@atlaskit/mention 27.19.6 → 27.19.8

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # @atlaskit/mention
 
+## 27.19.8
+
+### Patch Changes
+
+- [`5a0128690a065`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/5a0128690a065) -
+  Add mention avatars to Rovo editor and renderer surfaces behind
+  platform_editor_rovo_editor_mention_node_avatar
+
+## 27.19.7
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
 ## 27.19.6
 
 ### Patch Changes

package/dist/cjs/util/id.js

@@ -1,14 +1,13 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.default = void 0;
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
 var _default = exports.default = function _default() {
   var prefix = arguments.length > 0 && arguments[0] !== undefined ? arguments[0] : '';
-  return "".concat(prefix, "_").concat((0, _uuid.default)());
+  return "".concat(prefix, "_").concat((0, _uuid.v4)());
 };

package/dist/cjs/util/package-version.js

@@ -4,4 +4,4 @@ Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.packageVersion = void 0;
-var packageVersion = exports.packageVersion = "27.19.5";
+var packageVersion = exports.packageVersion = "27.19.7";

package/dist/es2019/util/id.js

@@ -1,5 +1,5 @@
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
 export default ((prefix = '') => `${prefix}_${uuid()}`);

package/dist/es2019/util/package-version.js

@@ -1 +1 @@
-export const packageVersion = "27.19.5";
+export const packageVersion = "27.19.7";

package/dist/esm/util/id.js

@@ -1,5 +1,5 @@
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
 export default (function () {

package/dist/esm/util/package-version.js

@@ -1 +1 @@
-export var packageVersion = "27.19.5";
+export var packageVersion = "27.19.7";

package/package.json

@@ -52,7 +52,7 @@
 		"@emotion/react": "^11.7.1",
 		"@emotion/styled": "^11.0.0",
 		"lodash": "^4.17.21",
-		"uuid": "^3.1.0"
+		"uuid": "^11.1.1"
 	},
 	"description": "A React component used to display user profiles in a list for 'Mention' functionality",
 	"devDependencies": {
@@ -119,5 +119,5 @@
 		"*.compiled.css"
 	],
 	"types": "dist/types/index.d.ts",
-	"version": "27.19.6"
+	"version": "27.19.8"
 }