@atlaskit/editor-plugin-media 18.1.6 → 18.1.7

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @atlaskit/editor-plugin-media
 
+## 18.1.7
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
+- Updated dependencies
+
 ## 18.1.6
 
 ### Patch Changes

package/dist/cjs/nodeviews/mediaNodeUpdater.js

@@ -11,7 +11,7 @@ var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/
 var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
 var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _v = _interopRequireDefault(require("uuid/v4"));
+var _uuid = require("uuid");
 var _setAttrs = require("@atlaskit/adf-schema/steps/set-attrs");
 var _analytics = require("@atlaskit/editor-common/analytics");
 var _mediaSingle = require("@atlaskit/editor-common/media-single");
@@ -603,7 +603,7 @@ var MediaNodeUpdater = exports.MediaNodeUpdater = /*#__PURE__*/function () {
                   collection: currentCollectionName,
                   authProvider: uploadMediaClientConfig.authProvider,
                   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-                  occurrenceKey: (0, _v.default)()
+                  occurrenceKey: (0, _uuid.v4)()
                 }
               });
             case 6:
@@ -755,7 +755,7 @@ var MediaNodeUpdater = exports.MediaNodeUpdater = /*#__PURE__*/function () {
                   collection: currentCollectionName,
                   authProvider: uploadMediaClientConfig.authProvider,
                   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-                  occurrenceKey: (0, _v.default)()
+                  occurrenceKey: (0, _uuid.v4)()
                 },
                 traceContext: traceContext
               });

package/dist/cjs/pm-plugins/main.js

@@ -14,7 +14,7 @@ var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/de
 var _assert = _interopRequireDefault(require("assert"));
 var _react = _interopRequireDefault(require("react"));
 var _reactIntl = require("react-intl");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _setAttrs = require("@atlaskit/adf-schema/steps/set-attrs");
 var _analytics = require("@atlaskit/editor-common/analytics");
 var _browser = require("@atlaskit/editor-common/browser");
@@ -1186,7 +1186,7 @@ var createPlugin = exports.createPlugin = function createPlugin(_schema, options
           return _view3.DecorationSet.create(state.doc, mediaNodes);
         }
         // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-        var dropPlaceholderKey = (0, _uuid.default)();
+        var dropPlaceholderKey = (0, _uuid.v4)();
         var dropPlaceholders = [_view3.Decoration.widget(pos, function () {
           return createDropPlaceholder(intl, nodeViewPortalProviderAPI, dropPlaceholderKey, mediaOptions && mediaOptions.allowDropzoneDropLine);
         }, {

package/dist/es2019/nodeviews/mediaNodeUpdater.js

@@ -1,6 +1,6 @@
 import _defineProperty from "@babel/runtime/helpers/defineProperty";
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuidV4 from 'uuid/v4';
+import { v4 as uuidV4 } from 'uuid';
 import { SetAttrsStep } from '@atlaskit/adf-schema/steps/set-attrs';
 import { ACTION, ACTION_SUBJECT, EVENT_TYPE } from '@atlaskit/editor-common/analytics';
 import { DEFAULT_IMAGE_HEIGHT, DEFAULT_IMAGE_WIDTH } from '@atlaskit/editor-common/media-single';

package/dist/es2019/pm-plugins/main.js

@@ -3,7 +3,7 @@ import assert from 'assert';
 import React from 'react';
 import { RawIntlProvider } from 'react-intl';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { SetAttrsStep } from '@atlaskit/adf-schema/steps/set-attrs';
 import { ACTION, ACTION_SUBJECT, ACTION_SUBJECT_ID, EVENT_TYPE, INPUT_METHOD } from '@atlaskit/editor-common/analytics';
 import { getBrowserInfo } from '@atlaskit/editor-common/browser';

package/dist/esm/nodeviews/mediaNodeUpdater.js

@@ -9,7 +9,7 @@ function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbol
 function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
 import _regeneratorRuntime from "@babel/runtime/regenerator";
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuidV4 from 'uuid/v4';
+import { v4 as uuidV4 } from 'uuid';
 import { SetAttrsStep } from '@atlaskit/adf-schema/steps/set-attrs';
 import { ACTION, ACTION_SUBJECT, EVENT_TYPE } from '@atlaskit/editor-common/analytics';
 import { DEFAULT_IMAGE_HEIGHT, DEFAULT_IMAGE_WIDTH } from '@atlaskit/editor-common/media-single';

package/dist/esm/pm-plugins/main.js

@@ -12,7 +12,7 @@ import assert from 'assert';
 import React from 'react';
 import { RawIntlProvider } from 'react-intl';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { SetAttrsStep } from '@atlaskit/adf-schema/steps/set-attrs';
 import { ACTION, ACTION_SUBJECT, ACTION_SUBJECT_ID, EVENT_TYPE, INPUT_METHOD } from '@atlaskit/editor-common/analytics';
 import { getBrowserInfo } from '@atlaskit/editor-common/browser';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atlaskit/editor-plugin-media",
-	"version": "18.1.6",
+	"version": "18.1.7",
 	"description": "Media plugin for @atlaskit/editor-core",
 	"author": "Atlassian Pty Ltd",
 	"license": "Apache-2.0",
@@ -21,7 +21,7 @@
 	],
 	"atlaskit:src": "src/index.ts",
 	"dependencies": {
-		"@atlaskit/adf-schema": "^57.2.0",
+		"@atlaskit/adf-schema": "^57.3.0",
 		"@atlaskit/analytics-namespaced-context": "^8.2.0",
 		"@atlaskit/analytics-next": "^12.5.0",
 		"@atlaskit/button": "^25.3.0",
@@ -47,9 +47,9 @@
 		"@atlaskit/editor-tables": "^3.1.0",
 		"@atlaskit/form": "^17.2.0",
 		"@atlaskit/icon": "^37.6.0",
-		"@atlaskit/icon-lab": "^7.7.0",
-		"@atlaskit/media-card": "^81.9.0",
-		"@atlaskit/media-client": "^37.6.0",
+		"@atlaskit/icon-lab": "^7.8.0",
+		"@atlaskit/media-card": "^81.10.0",
+		"@atlaskit/media-client": "^37.7.0",
 		"@atlaskit/media-client-react": "^6.4.0",
 		"@atlaskit/media-common": "^14.6.0",
 		"@atlaskit/media-filmstrip": "^52.4.0",
@@ -69,10 +69,10 @@
 		"classnames": "^2.2.5",
 		"lodash": "^4.17.21",
 		"memoize-one": "^6.0.0",
-		"uuid": "^3.1.0"
+		"uuid": "^11.1.1"
 	},
 	"peerDependencies": {
-		"@atlaskit/editor-common": "^120.12.0",
+		"@atlaskit/editor-common": "^120.13.0",
 		"@atlaskit/media-core": "^38.2.0",
 		"react": "^18.2.0 || ^19.2.0",
 		"react-dom": "^18.2.0 || ^19.2.0",