Skip to content

Bump uuid and @adobe/alloy#412

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d41d29ae18
Open

Bump uuid and @adobe/alloy#412
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-d41d29ae18

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps uuid to 14.0.0 and updates ancestor dependency @adobe/alloy. These dependencies need to be updated together.

Updates uuid from 13.0.0 to 14.0.0

Release notes

Sourced from uuid's releases.

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

Changelog

Sourced from uuid's changelog.

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years
Commits
  • 7c1ea08 chore(main): release 14.0.0 (#926)
  • 3d2c5b0 Merge commit from fork
  • f2c235f fix!: expect crypto to be global everywhere (requires node@20+) (#935)
  • 529ef08 chore: upgrade TypeScript and fixup types (#927)
  • 086fd79 chore: update dependencies (#933)
  • dc4ddb8 feat!: drop node@18 support (#934)
  • 0f1f9c9 chore: switch to Biome for parsing and linting (#932)
  • e2879e6 chore: use maintained version of npm-run-all (#930)
  • ffa3138 fix: Use GITHUB_TOKEN for release-please and enable npm provenance (#925)
  • 0423d49 docs: remove obsolete v1 option notes (#915)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.


Updates @adobe/alloy from 2.31.1 to 2.33.1

Release notes

Sourced from @​adobe/alloy's releases.

@​adobe/alloy@​2.33.1

Patch Changes

@​adobe/alloy@​2.33.1-beta.0

Patch Changes

@​adobe/alloy@​2.33.0

Minor Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: SurferID and hashed client IP are now collected via the everesttech.net pixel and appended to outgoing Experience Events as _experience.adcloud.stitchId (XDM) and query.advertising.stitchIds (query). A shared iframe call ensures the pixel is loaded only once per page.

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: All organic events are now attached with Advertising ids (SurferId and HashedIP) in the schema _experience->adcloud->stitchId.

Patch Changes

@​adobe/alloy@​2.33.0-beta.2

Minor Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: SurferID and hashed client IP are now collected via the everesttech.net pixel and appended to outgoing Experience Events as _experience.adcloud.stitchId (XDM) and query.advertising.stitchIds (query). A shared iframe call ensures the pixel is loaded only once per page.

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: All organic events are now attached with Advertising ids (SurferId and HashedIP) in the schema _experience->adcloud->stitchId.

Patch Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Advertising: emit _experience.adcloud.stitchId on outgoing Experience Events containing SurferID and hashed client IP address

  • Updated dependencies [e271e7a]:

    • @​adobe/alloy-core@​1.1.2-beta.3

@​adobe/alloy@​2.32.1-beta.0

Patch Changes\n\n- Updated dependencies [50307a9]\n - @​adobe/alloy-core@​1.1.2-beta.0

@​adobe/alloy@​2.32.0

Minor Changes\n\n- f225f28: Create npm package\n\n### Patch Changes\n\n- 3e22bcc: Added a fix so that we keep the sessionId in memory when session sticky is false.\n\n This will allow users to run different sessions in different tabs.\n\n- 9db9ef5: Added support for option on the command so the SDK routes requests to the voice subpath on a per-call basis. Included unit test coverage for option validation and voice subpath routing behavior.\n- 633f566: Include IANA timezone on the place context\n- 00d1187: Add configuration to Brand Concierge, to enable or disable sources data collection.\n- 292bb30: Force a patch version\n- 366cc96: fixed a packaging issue where certain consumers of the NPM package were unable to use packaged utility functions.\n- Updated dependencies [f225f28]\n - @​adobe/alloy-core@​1.1.1

... (truncated)

Changelog

Sourced from @​adobe/alloy's changelog.

2.33.1

Patch Changes

2.33.1-beta.0

Patch Changes

2.33.0

Minor Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: SurferID and hashed client IP are now collected via the everesttech.net pixel and appended to outgoing Experience Events as _experience.adcloud.stitchId (XDM) and query.advertising.stitchIds (query). A shared iframe call ensures the pixel is loaded only once per page.

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: All organic events are now attached with Advertising ids (SurferId and HashedIP) in the schema _experience->adcloud->stitchId.

Patch Changes

2.33.0-beta.2

Minor Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: SurferID and hashed client IP are now collected via the everesttech.net pixel and appended to outgoing Experience Events as _experience.adcloud.stitchId (XDM) and query.advertising.stitchIds (query). A shared iframe call ensures the pixel is loaded only once per page.

  • #1487 e271e7a Thanks @​ksakhare2021! - Added support for Advertising organic events: All organic events are now attached with Advertising ids (SurferId and HashedIP) in the schema _experience->adcloud->stitchId.

Patch Changes

  • #1487 e271e7a Thanks @​ksakhare2021! - Advertising: emit _experience.adcloud.stitchId on outgoing Experience Events containing SurferID and hashed client IP address

  • Updated dependencies [e271e7a]:

    • @​adobe/alloy-core@​1.1.2-beta.3

2.32.1-beta.1

... (truncated)

Commits
  • 7aceddd chore: publish [skip ci]
  • 0fbd9e4 chore: publish [skip ci]
  • 6b0e6d1 Fixed Context component being excluded from createCustomInstance in browser p...
  • d0d2d9b chore: publish [skip ci]
  • b59c840 chore: publish [skip ci]
  • e271e7a Added support for Advertising Organic event having SurferID and HashedIP (#1487)
  • ce0a08b chore: publish [skip ci]
  • 447f851 Registered context (now part of required components) in the browser package (...
  • e120399 Migrated browser components from core package to browser package (#1486)
  • 4b534de Added @​adobe/alloy-node package scaffold (#1485)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 18, 2026
@changeset-bot
Copy link
Copy Markdown

changeset-bot Bot commented May 18, 2026

⚠️ No Changeset found

Latest commit: 1df4024

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.0 and updates ancestor dependency [@adobe/alloy](https://github.com/adobe/alloy/tree/HEAD/packages/browser). These dependencies need to be updated together.


Updates `uuid` from 13.0.0 to 14.0.0
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v13.0.0...v14.0.0)

Updates `@adobe/alloy` from 2.31.1 to 2.33.1
- [Release notes](https://github.com/adobe/alloy/releases)
- [Changelog](https://github.com/adobe/alloy/blob/main/packages/browser/CHANGELOG.md)
- [Commits](https://github.com/adobe/alloy/commits/@adobe/alloy@2.33.1/packages/browser)

---
updated-dependencies:
- dependency-name: "@adobe/alloy"
  dependency-version: 2.33.1
  dependency-type: direct:production
- dependency-name: uuid
  dependency-version: 14.0.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-d41d29ae18 branch from 63346da to 1df4024 Compare May 19, 2026 09:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants