesy)
• test(NcDateTimePicker): shrink number of locales for the snapshot test case #​8825 (odzhychko)

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
astrolabe-docs	Ready	Preview	Sep 1, 2026 4:05am UTC

[claude]

Claude finished @renovate-bot-cbcoutinho[bot]'s task in 35s —— View job

---

Claude's Review

• Gather context (PR diff, CLAUDE.md)
• Review the change
• Post final review

Summary

This is an automated Renovate dependency bump touching only package-lock.json (+30/-30). It updates @nextcloud/vue — currently pinned in package.json:30 as ^9.3.3, so 9.9.0 → 9.11.0 stays within the existing semver range and requires no package.json change. Transitive bumps: @vueuse/core/@vueuse/components/@vueuse/metadata/@vueuse/shared 14.3.0→14.4.0, dompurify ^3.4.12→^3.4.14, p-queue ^9.3.1→^9.3.3, vue-router peer range ^5.1.0→^5.2.0.

(Note: the diff currently reflects 9.9.0 → 9.11.0 — one minor ahead of the 9.10.0 in the PR title/description — since Renovate has resynced the branch to the latest release since this PR was opened.)

Review notes

• Code quality / correctness — No hand-written code changes; this is a machine-generated lockfile diff, so there's nothing to review for style or logic.
• Security — dompurify is bumped (sanitization library used for XSS protection), which is a net-positive patch-level update. No new/removed packages, no license changes flagged.
• Breaking changes — Per CLAUDE.md's breaking-change policy, this only applies to changes this app makes to its own API surface; a dependency lockfile bump doesn't need a BREAKING CHANGE: footer. Worth a quick manual check of the 9.10.0 and 9.11.0 changelogs for any NcSelect/NcPopover/NcAppNavigation/NcDateTimePicker components actually used in src/, since those saw the most behavioral/animation changes (e.g. NcPopover open/close animation, NcSelect label truncation) — a visual smoke test of the admin/personal settings screens after merge is a good idea given several of the changed components render inside forms.
• Test coverage — No app API surface changed, so the CLAUDE.md mandatory Pact/E2E coverage gate for new API routes doesn't apply here. Existing CI (CI, E2E Tests, Pact) will validate build/lint/e2e against the new lockfile; at review time CI and E2E Tests were still in progress and Pact had passed — worth confirming they're green before merging.

No blocking issues found. Safe to merge once CI passes and, ideally, after a quick visual check of any Nextcloud-Vue components used in the settings UI.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud