Update dependency uuid to v14#85
Conversation
renovate
Bot
changed the title
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/uuid-14.x
branch
2 times, most recently
from
9cd7e58 to
e4c7edf
Compare
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
🤖 PR Reviewer
The diff bumps the uuid dev dependency from ^11.1.0 to ^14.0.0. This is a major version jump (skipping v12 and v13) that may introduce breaking API changes. Since uuid is only a devDependency it has limited risk, but the large version jump warrants verification that tests still pass and no breaking changes affect usage.
📝 1 suggestion(s) - Please review inline comments below.
💡 How to re-trigger
Comment /review or /pr-reviewer on this PR
| "devDependencies": { | ||
| "jest": "^30.2.0", | ||
| "uuid": "^11.1.0" | ||
| "uuid": "^14.0.0" |
There was a problem hiding this comment.
Jumping from uuid ^11.1.0 to ^14.0.0 skips two major versions. Major version increments in semver indicate breaking changes. Verify the uuid API used in tests is still compatible with v14, or consider upgrading incrementally (e.g., to ^12.0.0 first) after reviewing changelogs.
| "uuid": "^14.0.0" | |
| "uuid": "^12.0.0" |
This PR contains the following updates:
^11.1.0→^14.0.0Release Notes
uuidjs/uuid (uuid)
v14.0.0Compare Source
Security
v3(),v5(), andv6()did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalidoffsetwas provided. ARangeErroris now thrown ifoffset < 0oroffset + 16 > buf.length.⚠ BREAKING CHANGES
cryptois now expected to be globally defined (requires node@20+) (#935)v13.0.2Compare Source
v13.0.1Compare Source
Bug Fixes
v13.0.0Compare Source
⚠ BREAKING CHANGES
Bug Fixes
v12.0.1Compare Source
v12.0.0Compare Source
⚠ BREAKING CHANGES
Features
Bug Fixes
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.