Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: Bump uuid from 10.0.0 to 11.0.5 #2402

Open
wants to merge 1 commit into
base: alpha
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 10, 2025

Bumps uuid from 10.0.0 to 11.0.5.

Release notes

Sourced from uuid's releases.

v11.0.5

11.0.5 (2025-01-09)

Bug Fixes

v11.0.4

11.0.4 (2025-01-05)

Bug Fixes

  • docs: insure -> ensure (#843) (d2a61e1)
  • exclude tests from published package (#840) (f992ff4)
  • Test for invalid byte array sizes and ranges in v1(), v4(), and v7() (#845) (e0ee900)

v11.0.3

11.0.3 (2024-11-04)

Bug Fixes

v11.0.2

11.0.2 (2024-10-28)

Bug Fixes

v11.0.1

11.0.1 (2024-10-27)

Bug Fixes

v11.0.0

11.0.0 (2024-10-27)

... (truncated)

Changelog

Sourced from uuid's changelog.

11.0.5 (2025-01-09)

Bug Fixes

11.0.4 (2025-01-05)

Bug Fixes

  • docs: insure -> ensure (#843) (d2a61e1)
  • exclude tests from published package (#840) (f992ff4)
  • Test for invalid byte array sizes and ranges in v1(), v4(), and v7() (#845) (e0ee900)

11.0.3 (2024-11-04)

Bug Fixes

11.0.2 (2024-10-28)

Bug Fixes

11.0.1 (2024-10-27)

Bug Fixes

11.0.0 (2024-10-26)

⚠ BREAKING CHANGES

  • refactor v1 internal state and options logic (#780)
  • refactor v7 internal state and options logic, fixes #764 (#779)
  • Port to TypeScript, closes #762 (#763)
  • update node support matrix (only support node 16-20) (#750)

Features

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Bot label; pull requests that updates a dependency file label Jan 10, 2025
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title refactor: bump uuid from 10.0.0 to 11.0.5 refactor: Bump uuid from 10.0.0 to 11.0.5 Jan 10, 2025
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 2423106 to e8a8caa Compare January 12, 2025 03:42
@dblythy
Copy link
Member

dblythy commented Jan 12, 2025

UUID seems to use ??= which seems to cause browserify build to fail

browserify/browserify#2029

Attempted to use babelify to transform to no avail

@mtrezza
Copy link
Member

mtrezza commented Jan 12, 2025

What are the possible solutions to this?

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 8f4ae0f to a4b5d7e Compare January 12, 2025 13:59
@dblythy
Copy link
Member

dblythy commented Jan 13, 2025

Not sure. My thinking was that we need to pass the uuid node module through a babel transform before passing through to browserify. Was unsuccessful here tho. Other solution I can think of would be to move to another bundler such as vite/esbuild

@mtrezza
Copy link
Member

mtrezza commented Jan 13, 2025

If it's the Node-native uuid module, then it would be strange that a bundler doesn't work with it. If there's no issue open in browserify that is likely to be fixed, then maybe we should change the bundler - or upgrade if there's a newer version that may have a fix?

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 465834a to 8fcb06e Compare January 16, 2025 13:09
@mtrezza
Copy link
Member

mtrezza commented Jan 16, 2025

How should we go about this? Maybe move to webpack? Seems better maintained and is way more popular looking at npm stats.

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from f9de9c9 to 1afff47 Compare January 16, 2025 14:14
@mtrezza mtrezza mentioned this pull request Jan 16, 2025
3 tasks
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 12d6325 to 11e1bf0 Compare January 17, 2025 18:25
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch 2 times, most recently from 616ef3f to b7e7f31 Compare January 23, 2025 23:52
Bumps [uuid](https://github.com/uuidjs/uuid) from 10.0.0 to 11.0.5.
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v10.0.0...v11.0.5)

---
updated-dependencies:
- dependency-name: uuid
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/uuid-11.0.5 branch from b7e7f31 to 0f12eb3 Compare January 26, 2025 18:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Bot label; pull requests that updates a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants