chore(deps-dev): bump uuid from 9.0.1 to 14.0.0 by dependabot[bot] · Pull Request #6036 · getsentry/sentry-react-native

dependabot · 2026-04-23T11:35:16Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps uuid from 9.0.1 to 14.0.0.

Release notes

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

expect crypto to be global everywhere (requires node@20+) (#935)

drop node@18 support (#934)

Features

drop node@18 support (#934) (dc4ddb8)

Bug Fixes

expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)

Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

make browser exports the default (#901)

Bug Fixes

make browser exports the default (#901) (bce9d72)

v12.0.0

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

update to typescript@5.2 (#887)

remove CommonJS support (#886)

drop node@16 support (#883)

Features

add node@24 to ci matrix (#879) (42b6178)

drop node@16 support (#883) (0f38cf1)

remove CommonJS support (#886) (ae786e2)

update to typescript@5.2 (#887) (c7ee405)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

crypto is now expected to be globally defined (requires node@20+) (#935)

drop node@18 support (#934)

upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

make browser exports the default (#901)

Bug Fixes

make browser exports the default (#901) (bce9d72)

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

update to typescript@5.2 (#887)

remove CommonJS support (#886)

drop node@16 support (#883)

Features

add node@24 to ci matrix (#879) (42b6178)

drop node@16 support (#883) (0f38cf1)

remove CommonJS support (#886) (ae786e2)

update to typescript@5.2 (#887) (c7ee405)

Bug Fixes

improve v4() performance (#894) (5fd974c)

restore node: prefix (#889) (e1f42a3)

11.1.0 (2025-02-19)

... (truncated)

Commits

7c1ea08 chore(main): release 14.0.0 (#926)
3d2c5b0 Merge commit from fork
f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
529ef08 chore: upgrade TypeScript and fixup types (#927)
086fd79 chore: update dependencies (#933)
dc4ddb8 feat!: drop node@18 support (#934)
0f1f9c9 chore: switch to Biome for parsing and linting (#932)
e2879e6 chore: use maintained version of npm-run-all (#930)
ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
0423d49 docs: remove obsolete v1 option notes (#915)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [uuid](https://github.com/uuidjs/uuid) from 9.0.1 to 14.0.0. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](uuidjs/uuid@v9.0.1...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: direct:development ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-24T09:29:46Z

	Fails
🚫	Pull request is not ready for merge, please add the "ready-to-merge" label to the pull request

Generated by 🚫 dangerJS against b3e4364

cursor

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit b3e4364. Configure here.}

cursor · 2026-04-24T09:31:33Z

    "typescript": "~5.9.3",
    "uglify-js": "^3.17.4",
-    "uuid": "^9.0.1",
+    "uuid": "^14.0.0",


Stale @types/uuid after major version bump

Low Severity

uuid was bumped to ^14.0.0 but @types/uuid remains at ^9.0.4. Since uuid v12+ removed CommonJS support and ships its own TypeScript type definitions, the stale @types/uuid package is now outdated and could provide conflicting type declarations if uuid is ever imported directly. This is an incomplete dependency update — @types/uuid can likely be removed entirely since uuid v14 bundles its own types. Flagging this because the dependency update review rule asks to check for breaking changes and compatibility issues with JS dependency updates.

Additional Locations (1)

packages/core/package.json#L95-L96

^{Triggered by project rule: PR Review Guidelines for Cursor Bot}

^{Reviewed by Cursor Bugbot for commit b3e4364. Configure here.}

antonis

Marking as blocked since the dependency might be unused.
Will follow up after trying the removal with #6041

dependabot · 2026-04-24T13:06:48Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

antonis · 2026-04-24T13:31:37Z

@dependabot rebase

dependabot · 2026-04-24T13:31:41Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

antonis · 2026-04-24T13:31:57Z

@dependabot recreat

antonis · 2026-04-24T13:36:12Z

https://github.com/dependabot recreat

dependabot · 2026-04-24T13:36:15Z

Looks like this PR is closed. If the branch still exists, you can re-open the PR and then use @dependabot rebase or @dependabot recreate. If the branch was deleted, Dependabot will create a new PR on the next scheduled run, or you can trigger an update from the Dependency graph page.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026

dependabot Bot requested review from alwx, antonis and lucas-zimerman as code owners April 23, 2026 11:35

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026

Merge branch 'main' into dependabot/npm_and_yarn/uuid-14.0.0

b3e4364

antonis enabled auto-merge (squash) April 24, 2026 09:29

cursor Bot reviewed Apr 24, 2026

View reviewed changes

antonis mentioned this pull request Apr 24, 2026

chore(deps-dev): Remove unused uuid devDependency #6041

Merged

4 tasks

antonis reviewed Apr 24, 2026

View reviewed changes

antonis added the Blocked label Apr 24, 2026

antonis closed this in #6041 Apr 24, 2026

auto-merge was automatically disabled April 24, 2026 13:06
Pull request was closed

dependabot Bot deleted the dependabot/npm_and_yarn/uuid-14.0.0 branch April 24, 2026 13:06

antonis restored the dependabot/npm_and_yarn/uuid-14.0.0 branch April 24, 2026 13:31

antonis reopened this Apr 24, 2026

antonis closed this Apr 24, 2026

antonis deleted the dependabot/npm_and_yarn/uuid-14.0.0 branch April 24, 2026 13:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps-dev): bump uuid from 9.0.1 to 14.0.0#6036

chore(deps-dev): bump uuid from 9.0.1 to 14.0.0#6036
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/npm_and_yarn/uuid-14.0.0

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

cursor Bot left a comment

Uh oh!

cursor Bot Apr 24, 2026

Uh oh!

antonis left a comment

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

Features

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

Bug Fixes

v12.0.0

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

Features

Bug Fixes

14.0.0 (2026-04-19)

Security

⚠ BREAKING CHANGES

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

Features

Bug Fixes

11.1.0 (2025-02-19)

Uh oh!

github-actions Bot commented Apr 24, 2026

Uh oh!

cursor Bot left a comment

Choose a reason for hiding this comment

Uh oh!

cursor Bot Apr 24, 2026

Choose a reason for hiding this comment

Stale @types/uuid after major version bump

Uh oh!

antonis left a comment

Choose a reason for hiding this comment

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

antonis commented Apr 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

Stale `@types/uuid` after major version bump