Bump uuid and @wordpress/editor

[dependabot]

Bumps uuid and @wordpress/editor. These dependencies needed to be updated together.
Updates uuid from 9.0.1 to 14.0.2

Release notes

Sourced from uuid's releases.

v14.0.2

14.0.2 (2026-08-18)

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

• add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

• expect crypto to be global everywhere (requires node@20+) (#935)
• drop node@18 support (#934)

Features

• drop node@18 support (#934) (dc4ddb8)

Bug Fixes

• expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
• Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

• rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.2 (2026-08-18)

Bug Fixes

• v1: carry nsecs overflow into the timestamp's high bits (#972) (6adcc1d)
• v1: set the multicast bit on v1Bytes's own randomly-generated node (#973) (b1da338)
• v7: align default seq formula in v7Bytes with updateV7State (#965) (a67db57)

14.0.1 (2026-06-20)

Bug Fixes

• add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

• Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

• crypto is now expected to be globally defined (requires node@20+) (#935)
• drop node@18 support (#934)
• upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

• make browser exports the default (#901)

Bug Fixes

• make browser exports the default (#901) (bce9d72)

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

• update to typescript@5.2 (#887)
• remove CommonJS support (#886)
• drop node@16 support (#883)

... (truncated)

Commits

• fd59f02 chore(main): release 14.0.2 (#967)
• f3c564e docs: point the Node support permalink at the CI version matrix (#974)
• b1da338 fix(v1): set the multicast bit on v1Bytes's own randomly-generated node (#973)
• 6adcc1d fix(v1): carry nsecs overflow into the timestamp's high bits (#972)
• ea83515 docs: cleanup API summary (#968)
• ac36860 chore: pin publint version in CI (#966)
• a67db57 fix(v7): align default seq formula in v7Bytes with updateV7State (#965)
• 7017780 chore(main): release 14.0.1 (#964)
• f2c3e4b chore: fix release-please workflow (#963)
• 27ffae5 fix: add types condition to node export for moduleResolution bundler (#961)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.

Updates @wordpress/editor from 14.39.0 to 14.54.0

Changelog

Sourced from @​wordpress/editor's changelog.

14.54.0 (2026-08-26)

New Features

• Add a private SiteExport menu item, moved from edit-site. It offers downloading the theme with the user's changes, only while editing a template or a template part — the entities the exported theme is made of (#81992).

Enhancements

• Commands: Add a command palette entry that opens the current post on the front end once it is published, labelled with the post type's view_item label (#66720).
• Pre-publish panel: Remove the "Visibility" and "Publish" headings that repeated the title of the panel containing them. The publish date's reset action, which lived in the removed header, becomes a "Reset" button below the date picker, disabled but still focusable while the post is set to publish immediately (#81806).

Bug Fixes

• Register the editor and block editor keyboard shortcuts from the editor provider, so shortcuts work for consumers that mount the editor without rendering EditorKeyboardShortcutsRegister themselves (#81580).
• Header: Allow the Back button column to grow when "Show button text labels" is enabled so the label is not obscured by the following controls (#81701).
• Notes: Stop forcing capitalization of the user name in a note byline, so the name is shown as the user set it (#81788).
• Device Preview: Center the editor canvas with the canvas container's own flex alignment rather than the canvas's auto margins, which were conditional on the resize handles being active. Switching from the mobile or tablet preview back to desktop no longer expands the canvas from the left edge (#81484).
• PostSchedule: Announce the new publish date to screen readers when the date is changed (#81629).
• Start page/template pattern modals: Align the footer actions with the modal content's padding, so the footer no longer overflows the modal width (#82021).

Internal

• Check the window.__experimentalEnableRealTimeCollaboration flag set by the Real-Time Collaboration experiment, instead of window._wpCollaborationEnabled, when determining whether collaboration is enabled for the current post (#80658).
• Split tsconfig into a build project and a default dev project so dev files are type checked without publishing their declarations. (#81515)

Enhancements

• Add an initialViewport prop to the editor provider, setting the width each entity opens at from the breakpoints the theme defines, so a host no longer has to dispatch setDeviceType from outside the provider and race the settings it reads (#81750).

14.53.0 (2026-08-12)

Internal

• Notes: Move the rich text control the note form renders from @wordpress/dataviews into this package, where @wordpress/rich-text is the same copy the block editor uses (#81430).
• Use the new @wordpress/kebab-case package instead of unlocking the kebabCase utility from the @wordpress/components private APIs (#81294).
• Vendor a local copy of the normalizeTextString utility instead of unlocking it from the @wordpress/components private APIs (#81294).

Enhancements

• Add a read-only code diff to the revisions screen (#80314).

New Features

• Add a blockStatesEditingEnabled editor setting, defaulting to true, which hides state controls for blocks in the block inspector and Global Styles when set to false (#80956, #81058).

Bug Fixes

• Device Preview: Keep tablet and mobile iframe widths inside their responsive breakpoints so media queries remain accurate at browser zoom levels.
• Document tools: Fix icon button focus styles to use the design system outset-ring__focus mixin (#81115).

... (truncated)

Commits

• d06b010 chore(release): publish (#82084)
• 0790fa5 Update changelog files
• 098e3ba Merge changes published in the Gutenberg plugin "release/23.9" branch
• 989764d chore(release): publish
• e18aa00 Update changelog files
• dbb73c9 Merge changes published in the Gutenberg plugin "release/23.8" branch
• 7e8b17a chore(release): publish
• 42ad080 Update changelog files
• edffa74 Merge changes published in the Gutenberg plugin "release/23.7" branch
• e9a74f9 chore(release): publish
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.