build(deps): bump uuid from 7.0.3 to 14.0.0#808
build(deps): bump uuid from 7.0.3 to 14.0.0#808dependabot[bot] wants to merge 1 commit intomasterfrom
Conversation
Bumps [uuid](https://github.com/uuidjs/uuid) from 7.0.3 to 14.0.0. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v7.0.3...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Greptile SummaryThis PR bumps Confidence Score: 5/5Safe to merge — uuid is not directly imported in source, Node 20 requirement is already met, and this picks up a security fix. No direct usage of uuid in the application source code means none of the breaking API changes (CJS removal, browser-export default) affect runtime behavior. The CI environment runs Node 20, satisfying uuid v14's node@20+ constraint. The upgrade also resolves a known security advisory. No files require special attention. Important Files Changed
Flowchart%%{init: {'theme': 'neutral'}}%%
flowchart TD
A[package.json\nuuid ^7.0.3] -->|bump| B[package.json\nuuid ^14.0.0]
B --> C{Breaking Changes?}
C -->|CJS removed v12| D[No direct source imports\nNo impact]
C -->|Node 20+ required v14| E[CI already on Node 20\nNo impact]
C -->|Security fix GHSA-w5hq-g745-h8pq| F[OOB write patched\nin v3/v5/v6]
D --> G[Safe to merge]
E --> G
F --> G
Reviews (1): Last reviewed commit: "build(deps): bump uuid from 7.0.3 to 14...." | Re-trigger Greptile |
Bumps uuid from 7.0.3 to 14.0.0.
Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7c1ea08chore(main): release 14.0.0 (#926)3d2c5b0Merge commit from forkf2c235ffix!: expectcryptoto be global everywhere (requires node@20+) (#935)529ef08chore: upgrade TypeScript and fixup types (#927)086fd79chore: update dependencies (#933)dc4ddb8feat!: drop node@18 support (#934)0f1f9c9chore: switch to Biome for parsing and linting (#932)e2879e6chore: use maintained version of npm-run-all (#930)ffa3138fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)0423d49docs: remove obsolete v1 option notes (#915)Maintainer changes
This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.
Install script changes
This version adds
preparescript that runs during installation. Review the package contents before updating.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.