Skip to content

Bump uuid, @wordpress/block-library and eslint-plugin-mdx - #2411

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-6491d35820
Open

Bump uuid, @wordpress/block-library and eslint-plugin-mdx#2411
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-6491d35820

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.2 and updates ancestor dependencies uuid, @wordpress/block-library and eslint-plugin-mdx. These dependencies need to be updated together.

Updates uuid from 8.3.2 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

... (truncated)

Commits
  • fd59f02 chore(main): release 14.0.2 (#967)
  • f3c564e docs: point the Node support permalink at the CI version matrix (#974)
  • b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
  • 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
  • ea83515 docs: cleanup API summary (#968)
  • ac36860 chore: pin publint version in CI (#966)
  • a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
  • 7017780 chore(main): release 14.0.1 (#964)
  • f2c3e4b chore: fix release-please workflow (#963)
  • 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @wordpress/block-library from 3.2.21 to 10.4.0

Changelog

Sourced from @​wordpress/block-library's changelog.

10.4.0 (2026-08-12)

Internal

  • Embed: Use the new @wordpress/kebab-case package instead of unlocking the kebabCase utility from the @wordpress/components private APIs (#81294).

Enhancements

  • Group: Support separate horizontal and vertical block spacing values (#81476).
  • Playlist Track: Use a dedicated icon for the block toolbar. (#80959)
  • Playlist: Expose the parent "Add track" toolbar control to selected Playlist Track child blocks via block toolbar sharing (#80368).
  • Playlist: Allow selecting audio tracks individually in the Media Library without holding Shift or Command, transform multiple Audio blocks into a Playlist, and transform a one-track Playlist into Audio. (#80926)
  • Page List: Rename the "Edit" action to "Detach", and confirm it in a dialog explaining that the list will keep its current pages but stop adding new ones automatically, matching the Gallery block (#80847).
  • Tabs: Start new tabs with an empty label showing a "Tab title" placeholder instead of a generic "Tab" (#81009).
  • Tab Panel: Show the tab's title in the Document Overview instead of the generic block title, so tabs can be told apart (#81427).

Bug Fixes

  • Footnotes: Treat unreadable footnotes post meta as no footnotes instead of throwing, so the block shows its placeholder rather than the block crash warning (#81201).
  • Playlist Track: Show the upload loading indicator inline with the track row.
  • Playlist: Improve handling of declarative waveform player configuration (#81342).
  • Playlist: Update @arraypress/waveform-player to ^1.26.0, disable automatic initialization, and prevent custom SVG icons from being configured through HTML data attributes.
  • Cover: Pass 'full' instead of null as the featured image size for parallax and repeated backgrounds, so a null array offset is no longer reached on PHP 8.5 (#81444).

Internal

  • Details: Import withIgnoreIMEEvents from @wordpress/keycodes instead of unlocking it from @wordpress/components (#81343).

10.3.0 (2026-07-29)

Enhancements

  • Playlist: Shorten the track toolbar button label from "Add track" to "Add".
  • Gallery: Rename the dynamic variation's "Convert to images" action to "Detach", and confirm it in a dialog explaining that the gallery will keep its current images but stop updating automatically (#80727).

Bug Fixes

  • Table of Contents: Continue rendering saved legacy content until the post is edited and resaved.
  • Navigation Overlay Close: Inherit typography and color from the overlay, so the button follows the theme font instead of the browser default button styles (#80751).
  • Playlist: Update @arraypress/waveform-player to ^1.23.0, which no longer sets crossorigin="anonymous" on its audio element, fixing playback of tracks served without CORS headers such as media offloaded to a CDN (#80533).
  • Post Content: Restrict the wrapper tag to the supported values offered in the editor.
  • Post Date: Escape date values and link URLs before rendering the block.

Internal

  • Update memize to 2.1.1 (#80764).
  • Image: Check only window.__clientSideMediaProcessing for sideloading status, following the removal of the redundant window.__heicUploadSupport flag (#80452).

10.2.0 (2026-07-14)

... (truncated)

Commits
  • 989764d chore(release): publish
  • e18aa00 Update changelog files
  • dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
  • 7e8b17a chore(release): publish
  • 42ad080 Update changelog files
  • edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
  • e9a74f9 chore(release): publish
  • 2a0c375 Update changelog files
  • e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
  • 1055a35 Update changelog files
  • Additional commits viewable in compare view

Updates eslint-plugin-mdx from 1.17.1 to 3.8.1

Release notes

Sourced from eslint-plugin-mdx's releases.

eslint-plugin-mdx@3.8.1

Patch Changes

  • #615 e36f2db Thanks @​JounQin! - fix: support ESLint config inspector

  • Updated dependencies []:

    • eslint-mdx@3.8.1

eslint-plugin-mdx@3.8.0

Minor Changes

Patch Changes

  • Updated dependencies []:
    • eslint-mdx@3.8.0

eslint-plugin-mdx@3.7.1

Patch Changes

  • Updated dependencies [a581355]:
    • eslint-mdx@3.7.1

eslint-plugin-mdx@3.7.0

Minor Changes

Patch Changes

eslint-plugin-mdx@3.6.2

Patch Changes

  • #593 3e862c7 Thanks @​JounQin! - fix: set processor for flat config

  • #593 3e862c7 Thanks @​JounQin! - fix: prefer context.languageOptions.parserOptions over context.parserOptions

  • Updated dependencies []:

    • eslint-mdx@3.6.2

eslint-plugin-mdx@3.6.1

Patch Changes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for eslint-plugin-mdx since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.2 and updates ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [@wordpress/block-library](https://github.com/WordPress/gutenberg/tree/HEAD/packages/block-library) and [eslint-plugin-mdx](https://github.com/mdx-js/eslint-mdx). These dependencies need to be updated together.


Updates `uuid` from 8.3.2 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.2)

Updates `@wordpress/block-library` from 3.2.21 to 10.4.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/block-library/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/block-library@10.4.0/packages/block-library)

Updates `eslint-plugin-mdx` from 1.17.1 to 3.8.1
- [Release notes](https://github.com/mdx-js/eslint-mdx/releases)
- [Changelog](https://github.com/mdx-js/eslint-mdx/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mdx-js/eslint-mdx/compare/v1.17.1...eslint-plugin-mdx@3.8.1)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 14.0.2
  dependency-type: indirect
- dependency-name: "@wordpress/block-library"
  dependency-version: 10.4.0
  dependency-type: direct:development
- dependency-name: eslint-plugin-mdx
  dependency-version: 3.8.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 20, 2026
@changeset-bot

changeset-bot Bot commented Aug 20, 2026

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: e400662

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@netlify

netlify Bot commented Aug 20, 2026

Copy link
Copy Markdown

Deploy Preview for cloudfour-patterns ready!

Name Link
🔨 Latest commit e400662
🔍 Latest deploy log https://app.netlify.com/projects/cloudfour-patterns/deploys/6a878f391956a40008806f7c
😎 Deploy Preview https://deploy-preview-2411--cloudfour-patterns.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants