@atlaskit/link-picker 6.7.0 → 6.7.1

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @atlaskit/link-picker
 
+## 6.7.1
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
+- Updated dependencies
+
 ## 6.7.0
 
 ### Minor Changes

package/dist/cjs/ui/link-picker/index.js

@@ -17,7 +17,7 @@ var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/de
 var _react = _interopRequireWildcard(require("react"));
 var _reactIntl = require("react-intl");
 var _useCallbackRef = require("use-callback-ref");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _useAnalyticsEvents2 = require("@atlaskit/analytics-next/useAnalyticsEvents");
 var _linkProvider = require("@atlaskit/link-provider");
 var _url2 = require("@atlaskit/linking-common/url");
@@ -160,7 +160,7 @@ var LinkPicker = exports.LinkPicker = (0, _analytics.withLinkPickerAnalyticsCont
 
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var submitMessageId = (0, _react.useMemo)(function () {
-    return (0, _uuid.default)();
+    return (0, _uuid.v4)();
   }, []);
   (0, _react.useLayoutEffect)(function () {
     if (onContentResize) {

package/dist/es2019/ui/link-picker/index.js

@@ -6,7 +6,7 @@ import React, { Fragment, memo, useCallback, useLayoutEffect, useMemo, useReduce
 import { FormattedMessage, useIntl } from 'react-intl';
 import { useMergeRefs } from 'use-callback-ref';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '@atlaskit/analytics-next/useAnalyticsEvents';
 import { CardClient } from '@atlaskit/link-provider';
 import { isSafeUrl, normalizeUrl } from '@atlaskit/linking-common/url';

package/dist/esm/ui/link-picker/index.js

@@ -12,7 +12,7 @@ import React, { Fragment, memo, useCallback, useLayoutEffect, useMemo, useReduce
 import { FormattedMessage, useIntl } from 'react-intl';
 import { useMergeRefs } from 'use-callback-ref';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '@atlaskit/analytics-next/useAnalyticsEvents';
 import { CardClient } from '@atlaskit/link-provider';
 import { isSafeUrl, normalizeUrl } from '@atlaskit/linking-common/url';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atlaskit/link-picker",
-	"version": "6.7.0",
+	"version": "6.7.1",
 	"description": "Standalone link picker",
 	"author": "Atlassian Pty Ltd",
 	"publishConfig": {
@@ -80,7 +80,7 @@
 		"react-loosely-lazy": "^1.0.0",
 		"use-callback-ref": "^1.2.3",
 		"use-debounce": "^3.4.0",
-		"uuid": "^3.1.0"
+		"uuid": "^11.1.1"
 	},
 	"peerDependencies": {
 		"react": "^18.2.0",