Skip to content

Bump uuid and @wordpress/block-library - #2419

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-541d950fc9
Closed

Bump uuid and @wordpress/block-library#2419
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-541d950fc9

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubAug 21, 2026•
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.2 and updates ancestor dependency @wordpress/block-library. These dependencies need to be updated together.

Updates uuid from 8.3.2 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

  • v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
  • v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
  • v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

... (truncated)

Commits
  • fd59f02 chore(main): release 14.0.2 (#967)
  • f3c564e docs: point the Node support permalink at the CI version matrix (#974)
  • b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
  • 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
  • ea83515 docs: cleanup API summary (#968)
  • ac36860 chore: pin publint version in CI (#966)
  • a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
  • 7017780 chore(main): release 14.0.1 (#964)
  • f2c3e4b chore: fix release-please workflow (#963)
  • 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates @wordpress/block-library from 3.2.21 to 10.4.0

Changelog

Sourced from @​wordpress/block-library's changelog.

10.4.0 (2026-08-12)

Internal

  • Embed: Use the new @wordpress/kebab-case package instead of unlocking the kebabCase utility from the @wordpress/components private APIs (#81294).

Enhancements

  • Group: Support separate horizontal and vertical block spacing values (#81476).
  • Playlist Track: Use a dedicated icon for the block toolbar. (#80959)
  • Playlist: Expose the parent "Add track" toolbar control to selected Playlist Track child blocks via block toolbar sharing (#80368).
  • Playlist: Allow selecting audio tracks individually in the Media Library without holding Shift or Command, transform multiple Audio blocks into a Playlist, and transform a one-track Playlist into Audio. (#80926)
  • Page List: Rename the "Edit" action to "Detach", and confirm it in a dialog explaining that the list will keep its current pages but stop adding new ones automatically, matching the Gallery block (#80847).
  • Tabs: Start new tabs with an empty label showing a "Tab title" placeholder instead of a generic "Tab" (#81009).
  • Tab Panel: Show the tab's title in the Document Overview instead of the generic block title, so tabs can be told apart (#81427).

Bug Fixes

  • Footnotes: Treat unreadable footnotes post meta as no footnotes instead of throwing, so the block shows its placeholder rather than the block crash warning (#81201).
  • Playlist Track: Show the upload loading indicator inline with the track row.
  • Playlist: Improve handling of declarative waveform player configuration (#81342).
  • Playlist: Update @arraypress/waveform-player to ^1.26.0, disable automatic initialization, and prevent custom SVG icons from being configured through HTML data attributes.
  • Cover: Pass 'full' instead of null as the featured image size for parallax and repeated backgrounds, so a null array offset is no longer reached on PHP 8.5 (#81444).

Internal

  • Details: Import withIgnoreIMEEvents from @wordpress/keycodes instead of unlocking it from @wordpress/components (#81343).

10.3.0 (2026-07-29)

Enhancements

  • Playlist: Shorten the track toolbar button label from "Add track" to "Add".
  • Gallery: Rename the dynamic variation's "Convert to images" action to "Detach", and confirm it in a dialog explaining that the gallery will keep its current images but stop updating automatically (#80727).

Bug Fixes

  • Table of Contents: Continue rendering saved legacy content until the post is edited and resaved.
  • Navigation Overlay Close: Inherit typography and color from the overlay, so the button follows the theme font instead of the browser default button styles (#80751).
  • Playlist: Update @arraypress/waveform-player to ^1.23.0, which no longer sets crossorigin="anonymous" on its audio element, fixing playback of tracks served without CORS headers such as media offloaded to a CDN (#80533).
  • Post Content: Restrict the wrapper tag to the supported values offered in the editor.
  • Post Date: Escape date values and link URLs before rendering the block.

Internal

  • Update memize to 2.1.1 (#80764).
  • Image: Check only window.__clientSideMediaProcessing for sideloading status, following the removal of the redundant window.__heicUploadSupport flag (#80452).

10.2.0 (2026-07-14)

... (truncated)

Commits
  • 989764d chore(release): publish
  • e18aa00 Update changelog files
  • dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
  • 7e8b17a chore(release): publish
  • 42ad080 Update changelog files
  • edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
  • e9a74f9 chore(release): publish
  • 2a0c375 Update changelog files
  • e61c854 Merge changes published in the Gutenberg plugin "release/23.6" branch
  • 1055a35 Update changelog files
  • Additional commits viewable in compare view

@dependabotdependabotBot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 21, 2026
@netlify

netlifyBot commented Aug 21, 2026•
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for cloudfour-patterns ready!

NameLink
🔨 Latest commit1ed227e
🔍 Latest deploy loghttps://app.netlify.com/projects/cloudfour-patterns/deploys/6a88e7689229080008f0edcf
😎 Deploy Previewhttps://deploy-preview-2419--cloudfour-patterns.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@changeset-bot

changeset-botBot commented Aug 21, 2026•
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 1ed227e

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-541d950fc9 branch 2 times, most recently from cbf3237 to 4fd201aCompareAugust 21, 2026 23:20
@spaceninja

spaceninja commented Aug 21, 2026

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot@github

dependabotBot commented on behalf of githubAug 21, 2026

Copy link
Copy Markdown
ContributorAuthor

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@spaceninjaspaceninja mentioned this pull request Aug 21, 2026
Open
@dependabot
Bump uuid and @wordpress/block-library
1ed227e
Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.2 and updates ancestor dependency [@wordpress/block-library](https://github.com/WordPress/gutenberg/tree/HEAD/packages/block-library). These dependencies need to be updated together.
Updates `uuid` from 8.3.2 to 14.0.2
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.2)
Updates `@wordpress/block-library` from 3.2.21 to 10.4.0
- [Release notes](https://github.com/WordPress/gutenberg/releases)
- [Changelog](https://github.com/WordPress/gutenberg/blob/trunk/packages/block-library/CHANGELOG.md)
- [Commits](https://github.com/WordPress/gutenberg/commits/@wordpress/block-library@10.4.0/packages/block-library)
---
updated-dependencies:
- dependency-name: "@wordpress/block-library"
dependency-version: 10.4.0
dependency-type: direct:development
- dependency-name: uuid
dependency-version: 14.0.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/npm_and_yarn/multi-541d950fc9 branch from 4fd201a to 1ed227eCompareAugust 22, 2026 00:03
@spaceninja

spaceninja commented Aug 22, 2026

Copy link
Copy Markdown
Member

Closed in favor of #2439

@dependabot@github

dependabotBot commented on behalf of githubAug 22, 2026

Copy link
Copy Markdown
ContributorAuthor

OK, I won't notify you again about this release, but will get in touch when a new version is available.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabotBot deleted the dependabot/npm_and_yarn/multi-541d950fc9 branch August 22, 2026 00:15
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependenciesPull requests that update a dependency filejavascriptPull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@spaceninja