Skip to content

feat(deps): Upgrade blueprint-web to 12.93.4-BUIE #4361

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
jfox-box wants to merge 1 commit into from
Closed

feat(deps): Upgrade blueprint-web to 12.93.4-BUIE #4361

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -124,8 +124,8 @@
"@babel/preset-typescript": "^7.24.7",
"@babel/template": "^7.24.7",
"@babel/types": "^7.24.7",
"@box/blueprint-web": "^12.92.3",
"@box/blueprint-web-assets": "^4.76.5",
"@box/blueprint-web": "^12.93.4-BUIE",
"@box/blueprint-web-assets": "^4.78.4",
Comment on lines +127 to +128
Copy link
Contributor

@coderabbitai coderabbitai bot Nov 6, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

Verify both updated package versions exist on npm registry.

The changes update @box/blueprint-web and @box/blueprint-web-assets consistently across both dependencies and peerDependencies, which is good. However, the -BUIE suffix on the blueprint-web version is non-standard, and web search results suggest @box/blueprint-web-assets 4.78.4 may not exist (latest shown: 4.42.1).

Also applies to: 299-300

🏁 Script executed:

#!/bin/bash
# Verify the specified package versions exist on npm

echo "Checking @box/blueprint-web versions..."
npm view @box/blueprint-web@12.93.4-BUIE version 2>&1

echo ""
echo "Checking @box/blueprint-web-assets versions..."
npm view @box/blueprint-web-assets@4.78.4 version 2>&1

echo ""
echo "Checking latest versions available..."
npm view @box/blueprint-web@latest version
npm view @box/blueprint-web-assets@latest version

Length of output: 546

🏁 Script executed:

#!/bin/bash
# Check for npm registry configuration and custom build setup

echo "=== Checking for .npmrc configuration ==="
if [ -f .npmrc ]; then
  cat .npmrc
else
  echo "No .npmrc file found"
fi

echo ""
echo "=== Checking package.json for npm registry config ==="
rg -A 5 '"registry"' package.json 2>/dev/null || echo "No registry config in package.json"

echo ""
echo "=== Searching for BUIE version references ==="
rg -r "BUIE|12\.93\.4" --type=json --type=md . 2>/dev/null | head -20

echo ""
echo "=== Checking for .npmrc.example or similar ==="
fd -i "npmrc" . 2>/dev/null

echo ""
echo "=== Checking package.json scripts for custom build ==="
jq '.scripts' package.json 2>/dev/null | grep -i "build\|publish\|version" || echo "No relevant scripts"

Length of output: 11675

🏁 Script executed:

#!/bin/bash
# Get exact content of package.json lines around the changed versions

echo "=== Lines 120-135 of package.json ==="
sed -n '120,135p' package.json

echo ""
echo "=== Lines 295-305 of package.json ==="
sed -n '295,305p' package.json

echo ""
echo "=== Check if yarn.lock or package-lock.json exists ==="
if [ -f yarn.lock ]; then
  echo "yarn.lock found - searching for blueprint-web versions..."
  grep -A 2 "@box/blueprint-web" yarn.lock | head -20
fi

if [ -f package-lock.json ]; then
  echo "package-lock.json found - searching for blueprint-web versions..."
  grep -A 2 "@box/blueprint-web" package-lock.json | head -20
fi

Length of output: 2110

Remove or clarify the non-standard -BUIE suffix in @box/blueprint-web version spec.

The package.json specifies @box/blueprint-web@^12.93.4-BUIE, but yarn.lock shows it resolves to 12.93.4 (without the suffix) from the public npm registry. The -BUIE suffix doesn't prevent installation but creates a misleading version spec that doesn't match what actually gets installed.

Either: (1) use ^12.93.4 if the intent is the standard version, or (2) if -BUIE represents a custom build, ensure that exact version is published and resolvable. The @box/blueprint-web-assets@^4.78.4 version is correctly specified and resolves as expected.

🤖 Prompt for AI Agents 
In package.json around lines 127 to 128, the dependency "@box/blueprint-web":
"^12.93.4-BUIE" uses a non-standard "-BUIE" suffix that does not match the
resolved version in yarn.lock (12.93.4); either remove the suffix and change the
spec to "^12.93.4" or, if "-BUIE" denotes a custom build, publish that exact
semver tag to a registry and update package.json to point to the resolvable
package (or use a cid/git/registry URL that resolves to the custom build) so the
declared version matches what actually installs.

"@box/box-ai-agent-selector": "^0.53.0",
"@box/box-ai-content-answers": "^0.139.0",
"@box/box-item-type-selector": "^0.73.1",
Expand Down Expand Up @@ -296,8 +296,8 @@
"webpack-dev-server": "^5.2.1"
},
"peerDependencies": {
"@box/blueprint-web": "^12.92.3",
"@box/blueprint-web-assets": "^4.76.5",
"@box/blueprint-web": "^12.93.4-BUIE",
"@box/blueprint-web-assets": "^4.78.4",
"@box/box-ai-agent-selector": "^0.53.0",
"@box/box-ai-content-answers": "^0.139.0",
"@box/box-item-type-selector": "^0.73.1",
Expand Down
18 changes: 9 additions & 9 deletions yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1419,19 +1419,19 @@
resolved "https://registry.yarnpkg.com/@bcoe/v8-coverage/-/v8-coverage-0.2.3.tgz#75a2e8b51cb758a7553d6804a5932d7aace75c39"
integrity sha512-0hYQ8SB4Db5zvZB4axdMHGwEaQjkZzFjQiN9LVYvIFB2nSUHW9tYpxWriPrWDASIxiaXax83REcLxuSdnGPZtw==

"@box/blueprint-web-assets@^4.76.2", "@box/blueprint-web-assets@^4.76.5":
version "4.76.5"
resolved "https://registry.yarnpkg.com/@box/blueprint-web-assets/-/blueprint-web-assets-4.76.5.tgz#8bfabeacdcd4e09969b7cbe33aab253c6d2875b0"
integrity sha512-3cRuzGYnOskj6D7LjgUwN+ooSiQJK5uxYZxxRMHNLp9mtAsw+p8296/gkG4/Br7x2tsqJ27KpVDa7TPNGGGyig==
"@box/blueprint-web-assets@^4.78.0", "@box/blueprint-web-assets@^4.78.4":
version "4.78.4"
resolved "https://registry.yarnpkg.com/@box/blueprint-web-assets/-/blueprint-web-assets-4.78.4.tgz#7e6c119435713526f2fd2064402213a43cbb8105"
integrity sha512-G1YTyHhsV6EX4yBIhAzFLCnNylWNIfZGT3+L8FggLcPUgrJl3J2dnnhOjBczTNLwZnml5IXGD0OBXNRyy7YtCg==

"@box/blueprint-web@^12.92.3":
version "12.92.3"
resolved "https://registry.yarnpkg.com/@box/blueprint-web/-/blueprint-web-12.92.3.tgz#2828d6d46e8825f93174b3d874a7ada1b61ab90c"
integrity sha512-UnKVlENT2jSvL6ed5Nb/uLA+giQpd6PBUFu/gOsEIE8u/HWYc9qUuyLaZ4IgMl5sNGvAay9FJSv9+d0+DxWtQQ==
"@box/blueprint-web@^12.93.4-BUIE":
version "12.93.4"
resolved "https://registry.yarnpkg.com/@box/blueprint-web/-/blueprint-web-12.93.4.tgz#c9baeaf3a02c9edd692a2f5cb8546f4eefb60e4e"
integrity sha512-dMT6AicXMfN94ckWpONWVFnofsMTQebYHgJyycpC+kHeIYwogIvgxswGsIhZVv61xLrWAvtcK08J16DhWALf6Q==
dependencies:
"@ariakit/react" "0.4.15"
"@ariakit/react-core" "0.4.15"
"@box/blueprint-web-assets" "^4.76.2"
"@box/blueprint-web-assets" "^4.78.0"
"@internationalized/date" "^3.7.0"
"@radix-ui/react-accordion" "1.1.2"
"@radix-ui/react-checkbox" "1.0.4"
Expand Down