From d2046b47ead1a38152efe0dad124f73291f6562b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Mon, 31 Aug 2026 05:17:51 +0000
Subject: [PATCH] chore(deps): refresh the shared Conduction locks

hydra-gates v1.10.0 -> v1.10.0
nc-vue      2.25.1 -> 2.26.0

Lock-only: both packages are already declared with caret ranges that
permit these versions, so nothing about what this app ACCEPTS changes
- only what it currently resolves to. Opened by the weekly fleet
shared-dependency bump, because a lock nobody re-resolves is a pin
nobody chose.

Merging is gated by this repository's own suite, deliberately: taking
hydra-gates v1.8.1 added patchObject() to a published interface, which
is a load-time fatal for any concrete double that implements it without
the method. CI is the only thing that can tell a safe bump from that.
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index e29463e0..048189ba 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -2198,9 +2198,9 @@
       }
     },
     "node_modules/@conduction/nextcloud-vue": {
-      "version": "2.25.1",
-      "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.25.1.tgz",
-      "integrity": "sha512-c5sY4XnHrfGUIUEatJEIT5jK78k9REj2UCqXylbHiDPkv1HpUx7Sf3XtfDxAd4xPjn/kbO094rNqShK4tPnY7w==",
+      "version": "2.26.0",
+      "resolved": "https://registry.npmjs.org/@conduction/nextcloud-vue/-/nextcloud-vue-2.26.0.tgz",
+      "integrity": "sha512-PrEd1Ej9UMXTw7qzq6WqqPnwdO2yLlJvj8/Lz7fGbtrUbO8xUAkPwgJlKNbsWHv2DhhF5G/MRN4ZA+YvNDaJIg==",
       "license": "EUPL-1.2",
       "dependencies": {
         "@ckpack/vue-color": "^1.6.0",