chore(deps): bump uuid from 11.1.1 to 14.0.0#597
Conversation
dependabot
Bot
added
dependencies
doistbot
left a comment
doistbot
left a comment
There was a problem hiding this comment.
This PR updates the uuid dependency from version 11.1.0 to 14.0.0. While keeping our dependencies up to date is always appreciated, this major bump introduces some compatibility considerations for our CommonJS consumers since version 14 is ESM-only. Additionally, because the new version relies on the crypto global now present in our Node 20 environment, there is an opportunity to streamline the codebase by removing the package entirely in favor of the native crypto.randomUUID() method.
| "ts-custom-error": "^3.2.0", | ||
| "undici": "^7.16.0", | ||
| "uuid": "11.1.0", | ||
| "uuid": "14.0.0", |
There was a problem hiding this comment.
[P1] uuid@14 is ESM-only, but this package still publishes a CommonJS build (main/exports.require) compiled to require('uuid'). CommonJS consumers on the supported Node range can fail when loading the SDK. Keep uuid on a CJS-compatible version, or update/drop the CJS entry so it does not require an ESM-only dependency.
| "ts-custom-error": "^3.2.0", | ||
| "undici": "^7.16.0", | ||
| "uuid": "11.1.0", | ||
| "uuid": "14.0.0", |
There was a problem hiding this comment.
[P2] Since uuid v14 now expects the crypto global to be present everywhere, and the codebase only uses uuid.v4(), consider removing this dependency entirely. Native crypto.randomUUID() provides the exact same functionality, generates v4 UUIDs, and is globally available in Node 20+ (which this SDK already requires) and all modern browsers.
Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.0. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v11.1.1...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/uuid-14.0.0
branch
from
4c7182a to
59640ec
Compare
1 participant
Bumps uuid from 11.1.1 to 14.0.0.
Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7c1ea08chore(main): release 14.0.0 (#926)3d2c5b0Merge commit from forkf2c235ffix!: expectcryptoto be global everywhere (requires node@20+) (#935)529ef08chore: upgrade TypeScript and fixup types (#927)086fd79chore: update dependencies (#933)dc4ddb8feat!: drop node@18 support (#934)0f1f9c9chore: switch to Biome for parsing and linting (#932)e2879e6chore: use maintained version of npm-run-all (#930)ffa3138fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)0423d49docs: remove obsolete v1 option notes (#915)