@atlaskit/editor-plugin-mentions 18.2.9 → 18.2.10

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @atlaskit/editor-plugin-mentions
 
+## 18.2.10
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
+- Updated dependencies
+
 ## 18.2.9
 
 ### Patch Changes

package/dist/cjs/editor-commands/index.js

@@ -1,11 +1,10 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.insertMention = exports.createSingleMentionFragment = void 0;
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _utils = require("@atlaskit/editor-common/utils");
 var _model = require("@atlaskit/editor-prosemirror/model");
 var _resource = require("@atlaskit/mention/resource");
@@ -49,7 +48,7 @@ var createSingleMentionFragment = exports.createSingleMentionFragment = function
       accessLevel: accessLevel,
       userType: userType === 'DEFAULT' ? null : userType,
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      localId: localId !== null && localId !== void 0 ? localId : (0, _uuid.default)()
+      localId: localId !== null && localId !== void 0 ? localId : (0, _uuid.v4)()
     }, null, annotationMarksForPos);
     var space = schema.text(' ', annotationMarksForPos);
     return _model.Fragment.from([mentionNode, space]);

package/dist/cjs/mentionsPlugin.js

@@ -12,7 +12,7 @@ var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"))
 var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
 var _react = _interopRequireWildcard(require("react"));
 var _reactIntl = require("react-intl");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _analytics = require("@atlaskit/editor-common/analytics");
 var _messages = require("@atlaskit/editor-common/messages");
 var _providerFactory = require("@atlaskit/editor-common/provider-factory");
@@ -91,7 +91,7 @@ var mentionsPlugin = exports.mentionsPlugin = function mentionsPlugin(_ref3) {
   var options = _ref3.config,
     api = _ref3.api;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-  var sessionId = (0, _uuid.default)();
+  var sessionId = (0, _uuid.v4)();
   var previousMediaProvider;
   var fireEvent = function fireEvent(payload, channel) {
     var _api$analytics;

package/dist/cjs/nodeviews/disabledTooltipRenderer.js

@@ -12,7 +12,7 @@ var _runtime = require("@compiled/react/runtime");
 var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
 var _react = _interopRequireWildcard(require("react"));
 var _bindEventListener = require("bind-event-listener");
-var _v = _interopRequireDefault(require("uuid/v4"));
+var _uuid = require("uuid");
 var _Tooltip = _interopRequireDefault(require("@atlaskit/tooltip/Tooltip"));
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, default: e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- mirror existing renderer pattern
@@ -155,7 +155,7 @@ var disabledTooltipRenderer = exports.disabledTooltipRenderer = function disable
   var chipElement = _ref5.chipElement,
     portalProviderAPI = _ref5.portalProviderAPI;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- mirror existing renderer pattern
-  var key = (0, _v.default)();
+  var key = (0, _uuid.v4)();
   var currentTooltip;
   var listeners = new Set();
   var broadcast = function broadcast() {

package/dist/cjs/nodeviews/profileCardRenderer.js

@@ -8,7 +8,7 @@ exports.profileCardRenderer = void 0;
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _react = _interopRequireDefault(require("react"));
 var _bindEventListener = require("bind-event-listener");
-var _v = _interopRequireDefault(require("uuid/v4"));
+var _uuid = require("uuid");
 var _state = require("@atlaskit/editor-prosemirror/state");
 var _utils = require("@atlaskit/editor-prosemirror/utils");
 var _isExperimentEnabled = require("@atlaskit/platform-feature-experiments/is-experiment-enabled");
@@ -32,7 +32,7 @@ var profileCardRenderer = exports.profileCardRenderer = function profileCardRend
   var renderingProfileCard = false;
   var navigatingToProfile = false;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-  var key = (0, _v.default)();
+  var key = (0, _uuid.v4)();
   var cleanupSelection;
   var removeProfileCard = function removeProfileCard() {
     var _cleanupSelection;

package/dist/cjs/pm-plugins/main.js

@@ -43,7 +43,7 @@ var ACTIONS = exports.ACTIONS = {
   CLEAR_PENDING_PASTED_AGENT_MENTION: 'CLEAR_PENDING_PASTED_AGENT_MENTION'
 };
 var PACKAGE_NAME = "@atlaskit/editor-plugin-mentions";
-var PACKAGE_VERSION = "18.2.8";
+var PACKAGE_VERSION = "18.2.9";
 var setProvider = function setProvider(provider) {
   return function (state, dispatch) {
     if (dispatch) {

package/dist/cjs/ui/type-ahead/index.js

@@ -11,7 +11,7 @@ exports.mentionToTypeaheadItem = void 0;
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _toConsumableArray2 = _interopRequireDefault(require("@babel/runtime/helpers/toConsumableArray"));
 var _react = _interopRequireDefault(require("react"));
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _messages = require("@atlaskit/editor-common/messages");
 var _typeAhead = require("@atlaskit/editor-common/type-ahead");
 var _model = require("@atlaskit/editor-prosemirror/model");
@@ -283,7 +283,7 @@ var buildNodesForTeamMention = function buildNodesForTeamMention(schema, selecte
       accessLevel: accessLevel,
       userType: 'DEFAULT',
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      localId: (0, _uuid.default)()
+      localId: (0, _uuid.v4)()
     });
     inlineNodes.push(userMentionNode);
     // should not add empty space after the last user mention.
@@ -378,7 +378,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
     showAgentMentionsLabsLozenge = _ref0$showAgentMentio === void 0 ? false : _ref0$showAgentMentio,
     profilecardProvider = _ref0.profilecardProvider;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-  var sessionId = (0, _uuid.default)();
+  var sessionId = (0, _uuid.v4)();
   var firstQueryWithoutResults = null;
   var lastTypeAheadQuery = '';
   var subscriptionKeys = new Set();
@@ -423,7 +423,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
         contextIdentifierProvider = _ref10.contextIdentifierProvider;
       return new Promise(function (resolve, reject) {
         // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-        var key = "loadingMentionsForTypeAhead_".concat((0, _uuid.default)());
+        var key = "loadingMentionsForTypeAhead_".concat((0, _uuid.v4)());
         var mentionsSubscribeCallback = function mentionsSubscribeCallback(mentions) {
           var resultQuery = arguments.length > 1 && arguments[1] !== undefined ? arguments[1] : '';
           var stats = arguments.length > 2 ? arguments[2] : undefined;
@@ -589,7 +589,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
       }
 
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      var mentionLocalId = (0, _uuid.default)();
+      var mentionLocalId = (0, _uuid.v4)();
       if (handleMentionsChanged) {
         var mentionChange = _objectSpread({
           id: id,
@@ -612,7 +612,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
       }), query, contextIdentifierProvider, taskListId, taskItemId, isAgentMentionSelection, enableAgentSectioning));
 
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      sessionId = (0, _uuid.default)();
+      sessionId = (0, _uuid.v4)();
       if (mentionProvider && (0, _utils3.isTeamType)(userType)) {
         return insert(buildNodesForTeamMention(schema, item.mention, mentionProvider, sanitizePrivateContent));
       }
@@ -679,7 +679,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
       subscriptionKeys.clear();
 
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      sessionId = (0, _uuid.default)();
+      sessionId = (0, _uuid.v4)();
     }
   };
 
@@ -717,7 +717,7 @@ var createTypeAheadConfig = exports.createTypeAheadConfig = function createTypeA
       contextIdentifierProvider = _ref16.contextIdentifierProvider;
 
     // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-    var key = "loadingMentionsForTypeAhead_".concat((0, _uuid.default)());
+    var key = "loadingMentionsForTypeAhead_".concat((0, _uuid.v4)());
     var initialResolve = null;
     var initialReject = null;
     var initialResolved = false;

package/dist/es2019/editor-commands/index.js

@@ -1,5 +1,5 @@
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { getAnnotationMarksForPos } from '@atlaskit/editor-common/utils';
 import { Fragment } from '@atlaskit/editor-prosemirror/model';
 import { isResolvingMentionProvider } from '@atlaskit/mention/resource';

package/dist/es2019/mentionsPlugin.js

@@ -1,7 +1,7 @@
 import React, { useEffect, useMemo } from 'react';
 import { useIntl } from 'react-intl';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { INPUT_METHOD } from '@atlaskit/editor-common/analytics';
 import { toolbarInsertBlockMessages as messages, mentionMessages } from '@atlaskit/editor-common/messages';
 import { WithProviders } from '@atlaskit/editor-common/provider-factory';

package/dist/es2019/nodeviews/disabledTooltipRenderer.js

@@ -4,7 +4,7 @@ import { ax, ix } from "@compiled/react/runtime";
 import React, { useEffect, useState } from 'react';
 import { bindAll } from 'bind-event-listener';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- mirror existing renderer pattern
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import Tooltip from '@atlaskit/tooltip/Tooltip';
 const styles = {
   hiddenTrigger: "_1e0cglyw"

package/dist/es2019/nodeviews/profileCardRenderer.js

@@ -1,7 +1,7 @@
 import React from 'react';
 import { bind } from 'bind-event-listener';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import { NodeSelection, TextSelection } from '@atlaskit/editor-prosemirror/state';
 import { findChildrenByAttr } from '@atlaskit/editor-prosemirror/utils';
 import { isExperimentEnabled } from '@atlaskit/platform-feature-experiments/is-experiment-enabled';

package/dist/es2019/pm-plugins/main.js

@@ -32,7 +32,7 @@ export const ACTIONS = {
   CLEAR_PENDING_PASTED_AGENT_MENTION: 'CLEAR_PENDING_PASTED_AGENT_MENTION'
 };
 const PACKAGE_NAME = "@atlaskit/editor-plugin-mentions";
-const PACKAGE_VERSION = "18.2.8";
+const PACKAGE_VERSION = "18.2.9";
 const setProvider = provider => (state, dispatch) => {
   if (dispatch) {
     dispatch(state.tr.setMeta(mentionPluginKey, {

package/dist/es2019/ui/type-ahead/index.js

@@ -1,7 +1,7 @@
 import React from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { mentionMessages } from '@atlaskit/editor-common/messages';
 import { TypeAheadAvailableNodes } from '@atlaskit/editor-common/type-ahead';
 import { Fragment } from '@atlaskit/editor-prosemirror/model';

package/dist/esm/editor-commands/index.js

@@ -1,5 +1,5 @@
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { getAnnotationMarksForPos } from '@atlaskit/editor-common/utils';
 import { Fragment } from '@atlaskit/editor-prosemirror/model';
 import { isResolvingMentionProvider } from '@atlaskit/mention/resource';

package/dist/esm/mentionsPlugin.js

@@ -8,7 +8,7 @@ import _regeneratorRuntime from "@babel/runtime/regenerator";
 import React, { useEffect, useMemo } from 'react';
 import { useIntl } from 'react-intl';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { INPUT_METHOD } from '@atlaskit/editor-common/analytics';
 import { toolbarInsertBlockMessages as messages, mentionMessages } from '@atlaskit/editor-common/messages';
 import { WithProviders } from '@atlaskit/editor-common/provider-factory';

package/dist/esm/nodeviews/disabledTooltipRenderer.js

@@ -5,7 +5,7 @@ import { ax, ix } from "@compiled/react/runtime";
 import React, { useEffect, useState } from 'react';
 import { bindAll } from 'bind-event-listener';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- mirror existing renderer pattern
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import Tooltip from '@atlaskit/tooltip/Tooltip';
 var styles = {
   hiddenTrigger: "_1e0cglyw"

package/dist/esm/nodeviews/profileCardRenderer.js

@@ -4,7 +4,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 import React from 'react';
 import { bind } from 'bind-event-listener';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import { NodeSelection, TextSelection } from '@atlaskit/editor-prosemirror/state';
 import { findChildrenByAttr } from '@atlaskit/editor-prosemirror/utils';
 import { isExperimentEnabled } from '@atlaskit/platform-feature-experiments/is-experiment-enabled';

package/dist/esm/pm-plugins/main.js

@@ -35,7 +35,7 @@ export var ACTIONS = {
   CLEAR_PENDING_PASTED_AGENT_MENTION: 'CLEAR_PENDING_PASTED_AGENT_MENTION'
 };
 var PACKAGE_NAME = "@atlaskit/editor-plugin-mentions";
-var PACKAGE_VERSION = "18.2.8";
+var PACKAGE_VERSION = "18.2.9";
 var setProvider = function setProvider(provider) {
   return function (state, dispatch) {
     if (dispatch) {

package/dist/esm/ui/type-ahead/index.js

@@ -8,7 +8,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 import React from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { mentionMessages } from '@atlaskit/editor-common/messages';
 import { TypeAheadAvailableNodes } from '@atlaskit/editor-common/type-ahead';
 import { Fragment } from '@atlaskit/editor-prosemirror/model';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atlaskit/editor-plugin-mentions",
-	"version": "18.2.9",
+	"version": "18.2.10",
 	"description": "Mentions plugin for @atlaskit/editor-core",
 	"author": "Atlassian Pty Ltd",
 	"license": "Apache-2.0",
@@ -56,7 +56,7 @@
 		"bind-event-listener": "^3.0.0",
 		"focus-trap": "^2.4.5",
 		"react-loadable": "^5.1.0",
-		"uuid": "^3.1.0"
+		"uuid": "^11.1.1"
 	},
 	"peerDependencies": {
 		"@atlaskit/editor-common": "^120.13.0",