From 6b381a2d8939322372f39f2d0cf265bae4cbe77f Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 8 Jul 2026 14:17:25 +0000 Subject: [PATCH 1/2] Initial plan From 1dbd2ef0f5b43548873983d0b70bb0dcf40f5e6c Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Wed, 8 Jul 2026 14:21:05 +0000 Subject: [PATCH 2/2] fix: override uuid to 11.1.1 to remediate GHSA-w5hq-g745-h8pq --- package-lock.json | 13 ++++++++----- package.json | 3 ++- 2 files changed, 10 insertions(+), 6 deletions(-) diff --git a/package-lock.json b/package-lock.json index 31bbecd..1c922f4 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8089,13 +8089,16 @@ "license": "MIT" }, "node_modules/uuid": { - "version": "8.3.2", - "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.2.tgz", - "integrity": "sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==", - "deprecated": "uuid@10 and below is no longer supported. For ESM codebases, update to uuid@latest. For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).", + "version": "11.1.1", + "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz", + "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==", + "funding": [ + "https://github.com/sponsors/broofa", + "https://github.com/sponsors/ctavan" + ], "license": "MIT", "bin": { - "uuid": "dist/bin/uuid" + "uuid": "dist/esm/bin/uuid" } }, "node_modules/v8-to-istanbul": { diff --git a/package.json b/package.json index 16adc25..0e13091 100644 --- a/package.json +++ b/package.json @@ -33,7 +33,8 @@ "smee-client": "^2.0.0" }, "overrides": { - "protobufjs": "8.6.3" + "protobufjs": "8.6.3", + "uuid": "11.1.1" }, "engines": { "node": ">= 18"