fix: bump uuid package to 13.0.2 (#16545)

AlessioGr · web-flow · commit 274af0679b23 · 2026-05-07T22:00:37.000-06:00
Fixes #16459 Bumps the uuid package from 11.1.0 to 13.0.2 to fix [GHSA-w5hq-g745-h8pq](GHSA-w5hq-g745-h8pq). Can't bump to v14, as v14 drops support for node 18.
diff --git a/packages/db-d1-sqlite/package.json b/packages/db-d1-sqlite/package.json
@@ -77,7 +77,7 @@
     "drizzle-orm": "0.45.2",
     "prompts": "2.4.2",
     "to-snake-case": "1.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
diff --git a/packages/db-mongodb/package.json b/packages/db-mongodb/package.json
@@ -55,7 +55,7 @@
     "mongoose": "8.15.1",
     "mongoose-paginate-v2": "1.9.4",
     "prompts": "2.4.2",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
diff --git a/packages/db-postgres/package.json b/packages/db-postgres/package.json
@@ -82,7 +82,7 @@
     "pg": "8.20.0",
     "prompts": "2.4.2",
     "to-snake-case": "1.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@hyrious/esbuild-plugin-commonjs": "0.2.6",
diff --git a/packages/db-sqlite/package.json b/packages/db-sqlite/package.json
@@ -79,7 +79,7 @@
     "drizzle-orm": "0.45.2",
     "prompts": "2.4.2",
     "to-snake-case": "1.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
diff --git a/packages/db-vercel-postgres/package.json b/packages/db-vercel-postgres/package.json
@@ -82,7 +82,7 @@
     "pg": "8.20.0",
     "prompts": "2.4.2",
     "to-snake-case": "1.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@hyrious/esbuild-plugin-commonjs": "0.2.6",
diff --git a/packages/drizzle/package.json b/packages/drizzle/package.json
@@ -62,7 +62,7 @@
     "drizzle-orm": "0.45.2",
     "prompts": "2.4.2",
     "to-snake-case": "1.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@libsql/client": "0.14.0",
diff --git a/packages/next/package.json b/packages/next/package.json
@@ -123,7 +123,7 @@
     "path-to-regexp": "6.3.0",
     "qs-esm": "8.0.1",
     "sass": "1.77.4",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@babel/cli": "7.27.2",
diff --git a/packages/payload/package.json b/packages/payload/package.json
@@ -128,7 +128,7 @@
     "ts-essentials": "10.0.3",
     "tsx": "4.21.0",
     "undici": "7.24.4",
-    "uuid": "11.1.0",
+    "uuid": "13.0.2",
     "ws": "^8.16.0"
   },
   "devDependencies": {
diff --git a/packages/plugin-stripe/package.json b/packages/plugin-stripe/package.json
@@ -66,7 +66,7 @@
     "@payloadcms/ui": "workspace:*",
     "lodash.get": "^4.4.2",
     "stripe": "^10.2.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@payloadcms/eslint-config": "workspace:*",
diff --git a/packages/richtext-lexical/package.json b/packages/richtext-lexical/package.json
@@ -398,7 +398,7 @@
     "qs-esm": "8.0.1",
     "react-error-boundary": "4.1.2",
     "ts-essentials": "10.0.3",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@babel/cli": "7.27.2",
diff --git a/packages/ui/package.json b/packages/ui/package.json
@@ -159,7 +159,7 @@
     "sonner": "^1.7.2",
     "ts-essentials": "10.0.3",
     "use-context-selector": "2.0.0",
-    "uuid": "11.1.0"
+    "uuid": "13.0.2"
   },
   "devDependencies": {
     "@babel/cli": "7.27.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
diff --git a/test/package.json b/test/package.json
@@ -113,7 +113,7 @@
     "tempy": "^1.0.1",
     "ts-essentials": "10.0.3",
     "typescript": "5.7.3",
-    "uuid": "11.1.0",
+    "uuid": "13.0.2",
     "vitest": "4.1.2",
     "wrangler": "~4.61.1",
     "zod": "^3.25.5"
