Bump uuid, @probot/adapter-aws-lambda-serverless, node-cron and probot

[dependabot]

Removes uuid. It's no longer used after updating ancestor dependencies uuid, @probot/adapter-aws-lambda-serverless, node-cron and probot. These dependencies need to be updated together.

Removes uuid

Updates @probot/adapter-aws-lambda-serverless from 3.0.2 to 4.0.3

Release notes

Sourced from @​probot/adapter-aws-lambda-serverless's releases.

v4.0.3

4.0.3 (2025-02-26)

Bug Fixes

• update probot dependency (#133) (5a2f004)

v4.0.2

4.0.2 (2025-02-06)

Bug Fixes

• typescript: fix types for createLambdaFunction() (#135) (b79e59c), closes #132

v4.0.1

4.0.1 (2025-01-30)

Bug Fixes

• typescript: add types for createLambdaFunction() (#132) (2ee0c04)

v4.0.0

4.0.0 (2024-06-20)

Features

• Support Probot v13 (#128) (aa64b4e)

BREAKING CHANGES

• drop support for no longer maintained Node.js versions (14 and 16). Node 18+ is required now

v3.0.4

3.0.4 (2023-09-18)

Bug Fixes

• update template to not rely on filesystem location of package.json (#120) (1eb30a0)

v3.0.3

3.0.3 (2023-07-05)

Bug Fixes

... (truncated)

Commits

• 5a2f004 fix: update probot dependency (#133)
• 795550a build(deps): bump @​octokit/request from 8.4.0 to 8.4.1 (#136)
• b79e59c fix(typescript): fix types for createLambdaFunction() (#135)
• 2ee0c04 fix(typescript): add types for createLambdaFunction() (#132)
• e413b7b test(ci): update workflows and use Node 22 for testing (#134)
• aa64b4e feat: Support Probot v13 (#128)
• 1eb30a0 fix: update template to not rely on filesystem location of package.json (#120)
• 6a0dd6f fix(types): correct type for createLambdaFunction (#117)
• 768adb3 style: prettier (#116)
• See full diff in compare view

Updates node-cron from 3.0.2 to 4.5.0

Release notes

Sourced from node-cron's releases.

v4.5.0

Added

• lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run.
• Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday).

Performance

• Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call.
• Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker.
• Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search).
• Replace crypto.randomBytes with crypto.randomUUID for internal ID generation.
• Skip setTimeout jitter wrapper when maxRandomDelay is zero.
• Bundle dist into flat files instead of preserving the module tree (reduces import time).

Fixed

• Flaky should schedule a task test: poll for the first execution instead of asserting an exact count after a fixed sleep.

Changed

• Renamed internal functions interprete to interpret and appendSeccondExpression to appendSecondExpression.
• Rewritten README and package metadata to surface scheduling capabilities (overlap prevention, distributed coordination, background tasks).

v4.4.1

Patch release.

Changed

• Renamed the distributedTtl task option to distributedLease (same meaning: the safety lease, in ms, for lease-based run coordinators). distributedTtl was the only abbreviation in the options API and shipped just days ago in 4.4.0, so it's removed without an alias. If you adopted distributedTtl from 4.4.0, rename it to distributedLease. (#551)

Full Changelog: node-cron/node-cron@v4.4.0...v4.4.1

v4.4.0

Features

• Distributed run coordination — opt-in distributed: true runs a task on a single instance per fire across a fleet (the #477 use case). Ships a built-in NODE_CRON_RUN env-var default (one designated runner, no dependencies) and a pluggable RunCoordinator (via setRunCoordinator, or the per-task runCoordinator option) for high-availability, per-fire coordination (e.g. a Redis lock). Adds the distributedTtl option and an execution:skipped event carrying a reason ('not-elected' | 'coordinator-error'). Works for inline and background tasks. (#549, closes #477)
• Task introspection on ScheduledTask: getNextRuns(n) (preview the next N run times), match(date), msToNext(), isBusy(), runsLeft() and getPattern(). (#547)
• cron.parse(expression) and cron.validateDetailed(expression) — decompose an expression into its fields, or get every field-level problem (without throwing) for tooling and richer error messages. (#548)

Fixes

• getNextMatch no longer scans every time of day on a day that matches the day-of-month but not the weekday. A dense expression constrained by both (e.g. * * * 15 * 1) could take minutes to resolve; it is now instant. (#542)

Internal

• Cleanups with no public API change: fixed the milisecond → millisecond spelling and the convertion/ → conversion/ directory name. (#543)

Docs

• New Distributed Coordination guide, plus pages for task introspection and parse/validateDetailed, at nodecron.com.

Full Changelog: node-cron/node-cron@v4.3.0...v4.4.0

v4.3.0

Features

• L (last day of month) in the day-of-month field — e.g. 0 0 12 L * *, leap-year aware, and combinable with explicit days (15,L). (#396, closes #147 — thanks @​antonidasyang)
• missedExecutionTolerance option (ms, default 1000): a heartbeat that wakes a little late still runs its slot instead of being reported as missed. Always capped to the gap to the next slot. (#534, closes #485)
• startTimeout option for background tasks (ms, default 5000). (#535)

... (truncated)

Changelog

Sourced from node-cron's changelog.

[4.5.0] - 2026-06-21

Added

• lastRun() introspection getter on ScheduledTask: returns { date, result } after a successful execution, { date, error } after a failed one, or null before the first run. (#557)
• Extended day-of-week tokens: <weekday>#<nth> (nth weekday of the month, e.g. 1#1 for the first Monday) and <weekday>L (last weekday of the month, e.g. 5L for the last Friday). (#560)

Performance

• Cache Intl.DateTimeFormat instances per timezone instead of rebuilding on every call. (#561)
• Parse the cron expression once per TimeMatcher instead of re-parsing in MatcherWalker. (#562)
• Compute the GMT offset lazily (only when formatting ISO strings, not during the next-run search). (#563)
• Replace crypto.randomBytes with crypto.randomUUID for internal ID generation. (#564)
• Skip setTimeout jitter wrapper when maxRandomDelay is zero. (#565)
• Bundle dist into flat files instead of preserving the module tree (reduces import time). (#566)

Fixed

• Flaky should schedule a task test: poll for the first execution instead of asserting an exact count after a fixed sleep.

Changed

• Renamed internal functions interprete to interpret and appendSeccondExpression to appendSecondExpression. (#567)
• Rewritten README and package metadata to surface scheduling capabilities (overlap prevention, distributed coordination, background tasks). (#568)

[4.4.1] - 2026-06-18

Changed

• Renamed the distributedTtl option to distributedLease (same meaning: the safety lease, in ms, for lease-based coordinators). The old name was the only abbreviation in the options API; the new one groups with distributed. distributedTtl was introduced in 4.4.0 and is removed without an alias.

[4.4.0] - 2026-06-17

Added

• Task introspection on ScheduledTask: getNextRuns(n) (preview the next N run times), match(date), msToNext(), isBusy(), runsLeft() and getPattern(). (#547)
• cron.parse(expression) and cron.validateDetailed(expression): decompose an expression into its fields, or get every field-level problem (without throwing) for tooling and richer error messages. (#548)

... (truncated)

Commits

• cd9a5a7 chore(release): 4.5.0 (#569)
• fbdd883 Rewrite README to surface scheduling capabilities (#568)
• c80a396 perf(build): bundle dist into flat files instead of preserving modules (#566)
• b71b9b1 Fix typos in internal function names (#567)
• 7c5015c perf(id): drop crypto.randomBytes from internal id generation (#564)
• dd0a2a9 perf(pattern): parse cron expression once per TimeMatcher (#562)
• cf69f32 perf(time): cache Intl.DateTimeFormat instances per timezone (#561)
• dad56e1 perf(runner): run inline when no random delay is configured (#565)
• a309d5f perf(time): compute the GMT offset lazily (#563)
• c2db9d1 feat: support extended day-of-week tokens (# nth weekday and L last weekday) ...
• Additional commits viewable in compare view

Updates probot from 12.3.0 to 14.3.2

Release notes

Sourced from probot's releases.

v14.3.2

14.3.2 (2026-04-03)

Bug Fixes

• deps: update dependency yaml to v2.8.3 [security] (79b556e)

v14.3.1

14.3.1 (2026-03-20)

Bug Fixes

• cli: turn off strict args parsing to re-allow using receive command with args (#2304) (67a30d1)

v14.3.0

14.3.0 (2026-03-16)

Bug Fixes

• receive command failing when LOG_LEVEL is set (#2296) (556ec16)

Features

• replace dotenv with node native parseEnv, when using deno runtime use deno >2.7.0 (#2265) (c94ac6e)

v14.2.4

14.2.4 (2025-11-14)

Bug Fixes

• integrate static files (#2272) (39dcfcd)

v14.2.3

14.2.3 (2025-11-13)

Bug Fixes

• deps: update dependency smee-client to v5 (#2271) (218f292)

v14.2.2

14.2.2 (2025-11-13)

Bug Fixes

... (truncated)

Commits

• 79b556e fix(deps): update dependency yaml to v2.8.3 [security]
• 4d184e7 chore(deps): update dependency fastify to v5.8.3 [security]
• f99b4fc chore(deps): update dependency sonic-boom to v5
• 67a30d1 fix(cli): turn off strict args parsing to re-allow using receive command with...
• 1ecfade build(deps-dev): bump undici from 7.22.0 to 7.24.1
• c94ac6e feat: replace dotenv with node native parseEnv, when using deno runtime use d...
• a6077ac build(deps): bump minimatch from 9.0.6 to 9.0.9 (#2300)
• 47b3134 build(deps): lock file maintenance
• 004a28e chore(deps): update vitest monorepo to v4 (major) (#2259)
• 9c1a37d build(deps): lock file maintenance (#2282)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for probot since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.