Skip to content

refactor: Bump uuid from 10.0.0 to 11.0.5 #2402

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 10, 2025

Bumps uuid from 10.0.0 to 11.0.5.

Release notes

Sourced from uuid's releases.

v11.0.5

11.0.5 (2025-01-09)

Bug Fixes

  • add TS unit test, pin to typescript@5.0.4 (#860) (24ac2fd)

v11.0.4

11.0.4 (2025-01-05)

Bug Fixes

  • docs: insure -> ensure (#843) (d2a61e1)
  • exclude tests from published package (#840) (f992ff4)
  • Test for invalid byte array sizes and ranges in v1(), v4(), and v7() (#845) (e0ee900)

v11.0.3

11.0.3 (2024-11-04)

Bug Fixes

v11.0.2

11.0.2 (2024-10-28)

Bug Fixes

v11.0.1

11.0.1 (2024-10-27)

Bug Fixes

v11.0.0

11.0.0 (2024-10-27)

... (truncated)

Changelog

Sourced from uuid's changelog.

11.0.5 (2025-01-09)

Bug Fixes

  • add TS unit test, pin to typescript@5.0.4 (#860) (24ac2fd)

11.0.4 (2025-01-05)

Bug Fixes

  • docs: insure -> ensure (#843) (d2a61e1)
  • exclude tests from published package (#840) (f992ff4)
  • Test for invalid byte array sizes and ranges in v1(), v4(), and v7() (#845) (e0ee900)

11.0.3 (2024-11-04)

Bug Fixes

11.0.2 (2024-10-28)

Bug Fixes

11.0.1 (2024-10-27)

Bug Fixes

11.0.0 (2024-10-26)

⚠ BREAKING CHANGES

  • refactor v1 internal state and options logic (#780)
  • refactor v7 internal state and options logic, fixes #764 (#779)
  • Port to TypeScript, closes #762 (#763)
  • update node support matrix (only support node 16-20) (#750)

Features

... (truncated)

Commits
  • 46ada3c chore(main): release 11.0.5 (#861)
  • 24ac2fd fix: add TS unit test, pin to typescript@5.0.4 (#860)
  • e426aaa build: use npm pack tarball for local examples and testing instead of .loca...
  • 050cd5b chore(main): release 11.0.4 (#842)
  • e0ee900 fix: Test for invalid byte array sizes and ranges in v1(), v4(), and `v7(...
  • 6e83b3a chore: update deps (#848)
  • 5f58b43 docs: Ensure link to getrandomvalues-not-supported is maintained (#844)
  • d2a61e1 fix(docs): insure -> ensure (#843)
  • f992ff4 fix: exclude tests from published package (#840)
  • 59df709 docs: add notes on platform support (#838)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Bot label; pull requests that updates a dependency file label Jan 10, 2025
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title refactor: bump uuid from 10.0.0 to 11.0.5 refactor: Bump uuid from 10.0.0 to 11.0.5 Jan 10, 2025
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 2423106 to e8a8caa Compare January 12, 2025 03:42
@dblythy
Copy link
Member

dblythy commented Jan 12, 2025

UUID seems to use ??= which seems to cause browserify build to fail

browserify/browserify#2029

Attempted to use babelify to transform to no avail

@mtrezza
Copy link
Member

mtrezza commented Jan 12, 2025

What are the possible solutions to this?

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 8f4ae0f to a4b5d7e Compare January 12, 2025 13:59
@dblythy
Copy link
Member

dblythy commented Jan 13, 2025

Not sure. My thinking was that we need to pass the uuid node module through a babel transform before passing through to browserify. Was unsuccessful here tho. Other solution I can think of would be to move to another bundler such as vite/esbuild

@mtrezza
Copy link
Member

mtrezza commented Jan 13, 2025

If it's the Node-native uuid module, then it would be strange that a bundler doesn't work with it. If there's no issue open in browserify that is likely to be fixed, then maybe we should change the bundler - or upgrade if there's a newer version that may have a fix?

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 465834a to 8fcb06e Compare January 16, 2025 13:09
@mtrezza
Copy link
Member

mtrezza commented Jan 16, 2025

How should we go about this? Maybe move to webpack? Seems better maintained and is way more popular looking at npm stats.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from f9de9c9 to 1afff47 Compare January 16, 2025 14:14
@mtrezza mtrezza mentioned this pull request Jan 16, 2025
3 tasks
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 12d6325 to 11e1bf0 Compare January 17, 2025 18:25
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 5 times, most recently from 060ce70 to 65ea5b0 Compare January 30, 2025 00:28
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 5 times, most recently from ab5441e to 0ffca64 Compare February 3, 2025 16:28
Bumps [uuid](https://github.com/uuidjs/uuid) from 10.0.0 to 11.0.5.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v10.0.0...v11.0.5)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch from 0ffca64 to 05d9204 Compare February 5, 2025 18:40
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 20, 2025

Superseded by #2461.

@dependabot dependabot bot closed this Feb 20, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/uuid-11.0.5 branch February 20, 2025 14:09
@mtrezza mtrezza mentioned this pull request Mar 15, 2025
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Bot label; pull requests that updates a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants