@atlaskit/media-client 37.7.0 → 37.7.1

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # @atlaskit/media-client
 
+## 37.7.1
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
 ## 37.7.0
 
 ### Minor Changes

package/dist/cjs/client/file-fetcher/index.js

@@ -24,7 +24,7 @@ var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/creat
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _map = require("rxjs/operators/map");
 var _Subscription = require("rxjs/Subscription");
-var _v = _interopRequireDefault(require("uuid/v4"));
+var _uuid = require("uuid");
 var _authToOwner = require("@atlaskit/media-core/auth-to-owner");
 var _isValidUuid = require("@atlaskit/media-common/isValidUuid");
 var _downloadUrl = require("@atlaskit/media-common/downloadUrl");
@@ -551,9 +551,9 @@ var FileFetcherImpl = exports.FileFetcherImpl = /*#__PURE__*/function () {
     key: "generateUploadableFileUpfrontIds",
     value: function generateUploadableFileUpfrontIds(collection, traceContext, expectedFileSize) {
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      var id = (0, _v.default)();
+      var id = (0, _uuid.v4)();
       // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-      var occurrenceKey = (0, _v.default)();
+      var occurrenceKey = (0, _uuid.v4)();
       var touchFileDescriptor = {
         fileId: id,
         occurrenceKey: occurrenceKey,

package/dist/es2019/client/file-fetcher/index.js

@@ -3,7 +3,7 @@ import _defineProperty from "@babel/runtime/helpers/defineProperty";
 import { map } from 'rxjs/operators/map';
 import { Subscription } from 'rxjs/Subscription';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import { authToOwner } from '@atlaskit/media-core/auth-to-owner';
 import { isValidUuid } from '@atlaskit/media-common/isValidUuid';
 import { downloadUrl } from '@atlaskit/media-common/downloadUrl';

package/dist/esm/client/file-fetcher/index.js

@@ -9,7 +9,7 @@ import _regeneratorRuntime from "@babel/runtime/regenerator";
 import { map } from 'rxjs/operators/map';
 import { Subscription } from 'rxjs/Subscription';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid/v4';
+import { v4 as uuid } from 'uuid';
 import { authToOwner } from '@atlaskit/media-core/auth-to-owner';
 import { isValidUuid } from '@atlaskit/media-common/isValidUuid';
 import { downloadUrl } from '@atlaskit/media-common/downloadUrl';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atlaskit/media-client",
-	"version": "37.7.0",
+	"version": "37.7.1",
 	"description": "Media API Web Client Library",
 	"publishConfig": {
 		"registry": "https://registry.npmjs.org/"
@@ -34,7 +34,7 @@
 		"lru_map": "^0.4.1",
 		"rusha": "^0.8.13",
 		"rxjs": "^5.5.0",
-		"uuid": "^3.1.0",
+		"uuid": "^11.1.1",
 		"xstate": "4.20.0"
 	},
 	"peerDependencies": {