chore(deps): bump uuid from 11.1.1 to 14.0.0#123
Conversation
dependabot
Bot
added
dependencies
doistbot
left a comment
doistbot
left a comment
There was a problem hiding this comment.
Thank you for taking the time to update uuid to version 14.0.0. While keeping dependencies current is important for maintainability, this major release introduces significant environment compatibility shifts. The new version drops Node 18 support by requiring a global crypto object and transitions to ESM-only, meaning this update will break existing CommonJS consumers and necessitate either a major SDK version bump or a deferral of the upgrade.
| "ts-custom-error": "^3.2.0", | ||
| "undici": "^7.16.0", | ||
| "uuid": "^11.1.0", | ||
| "uuid": "^14.0.0", |
There was a problem hiding this comment.
[P1] uuid v14 expects crypto to be globally defined, dropping support for Node 18 (it requires Node 20+). Bumping this dependency means @doist/twist-sdk will crash for any consumers still running on Node 18. This change should either be deferred, or released as a major version bump along with an updated engines field in package.json to explicitly declare the Node 20+ requirement.
| "ts-custom-error": "^3.2.0", | ||
| "undici": "^7.16.0", | ||
| "uuid": "^11.1.0", | ||
| "uuid": "^14.0.0", |
There was a problem hiding this comment.
[P1] uuid v14 is past the v12 ESM-only change, but this package still publishes a CommonJS entry (exports.require / dist/cjs). The CJS build will emit a top-level require('uuid') for authentication.ts, which breaks CommonJS consumers on runtimes that cannot require ESM. Keep a CommonJS-compatible uuid version or change/remove the CJS path before bumping.
Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.0. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v11.1.1...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
changed the title
dependabot
Bot
force-pushed
the
dependabot/npm_and_yarn/uuid-14.0.0
branch
from
4ddc997 to
91a8454
Compare
1 participant
Bumps uuid from 11.1.1 to 14.0.0.
Release notes
Sourced from uuid's releases.
... (truncated)
Changelog
Sourced from uuid's changelog.
... (truncated)
Commits
7c1ea08chore(main): release 14.0.0 (#926)3d2c5b0Merge commit from forkf2c235ffix!: expectcryptoto be global everywhere (requires node@20+) (#935)529ef08chore: upgrade TypeScript and fixup types (#927)086fd79chore: update dependencies (#933)dc4ddb8feat!: drop node@18 support (#934)0f1f9c9chore: switch to Biome for parsing and linting (#932)e2879e6chore: use maintained version of npm-run-all (#930)ffa3138fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)0423d49docs: remove obsolete v1 option notes (#915)