Skip to content

chore(deps): bump uuid from 11.1.1 to 14.0.1#52

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/uuid-14.0.1
Closed

chore(deps): bump uuid from 11.1.1 to 14.0.1#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/uuid-14.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor

Bumps uuid from 11.1.1 to 14.0.1.

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


@dependabot @github

dependabot Bot commented on behalf of github Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot requested a review from itsbkm as a code owner July 7, 2026 00:04
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/uuid-14.0.1 branch 2 times, most recently from d90a0b9 to 57655de Compare July 10, 2026 18:38
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/uuid-14.0.1 branch 2 times, most recently from d7cc6df to de8362a Compare July 15, 2026 21:45
@dependabot dependabot Bot changed the title chore(deps): bump uuid from 9.0.1 to 14.0.1 chore(deps): bump uuid from 11.1.1 to 14.0.1 Jul 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/uuid-14.0.1 branch 3 times, most recently from a24acde to d5a4d0f Compare July 21, 2026 13:37
Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.1.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.1...v14.0.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/uuid-14.0.1 branch from d5a4d0f to 33ba01c Compare July 21, 2026 21:08
@khaira777
khaira777 force-pushed the main branch 2 times, most recently from 46f0145 to c6f9e70 Compare July 22, 2026 21:59
itsbkm added a commit that referenced this pull request Jul 25, 2026
Dependabot had these open (PRs #112, #52). better-sqlite3 13 moves to
N-API-based prebuilds (verified the bundled linux-x64.node prebuild
only needs up to GLIBC_2.34, well under the ubuntu-24.04 runner's
2.39 -- a changelog note about "glibc 2.41" for Electron v43 assets
doesn't apply to what's actually shipped). uuid 14 is a no-op for us,
already on the ESM-only import style since v9.

Rebuilt better-sqlite3 against the Electron 43 ABI and reran the full
test suite (60+ suites, exit 0) plus a clean tsc build to confirm.

Also attempted eslint 9 -> 10 (PR #98, frontend) but reverted it:
eslint-config-next's bundled eslint-plugin-react calls a rule-context
API ESLint 10 removed, so `npm run lint` crashes outright. Left at ^9
pending an eslint-config-next release that supports ESLint 10.

Not touching PRs #99/#113 (typescript 5.9.3 -> 7.0.2): typescript-eslint
explicitly caps its typescript peer range below 6.1.0 and has no
stable compiler API for TS7 yet, so pulling it in would break linting
project-wide. Revisit once typescript-eslint ships TS7 support.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor Author

Looks like uuid is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 25, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/uuid-14.0.1 branch July 25, 2026 13:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants