chore(deps): bump metadata editor and metadata taxonomy picker versions

[AnnaStepchenko]

• Bump @box/metadata-editor from ^2.2.28 to ^2.4.19
• Bump @box/metadata-taxonomy-picker from ^3.1.25 to ^3.3.1

Summary by CodeRabbit

• Chores
  • Updated supporting metadata editor and taxonomy picker components to newer versions.
  • No user-facing feature changes.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​box/​metadata-editor@​2.2.28 ⏵ 2.4.19			-1
	npm/​@​box/​metadata-taxonomy-picker@​3.1.25 ⏵ 3.3.1			-1	+1

View full report

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: dcf38f31-9124-490f-9244-6345f783d47b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Walkthrough

This PR updates two @box development dependency versions in package.json. It bumps @box/metadata-editor to ^2.4.19 and @box/metadata-taxonomy-picker to ^3.3.1.

Changes

Dependency updates

Layer / File(s)	Summary
Development dependency bumps package.json	devDependencies now use @box/metadata-editor ^2.4.19 and @box/metadata-taxonomy-picker ^3.3.1. @box/metadata-filter is unchanged.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• box/box-ui-elements#4359: Both PRs only bump @box dependency versions in package.json.
• box/box-ui-elements#4195: Both PRs update @box/metadata-editor in package.json.
• box/box-ui-elements#4155: Both PRs update the @box/metadata-editor dependency version.

Suggested reviewers: tjuanitas, marcoartaviaq, jpan-box

Poem

Bunny paws tap package.json at dawn,
Two small version hops now carry on.
metadata-editor leapt ahead,
taxonomy-picker too, it said.
I twitch my nose and grin with cheer—
neat little bumps have landed here.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly identifies the dependency version updates for metadata editor and metadata taxonomy picker.
Description check	✅ Passed	The description lists both dependency updates and their previous and new versions, which matches the pull request objectives.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bump-md-editor-and-md-taxonomy-picker

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[AnnaStepchenko]

https://github.com/Mergifyio queue

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-08-05 14:57 UTC · Rule: Automatic strict merge · triggered by @AnnaStepchenko with the @mergifyio queue command
• ✅ Checks passed · in-place
• ✅ Merged — 2026-08-05 15:10 UTC · at 47c7929a3fa34f361497609c9c981a9f0442392c · squash

This pull request spent 13 minutes 16 seconds in the queue, including 12 minutes 42 seconds running CI.

Required conditions to merge

• github-review-approved [🛡 GitHub branch protection]
  • chore(deps): bump metadata editor and metadata taxonomy picker versions #4752
• any of [🛡 GitHub branch protection]:
  • check-success = Summary
  • check-neutral = Summary
  • check-skipped = Summary
• any of [🛡 GitHub branch protection]:
  • check-success = lint_test_build
  • check-neutral = lint_test_build
  • check-skipped = lint_test_build
• any of [🛡 GitHub branch protection]:
  • check-success = license/cla
  • check-neutral = license/cla
  • check-skipped = license/cla
• any of [🛡 GitHub branch protection]:
  • check-success = lint_pull_request
  • check-neutral = lint_pull_request
  • check-skipped = lint_pull_request

[AnnaStepchenko]

https://github.com/Mergifyio queue

[mergify]

queue

☑️ Command queue ignored because it is already running from a previous command.