From a86aaf247d7ab0050fdbb8db5618eccbda9f2ebd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 21 May 2026 19:55:51 +0000 Subject: [PATCH 1/2] build(deps): bump uuid from 10.0.0 to 14.0.0 (via audit fix) Bumps [uuid](https://github.com/uuidjs/uuid) from 10.0.0 to 14.0.0. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v10.0.0...v14.0.0) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- pnpm-lock.yaml | 19 ++++++------------- 1 file changed, 6 insertions(+), 13 deletions(-) diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 5bbaf39b..25b3a1ad 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -5,6 +5,7 @@ settings: excludeLinksFromLockfile: false overrides: + uuid@<11.1.1: '>=11.1.1' vite: 8.0.11 importers: @@ -1931,14 +1932,8 @@ packages: util-deprecate@1.0.2: resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==} - uuid@10.0.0: - resolution: {integrity: sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==} - deprecated: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028). - hasBin: true - - uuid@8.3.2: - resolution: {integrity: sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==} - deprecated: uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028). + uuid@14.0.0: + resolution: {integrity: sha512-Qo+uWgilfSmAhXCMav1uYFynlQO7fMFiMVZsQqZRMIXp0O7rR7qjkj+cPvBHLgBqi960QCoo/PH2/6ZtVqKvrg==} hasBin: true uuidv7@1.2.1: @@ -2244,7 +2239,7 @@ snapshots: dependencies: '@azure/msal-common': 16.5.0 jsonwebtoken: 9.0.3 - uuid: 8.3.2 + uuid: 14.0.0 '@balena/dockerignore@1.0.2': {} @@ -3008,7 +3003,7 @@ snapshots: docker-modem: 5.0.7 protobufjs: 7.5.8 tar-fs: 2.1.4 - uuid: 10.0.0 + uuid: 14.0.0 transitivePeerDependencies: - supports-color @@ -3854,9 +3849,7 @@ snapshots: util-deprecate@1.0.2: {} - uuid@10.0.0: {} - - uuid@8.3.2: {} + uuid@14.0.0: {} uuidv7@1.2.1: {} From ba4e1fe0fdcad8b0f460b33207f99113af0ef6c9 Mon Sep 17 00:00:00 2001 From: John McLear Date: Mon, 25 May 2026 11:45:23 +0100 Subject: [PATCH 2/2] chore: add uuid override to pnpm-workspace.yaml Dependabot recorded `uuid@<11.1.1: '>=11.1.1'` in pnpm-lock.yaml's overrides block as part of the audit-fix bump, but didn't add the matching entry to pnpm-workspace.yaml. That mismatch makes `pnpm install --frozen-lockfile` fail every CI job with ERR_PNPM_LOCKFILE_CONFIG_MISMATCH. Move the override into pnpm-workspace.yaml so the lockfile hash matches the declared config. Co-Authored-By: Claude Opus 4.7 (1M context) --- pnpm-workspace.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml index 4a32475f..f05fc5c7 100644 --- a/pnpm-workspace.yaml +++ b/pnpm-workspace.yaml @@ -1,4 +1,5 @@ overrides: + uuid@<11.1.1: '>=11.1.1' vite: 8.0.11 allowBuilds: