From 01ee69dcc015b358fdab1d506d9c6a732bb58e4b Mon Sep 17 00:00:00 2001 From: Cursor Agent Date: Tue, 2 Jun 2026 13:51:40 +0000 Subject: [PATCH] fix(deps): override uuid to ^11.1.1 nyc 18.0.0 pulls in uuid 8.3.2 via istanbul-lib-processinfo, which is affected by silent partial buffer writes in v3()/v5()/v6(). Force the patched 11.1.1 release via npm overrides. Co-authored-by: Daniel Imms --- package-lock.json | 13 ++++++++----- package.json | 3 ++- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 5f5877240..08de4cd95 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8043,14 +8043,17 @@ } }, "node_modules/uuid": { - "version": "8.3.2", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", - "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", - "deprecated": "uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", "dev": true, + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], "license": "MIT", "bin": { - "uuid": "dist/bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/vary": { diff --git a/package.json b/package.json index cb7d146f0..931ceb9cb 100644 --- a/package.json +++ b/package.json @@ -12,7 +12,8 @@ "addons/*" ], "overrides": { - "serialize-javascript": "^7.0.3" + "serialize-javascript": "^7.0.3", + "uuid": "^11.1.1" }, "keywords": [ "cli",