@atlaskit/smart-card 45.20.0 → 45.20.1

package/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @atlaskit/smart-card
 
+## 45.20.1
+
+### Patch Changes
+
+- [`0927c3666c010`](https://bitbucket.org/atlassian/atlassian-frontend-monorepo/commits/0927c3666c010) -
+  Upgrade `uuid` from `3.x` to `11.1.1` to remediate GHSA-w5hq-g745-h8pq / SNYK-JS-UUID-16133035.
+
+  `uuid@11` removed the deep subpath exports (`uuid/v4`, `uuid/v1`, `uuid/v5`) and the default
+  export, so all internal call sites were migrated to named imports:
+
+  ```diff
+  -import uuid from 'uuid/v4';
+  +import { v4 as uuid } from 'uuid';
+
+  -import uuid from 'uuid';
+  +import { v4 as uuid } from 'uuid';
+  ```
+
+  With the exception of `@atlassian/integrations` (below), this is an internal implementation change
+  only - no public API, export, or entrypoint changed. UUID generation behaviour is unchanged
+  (`uuid@3`'s default export was already `v4`).
+
+  `@atlassian/integrations` declares `uuid` as a peer dependency, so its declared range moved from
+  `^3.1.0` to `^11.1.1`. That is a peer dependency declaration change, hence `minor` rather than
+  `patch` for that package.
+
+  The following `platform/packages/ai-mate` packages were also touched, but are all `private: true`
+  and so are intentionally not listed in the frontmatter above:
+  - `@atlassian/csm-assistance-service` - bumped its explicit `uuid` dependency from `npm:^9.0.0` to
+    `npm:^11.1.1` (`9.0.1` is also within the advisory's affected range).
+  - `@atlassian/csm-guidance-config` - example helper only, migrated to the named `uuid` import.
+  - `@atlassian/csm-ui-components` - example helper only, migrated to the named `uuid` import.
+
+- Updated dependencies
+
 ## 45.20.0
 
 ### Minor Changes

package/dist/cjs/ssr.js

@@ -9,7 +9,7 @@ exports.CardSSR = void 0;
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
 var _react = _interopRequireWildcard(require("react"));
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _AnalyticsContext = _interopRequireDefault(require("@atlaskit/analytics-next/AnalyticsContext"));
 var _fg = require("@atlaskit/platform-feature-flags/fg");
 var _analytics = require("./utils/analytics/analytics");
@@ -26,7 +26,7 @@ var CardSSR = exports.CardSSR = function CardSSR(props) {
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var _useState = (0, _react.useState)(function () {
       var _props$id;
-      return (_props$id = props.id) !== null && _props$id !== void 0 ? _props$id : (0, _uuid.default)();
+      return (_props$id = props.id) !== null && _props$id !== void 0 ? _props$id : (0, _uuid.v4)();
     }),
     _useState2 = (0, _slicedToArray2.default)(_useState, 1),
     id = _useState2[0];

package/dist/cjs/state/hooks/use-ai-summary/ai-summary-service/index.js

@@ -10,7 +10,7 @@ var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/
 var _classCallCheck2 = _interopRequireDefault(require("@babel/runtime/helpers/classCallCheck"));
 var _createClass2 = _interopRequireDefault(require("@babel/runtime/helpers/createClass"));
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _linkingCommon = require("@atlaskit/linking-common");
 var _readStream = require("./readStream");
 var _types = require("./types");
@@ -124,7 +124,7 @@ var AISummaryService = exports.AISummaryService = /*#__PURE__*/function () {
               } finally {
                 _iterator2.f();
               }
-              id = (0, _uuid.default)();
+              id = (0, _uuid.v4)();
               _context2.prev = 1;
               (_this$onStart = this.onStart) === null || _this$onStart === void 0 || _this$onStart.call(this, id);
               _context2.next = 2;

package/dist/cjs/state/hooks/use-invoke-client-action/index.js

@@ -9,7 +9,7 @@ exports.default = void 0;
 var _regenerator = _interopRequireDefault(require("@babel/runtime/regenerator"));
 var _asyncToGenerator2 = _interopRequireDefault(require("@babel/runtime/helpers/asyncToGenerator"));
 var _react = require("react");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _useAnalyticsEvents2 = require("../../../common/analytics/generated/use-analytics-events");
 var measure = _interopRequireWildcard(require("../../../utils/performance"));
 var _analytics = require("../../analytics");
@@ -34,7 +34,7 @@ var useInvokeClientAction = function useInvokeClientAction(_ref) {
           case 0:
             actionSubjectId = _ref2.actionSubjectId, actionType = _ref2.actionType, actionFn = _ref2.actionFn, _ref2$definitionId = _ref2.definitionId, definitionId = _ref2$definitionId === void 0 ? null : _ref2$definitionId, extensionKey = _ref2.extensionKey, display = _ref2.display, id = _ref2.id, prompt = _ref2.prompt, _ref2$resourceType = _ref2.resourceType, resourceType = _ref2$resourceType === void 0 ? null : _ref2$resourceType;
             // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-            experienceId = (0, _uuid.default)(); // Begin performance instrumentation.
+            experienceId = (0, _uuid.v4)(); // Begin performance instrumentation.
             markName = "".concat(experienceId, "-").concat(actionType);
             measure.mark(markName, 'pending');
             _context.prev = 1;

package/dist/cjs/state/hooks/use-resolve-hyperlink/index.js

@@ -8,7 +8,7 @@ Object.defineProperty(exports, "__esModule", {
 exports.default = void 0;
 var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/slicedToArray"));
 var _react = require("react");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _useAnalyticsEvents2 = require("../../../common/analytics/generated/use-analytics-events");
 var measure = _interopRequireWildcard(require("../../../utils/performance"));
 var _actions = require("../../actions");
@@ -22,7 +22,7 @@ var useResolveHyperlink = function useResolveHyperlink(_ref) {
   var href = _ref.href;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var _useState = (0, _react.useState)(function () {
-      return (0, _uuid.default)();
+      return (0, _uuid.v4)();
     }),
     _useState2 = (0, _slicedToArray2.default)(_useState, 1),
     id = _useState2[0];

package/dist/cjs/state/hooks-external/useSmartLinkActions.js

@@ -7,7 +7,7 @@ Object.defineProperty(exports, "__esModule", {
 exports.useSmartLinkActions = useSmartLinkActions;
 var _defineProperty2 = _interopRequireDefault(require("@babel/runtime/helpers/defineProperty"));
 var _react = require("react");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _linkProvider = require("@atlaskit/link-provider");
 var _fg = require("@atlaskit/platform-feature-flags/fg");
 var _expValEquals = require("@atlaskit/tmp-editor-statsig/exp-val-equals");
@@ -31,7 +31,7 @@ function useSmartLinkActions(_ref) {
     prefetch = _ref.prefetch;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var id = (0, _react.useMemo)(function () {
-    return (0, _uuid.default)();
+    return (0, _uuid.v4)();
   }, []);
   var linkState = (0, _store.useSmartCardState)(url);
   var _useAnalyticsEvents = (0, _useAnalyticsEvents2.useAnalyticsEvents)(),

package/dist/cjs/state/hooks-external/useSmartLinkReload.js

@@ -1,12 +1,11 @@
 "use strict";
 
-var _interopRequireDefault = require("@babel/runtime/helpers/interopRequireDefault");
 Object.defineProperty(exports, "__esModule", {
   value: true
 });
 exports.useSmartLinkReload = useSmartLinkReload;
 var _react = require("react");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _actions = require("../actions");
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
 
@@ -19,7 +18,7 @@ function useSmartLinkReload(_ref) {
   var url = _ref.url;
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var id = (0, _react.useMemo)(function () {
-    return (0, _uuid.default)();
+    return (0, _uuid.v4)();
   }, []);
   var linkActions = (0, _actions.useSmartCardActions)(id, url);
   return linkActions.reload;

package/dist/cjs/view/CardWithUrl/loader.js

@@ -12,7 +12,7 @@ var _slicedToArray2 = _interopRequireDefault(require("@babel/runtime/helpers/sli
 var _react = _interopRequireWildcard(require("react"));
 var _reactErrorBoundary = require("react-error-boundary");
 var _reactMagneticDi = require("react-magnetic-di");
-var _uuid = _interopRequireDefault(require("uuid"));
+var _uuid = require("uuid");
 var _fg = require("@atlaskit/platform-feature-flags/fg");
 var _useAnalyticsEvents2 = require("../../common/analytics/generated/use-analytics-events");
 var _analytics = require("../../state/analytics");
@@ -34,7 +34,7 @@ var LazyCardWithUrlContent = exports.LazyCardWithUrlContent = /*#__PURE__*/(0, _
 function CardWithURLRenderer(props) {
   // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
   var _useState = (0, _react.useState)(function () {
-      return props.id ? props.id : (0, _uuid.default)();
+      return props.id ? props.id : (0, _uuid.v4)();
     }),
     _useState2 = (0, _slicedToArray2.default)(_useState, 1),
     id = _useState2[0];

package/dist/es2019/ssr.js

@@ -1,7 +1,7 @@
 import React, { useState } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import AnalyticsContext from '@atlaskit/analytics-next/AnalyticsContext';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { context } from './utils/analytics/analytics';

package/dist/es2019/state/hooks/use-ai-summary/ai-summary-service/index.js

@@ -1,6 +1,6 @@
 import _defineProperty from "@babel/runtime/helpers/defineProperty";
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { getBaseUrl } from '@atlaskit/linking-common';
 import { readStream } from './readStream';
 import { ChunkProcessingError } from './types';

package/dist/es2019/state/hooks/use-invoke-client-action/index.js

@@ -1,7 +1,7 @@
 import { useCallback } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '../../../common/analytics/generated/use-analytics-events';
 import * as measure from '../../../utils/performance';
 import { failUfoExperience, startUfoExperience, succeedUfoExperience } from '../../analytics';

package/dist/es2019/state/hooks/use-resolve-hyperlink/index.js

@@ -1,7 +1,7 @@
 import { useEffect, useState } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '../../../common/analytics/generated/use-analytics-events';
 import * as measure from '../../../utils/performance';
 import { useSmartCardActions } from '../../actions';

package/dist/es2019/state/hooks-external/useSmartLinkActions.js

@@ -1,7 +1,7 @@
 import { useMemo } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useSmartLinkContext } from '@atlaskit/link-provider';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { expValEquals } from '@atlaskit/tmp-editor-statsig/exp-val-equals';

package/dist/es2019/state/hooks-external/useSmartLinkReload.js

@@ -1,7 +1,7 @@
 import { useMemo } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useSmartCardActions as useLinkActions } from '../actions';
 /**
  * Exposes a programmatic way to reload the data being used to render a Smart Link.

package/dist/es2019/view/CardWithUrl/loader.js

@@ -2,7 +2,7 @@ import React, { lazy, Suspense, useCallback, useEffect, useState } from 'react';
 import { ErrorBoundary } from 'react-error-boundary';
 import { di } from 'react-magnetic-di';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { useAnalyticsEvents } from '../../common/analytics/generated/use-analytics-events';
 import { failUfoExperience, startUfoExperience } from '../../state/analytics';

package/dist/esm/ssr.js

@@ -5,7 +5,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 import React, { useState } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import AnalyticsContext from '@atlaskit/analytics-next/AnalyticsContext';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { context } from './utils/analytics/analytics';

package/dist/esm/state/hooks/use-ai-summary/ai-summary-service/index.js

@@ -11,7 +11,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 function _asyncIterator(r) { var n, t, o, e = 2; for ("undefined" != typeof Symbol && (t = Symbol.asyncIterator, o = Symbol.iterator); e--;) { if (t && null != (n = r[t])) return n.call(r); if (o && null != (n = r[o])) return new AsyncFromSyncIterator(n.call(r)); t = "@@asyncIterator", o = "@@iterator"; } throw new TypeError("Object is not async iterable"); }
 function AsyncFromSyncIterator(r) { function AsyncFromSyncIteratorContinuation(r) { if (Object(r) !== r) return Promise.reject(new TypeError(r + " is not an object.")); var n = r.done; return Promise.resolve(r.value).then(function (r) { return { value: r, done: n }; }); } return AsyncFromSyncIterator = function AsyncFromSyncIterator(r) { this.s = r, this.n = r.next; }, AsyncFromSyncIterator.prototype = { s: null, n: null, next: function next() { return AsyncFromSyncIteratorContinuation(this.n.apply(this.s, arguments)); }, return: function _return(r) { var n = this.s.return; return void 0 === n ? Promise.resolve({ value: r, done: !0 }) : AsyncFromSyncIteratorContinuation(n.apply(this.s, arguments)); }, throw: function _throw(r) { var n = this.s.return; return void 0 === n ? Promise.reject(r) : AsyncFromSyncIteratorContinuation(n.apply(this.s, arguments)); } }, new AsyncFromSyncIterator(r); }
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { getBaseUrl } from '@atlaskit/linking-common';
 import { readStream } from './readStream';
 import { ChunkProcessingError } from './types';

package/dist/esm/state/hooks/use-invoke-client-action/index.js

@@ -3,7 +3,7 @@ import _regeneratorRuntime from "@babel/runtime/regenerator";
 import { useCallback } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '../../../common/analytics/generated/use-analytics-events';
 import * as measure from '../../../utils/performance';
 import { failUfoExperience, startUfoExperience, succeedUfoExperience } from '../../analytics';

package/dist/esm/state/hooks/use-resolve-hyperlink/index.js

@@ -2,7 +2,7 @@ import _slicedToArray from "@babel/runtime/helpers/slicedToArray";
 import { useEffect, useState } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useAnalyticsEvents } from '../../../common/analytics/generated/use-analytics-events';
 import * as measure from '../../../utils/performance';
 import { useSmartCardActions } from '../../actions';

package/dist/esm/state/hooks-external/useSmartLinkActions.js

@@ -4,7 +4,7 @@ function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t =
 import { useMemo } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useSmartLinkContext } from '@atlaskit/link-provider';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { expValEquals } from '@atlaskit/tmp-editor-statsig/exp-val-equals';

package/dist/esm/state/hooks-external/useSmartLinkReload.js

@@ -1,7 +1,7 @@
 import { useMemo } from 'react';
 
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { useSmartCardActions as useLinkActions } from '../actions';
 /**
  * Exposes a programmatic way to reload the data being used to render a Smart Link.

package/dist/esm/view/CardWithUrl/loader.js

@@ -6,7 +6,7 @@ import React, { lazy, Suspense, useCallback, useEffect, useState } from 'react';
 import { ErrorBoundary } from 'react-error-boundary';
 import { di } from 'react-magnetic-di';
 // eslint-disable-next-line @atlaskit/platform/prefer-crypto-random-uuid -- Use crypto.randomUUID instead
-import uuid from 'uuid';
+import { v4 as uuid } from 'uuid';
 import { fg } from '@atlaskit/platform-feature-flags/fg';
 import { useAnalyticsEvents } from '../../common/analytics/generated/use-analytics-events';
 import { failUfoExperience, startUfoExperience } from '../../state/analytics';

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@atlaskit/smart-card",
-	"version": "45.20.0",
+	"version": "45.20.1",
 	"description": "Smart card component",
 	"publishConfig": {
 		"registry": "https://registry.npmjs.org/"
@@ -107,7 +107,7 @@
 		"react-magnetic-di": "^3.1.4",
 		"react-render-image": "^1.1.3",
 		"use-sync-external-store": "^1.5.0",
-		"uuid": "^3.1.0"
+		"uuid": "^11.1.1"
 	},
 	"peerDependencies": {
 		"@atlaskit/link-provider": "^5.5.0",