feat(content-sharing): bump usm version for desktop view

[reneshen0328]

Summary by CodeRabbit

• Chores
  • Updated multiple internal dependency versions to maintain compatibility and improve system stability.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 593e7c4b-9dca-4713-99c8-3a21d45a9f51

📥 Commits

Reviewing files that changed from the base of the PR and between 248012e and fbb0c08.

⛔ Files ignored due to path filters (1)

• yarn.lock is excluded by !**/yarn.lock, !**/*.lock

📒 Files selected for processing (1)

• package.json

---

Walkthrough

This PR updates version ranges for five @box/* packages across both devDependencies and peerDependencies sections of package.json. The same packages (@box/blueprint-web, @box/blueprint-web-assets, @box/copy-input, @box/unified-share-modal, and @box/user-selector) are bumped consistently in both dependency contexts.

Changes

Dependency version updates

Layer / File(s)	Summary
devDependencies version updates package.json	Blueprint web, blueprint web assets, and copy-input packages are bumped (lines 128–136), followed by unified-share-modal and user-selector (lines 148–149).
peerDependencies version updates package.json	The same five packages are bumped in peerDependencies to match the devDependencies versions (lines 296–304 and 314–315).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• box/box-ui-elements#4505: Both PRs modify package.json dependency version ranges for the same overlapping @box/* packages in both devDependencies and peerDependencies.
• box/box-ui-elements#4490: Both PRs perform coordinated version bumps of the same @box/* packages (blueprint-web, blueprint-web-assets, copy-input, unified-share-modal, user-selector) across both dependency sections.
• box/box-ui-elements#4359: Both PRs update package.json dependency version ranges for the same Box packages without code or logic changes.

Suggested labels

ready-to-merge

Suggested reviewers

• jfox-box
• tjuanitas
• jpan-box

Poem

🐰 Five packages hop and skip,
Versions synced—devDeps and peer lips,
Blueprint, share, and input too,
All in sync, shiny and new! ✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description contains only the repository's merge process template with no custom information about the specific changes or rationale for this pull request.	Add a custom description explaining what changes were made, why the USM version bump is needed, and any related testing or impact considerations before the template section.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: bumping the unified-share-modal (USM) package version for desktop view support, which aligns with the package.json dependency updates.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch bump-usm-package-to-2.15.5

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​box/​copy-input@​1.40.21 ⏵ 1.42.5
	npm/​@​box/​unified-share-modal@​2.12.4 ⏵ 2.15.5
	npm/​@​box/​user-selector@​1.75.30 ⏵ 1.76.5
	npm/​@​box/​blueprint-web@​14.27.0 ⏵ 14.30.1	+1		+1	+1
	npm/​@​box/​blueprint-web-assets@​4.116.6 ⏵ 4.117.3	+1			+1

View full report

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-05-14 22:14 UTC · Rule: Automatic strict merge
• ✅ Checks skipped · PR is already up-to-date
• ✅ Merged — 2026-05-14 22:15 UTC · at fbb0c08286561f953890b33b8485b59004a73e0e · squash

This pull request spent 29 seconds in the queue, including 4 seconds running CI.

Required conditions to merge

• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • feat(content-sharing): bump usm version for desktop view #4558
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • feat(content-sharing): bump usm version for desktop view #4558
• #review-threads-unresolved = 0 [🛡 GitHub branch protection]
  • feat(content-sharing): bump usm version for desktop view #4558
• github-review-decision = APPROVED [🛡 GitHub branch protection]
  • feat(content-sharing): bump usm version for desktop view #4558
• any of [🛡 GitHub branch protection]:
  • check-success = Summary
  • check-neutral = Summary
  • check-skipped = Summary
• any of [🛡 GitHub branch protection]:
  • check-success = lint_test_build
  • check-neutral = lint_test_build
  • check-skipped = lint_test_build
• any of [🛡 GitHub branch protection]:
  • check-success = license/cla
  • check-neutral = license/cla
  • check-skipped = license/cla
• any of [🛡 GitHub branch protection]:
  • check-success = lint_pull_request
  • check-neutral = lint_pull_request
  • check-skipped = lint_pull_request