From f0c250a9545c02f75b86109269d7a68a8e3b89f4 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 27 Apr 2026 10:08:17 +0200
Subject: [PATCH] build(deps): Bump uuid from 13.0.0 to 14.0.0 (#185)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [uuid](https://github.com/uuidjs/uuid) from 13.0.0 to 14.0.0.
Release notes
Sourced from uuid's
releases.
v14.0.0
14.0.0
(2026-04-19)
⚠ BREAKING CHANGES
- expect
crypto to be global everywhere (requires
node@20+) (#935)
- drop node@18 support (#934)
Features
Bug Fixes
- expect
crypto to be global everywhere (requires
node@20+) (#935) (f2c235f)
- Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)
Changelog
Sourced from uuid's
changelog.
14.0.0
(2026-04-19)
Security
- Fixes GHSA-w5hq-g745-h8pq:
v3(), v5(), and v6() did not
validate that writes would remain within the bounds of a caller-supplied
buffer, allowing out-of-bounds writes when an invalid
offset was provided. A RangeError is now
thrown if offset < 0 or offset + 16 >
buf.length.
⚠ BREAKING CHANGES
crypto is now expected to be globally defined (requires
node@20+) (#935)
- drop node@18 support (#934)
- upgrade minimum supported TypeScript version to 5.4.3, in keeping
with the project's policy of supporting TypeScript versions released
within the last two years
Commits
7c1ea08
chore(main): release 14.0.0 (#926)
3d2c5b0
Merge commit from fork
f2c235f
fix!: expect crypto to be global everywhere (requires
node@20+) (#935)
529ef08
chore: upgrade TypeScript and fixup types (#927)
086fd79
chore: update dependencies (#933)
dc4ddb8
feat!: drop node@18 support (#934)
0f1f9c9
chore: switch to Biome for parsing and linting (#932)
e2879e6
chore: use maintained version of npm-run-all (#930)
ffa3138
fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
0423d49
docs: remove obsolete v1 option notes (#915)
- Additional commits viewable in compare
view
Maintainer changes
This version was pushed to npm by GitHub Actions, a new
releaser for uuid since your current version.
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
apps/frontend/package.json | 2 +-
pnpm-lock.yaml | 10 +++++-----
2 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/apps/frontend/package.json b/apps/frontend/package.json
index 2280f2a6..3e54db5e 100644
--- a/apps/frontend/package.json
+++ b/apps/frontend/package.json
@@ -29,7 +29,7 @@
"react-toastify": "^11.0.5",
"redux": "^5.0.1",
"save-svg-as-png": "^1.4.17",
- "uuid": "^13.0.0"
+ "uuid": "^14.0.0"
},
"devDependencies": {
"@types/react": "19.2.14",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5d5da2df..2fe34035 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -157,8 +157,8 @@ importers:
specifier: ^1.4.17
version: 1.4.17
uuid:
- specifier: ^13.0.0
- version: 13.0.0
+ specifier: ^14.0.0
+ version: 14.0.0
devDependencies:
'@types/react':
specifier: 19.2.14
@@ -3035,8 +3035,8 @@ packages:
peerDependencies:
react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
- uuid@13.0.0:
- resolution: {integrity: sha512-XQegIaBTVUjSHliKqcnFqYypAd4S+WCYt5NIeRs6w/UAry7z8Y9j5ZwRRL4kzq9U3sD6v+85er9FvkEaBpji2w==}
+ uuid@14.0.0:
+ resolution: {integrity: sha512-Qo+uWgilfSmAhXCMav1uYFynlQO7fMFiMVZsQqZRMIXp0O7rR7qjkj+cPvBHLgBqi960QCoo/PH2/6ZtVqKvrg==}
hasBin: true
vary@1.1.2:
@@ -6130,7 +6130,7 @@ snapshots:
dependencies:
react: 19.2.5
- uuid@13.0.0: {}
+ uuid@14.0.0: {}
vary@1.1.2: {}