Repository navigation
fix(deps): vuln uuid (major → 14.0.3) [packages/react-native-babel-plugin/package.json] - #1490
Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intoOct 12, 2026
Conversation
|
PRApprover will approve and merge this PR, FAQ, #dx-source-code-management 🛠️ PRApproval Status
➡️ Current phase: ⏳ Merge via MergeQueue is still pending... |
Contributor
There was a problem hiding this comment.
🟡 Changes recommended
The ESM-only uuid 14 release is incompatible with the plugin’s published CommonJS entry points.
1 open finding
What changed in this PR
Upgrades uuid to address reported vulnerabilities.
Changes:
- Updates
uuidfrom 8.3.2 to 14.0.3. - Refreshes related and unrelated lockfile entries.
| File | Description |
|---|---|
packages/react-native-babel-plugin/package.json |
Updates the direct uuid dependency. |
yarn.lock |
Resolves uuid 14.0.3 and refreshes additional packages. |
🧠 Review effort: Balanced
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| "fast-glob": "^3.3.3", | ||
| "svgo": "^4.1.0", | ||
| "uuid": "^8.3.2" | ||
| "uuid": "^14.0.3" |
![dd-prapprover-prod-77c48c[bot]](https://avatars.githubusercontent.com/u/244837012?s=60&v=4){kind=small}
gh-worker-dd-devflow-36fce6
Bot
added
mergequeue-status: queued
mergequeue-status: in_progress
and removed
mergequeue-status: queued
labels
gh-worker-dd-mergequeue-cf854d
Bot
deleted the
engraver-auto-version-upgrade/major/npm/react-native-babel-plugin/2-1791794771
branch
October 12, 2026 21:01
This was referenced Oct 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary: Security update — 1 package upgraded (MAJOR changes included)
Manifests changed:
packages/react-native-babel-plugin/package.json(yarn)✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.
Updates
Warning
Major Version Upgrade
This update includes major version changes that may contain breaking changes. Please:
Security Details
ℹ️ Other Vulnerabilities (3)
v3/v5/v6whenbufis providedReview Checklist
Extra review is recommended for this update:
Update Mode: all_vulns
🤖 Generated by DataDog Automated Dependency Management System