Skip to content

chore(deps): bump uuid, aedes and deepl-node - #407

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-21d6aa75e1
Closed

chore(deps): bump uuid, aedes and deepl-node#407
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-21d6aa75e1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Removes uuid. It's no longer used after updating ancestor dependencies uuid, aedes and deepl-node. These dependencies need to be updated together.

Removes uuid

Updates aedes from 0.51.3 to 1.1.1

Release notes

Sourced from aedes's releases.

Release 1.1.1

  • Merge commit from fork (b9024fa)
  • types: add missing decodeProtocol, trustProxy, trustedProxies to AedesOptions (#1093) (b90fc58)

Release 1.1.0

  • chore: reduce production dependencies (#1045) (cf28701)

Release 1.0.2

  • fix: add .js extensions to .d.ts imports for node16 resolution (#1083) (fc36475)

Release 1.0.1

  • fix: add types condition to package.json exports field (#1081) (d78fec9)
  • docs: fix example (#1079) (3082ebe)

Release 1.0.0

What's changed

  • fix: ensure broker always respond with PUBCOMP to a PUBREL in QoS 2 (#1056) (65d86c9)
  • feat: add drainTimeout option to protect against slow/frozen clients (#1060) (af1ae4b)
  • chore: remove release-it configuration from package.json and add to .release-it.json (#1052) (2c6882e)
  • chore(dev): fix incorrect automated benchmark threshold handling (#1046) (9b76359)
  • chore: replace tap by node:test (#1042) (9063215)
  • chore: update dependencies (#1041) (b5178c0)
  • chore: migrate to ESM (#1039) (d1cc2a3)
  • chore: replace Coveralls with Codecov for coverage reporting (#1040) (8220f0a)
  • feat: automate benchmark on PR requests using Github Actions (#1037) (86f5b45)
  • feat!: migrate to async persistence (#1034) (f6a09bf)
  • feat: automate benchmarking (#1035) (04e391f)
  • chore: migrate to ES6 classes (#1032) (16e1886)
  • chore: update aedes-persistence to 10 (#1031) (f874bb1)
  • chore: migrate websocket-stream to ws (#1030) (ef5e1a8)
  • chore: update dependencies (#1028) (f328ee1)
  • chore: add type commonjs (#1027) (dcd1d39)

Breaking Changes in v1.0.0

1. Async/Await Broker Initialization (Breaking Change)

Aedes now requires async initialization. The old synchronous constructor has been replaced with Aedes.createBroker().

Before (v0.x):

const aedes = require('aedes')
const broker = aedes(opts)

After (v1.0.0):

const { Aedes } = require('aedes')
const broker = await Aedes.createBroker(opts)
</tr></table> 

... (truncated)

Commits

Updates deepl-node from 1.26.0 to 1.27.0

Changelog

Sourced from deepl-node's changelog.

[1.27.0] - 2026-04-27

Changed

  • Replaced the uuid dependency with Node's built-in crypto.randomUUID(). Resolves GHSA-w5hq-g745-h8pq (uuid <14.0.0) and removes a runtime dependency.
  • Bumped minimum Node version from >=12.0 to >=14.17. Node 12 reached end of life in April 2022, and crypto.randomUUID() is available from Node 14.17 onward.

Fixed

  • HTTP requests that fail with ECONNRESET, EPIPE, or EAI_AGAIN are now retried. Previously these were classified as non-retryable, surfacing transient transport failures (e.g. stale keep-alive sockets) as hard errors on the first attempt. Behavior now aligns with deepl-python.

Security

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-21d6aa75e1 branch from 4bee4ad to 61fa3b9 Compare July 13, 2026 07:43
Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [aedes](https://github.com/moscajs/aedes) and [deepl-node](https://github.com/DeepLcom/deepl-node). These dependencies need to be updated together.


Removes `uuid`

Updates `aedes` from 0.51.3 to 1.1.1
- [Release notes](https://github.com/moscajs/aedes/releases)
- [Commits](moscajs/aedes@v0.51.3...v1.1.1)

Updates `deepl-node` from 1.26.0 to 1.27.0
- [Release notes](https://github.com/DeepLcom/deepl-node/releases)
- [Changelog](https://github.com/DeepL/deepl-node/blob/main/CHANGELOG.md)
- [Commits](DeepL/deepl-node@v1.26.0...v1.27.0)

---
updated-dependencies:
- dependency-name: aedes
  dependency-version: 1.1.1
  dependency-type: direct:production
- dependency-name: deepl-node
  dependency-version: 1.27.0
  dependency-type: indirect
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-21d6aa75e1 branch from 61fa3b9 to 864cae1 Compare July 31, 2026 08:05
@arteck arteck closed this Jul 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-21d6aa75e1 branch July 31, 2026 08:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant