Skip to content

chore(deps): bump uuid and deepl-node - #478

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4d7a8abe09
Closed

chore(deps): bump uuid and deepl-node#478
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4d7a8abe09

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.1 and updates ancestor dependency deepl-node. These dependencies need to be updated together.

Updates uuid from 11.1.1 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates deepl-node from 1.19.1 to 1.27.0

Release notes

Sourced from deepl-node's releases.

v1.26.0

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

v1.25.0

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in theDeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.

v1.24.0

Added

  • Added tagHandlingVersion parameter to translateText() to specify which version of the tag handling algorithm to use. Options are v1 and v2.

v1.23.0

Added

  • Added customInstructions parameter to translateText() to customize translation behavior with up to 10 instructions (max 300 characters each). Only supported for target languages: de, en, es, fr, it, ja, ko, zh and their variants. Note: using the customInstructions parameter will use quality_optimized model type as the default. Requests combining customInstructions and the latency_optimized model type will be rejected.

v1.22.0

Added

  • Added support for the GET /v3/style_rules endpoint in the client library, the implementation can be found in the DeepLClient class. Please refer to the README for usage instructions
  • Added styleId option to translateText() which allows text and document translation with style rules.

v1.21.0

Added

  • Added extraRequestParameters option to text and document translation methods to pass arbitrary parameters in the request body. This can be used to access beta features or override built-in parameters (such as target_lang, source_lang, etc.).

v1.20.0

Added

  • Official support for Node.js versions 20, 22 and 24

Fixed

  • Fixed document minification/deminification to preserve translated content. Previously, when document minification was enabled, the deminify process would use the original minified file instead of the translated version, causing translations to be lost.
  • Fixed handling of documents without media files during translation. The library now correctly processes documents that don't contain embedded media.
Changelog

Sourced from deepl-node's changelog.

[1.27.0] - 2026-04-27

Changed

  • Replaced the uuid dependency with Node's built-in crypto.randomUUID(). Resolves GHSA-w5hq-g745-h8pq (uuid <14.0.0) and removes a runtime dependency.
  • Bumped minimum Node version from >=12.0 to >=14.17. Node 12 reached end of life in April 2022, and crypto.randomUUID() is available from Node 14.17 onward.

Fixed

  • HTTP requests that fail with ECONNRESET, EPIPE, or EAI_AGAIN are now retried. Previously these were classified as non-retryable, surfacing transient transport failures (e.g. stale keep-alive sockets) as hard errors on the first attempt. Behavior now aligns with deepl-python.

Security

[1.26.0] - 2026-04-09

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

[1.25.0] - 2026-03-26

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in the DeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.

Changed

  • Updated formality tests to accept either formal or informal output when using default formality, since default formality is now automatic.
  • Removed Node 12 from the CI as it broke and is end-of-life.
  • Updated our model type tests to expect the model_type_used to be populated when the model_type is specified in the request

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by deepl-com, a new releaser for deepl-node since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 21, 2026
@github-actions

github-actions Bot commented Jun 21, 2026

Copy link
Copy Markdown
Contributor

❓ Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): uuid, deepl-node
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4d7a8abe09 branch from 0e306c5 to ca6e51d Compare July 1, 2026 18:49
@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

❓ Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): deepl-node, uuid
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

@dependabot
chore(deps): bump uuid and deepl-node
34061a6 
Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.1 and updates ancestor dependency [deepl-node](https://github.com/DeepLcom/deepl-node). These dependencies need to be updated together.


Updates `uuid` from 11.1.1 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.1...v14.0.1)

Updates `deepl-node` from 1.19.1 to 1.27.0
- [Release notes](https://github.com/DeepLcom/deepl-node/releases)
- [Changelog](https://github.com/DeepL/deepl-node/blob/main/CHANGELOG.md)
- [Commits](DeepL/deepl-node@v1.19.1...v1.27.0)

---
updated-dependencies:
- dependency-name: deepl-node
  dependency-version: 1.27.0
  dependency-type: indirect
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4d7a8abe09 branch from ca6e51d to 34061a6 Compare July 18, 2026 10:07
@github-actions

github-actions Bot commented Jul 18, 2026

Copy link
Copy Markdown
Contributor

❓ Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): deepl-node, uuid
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

@dependabot @github

dependabot Bot commented on behalf of github Sep 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/multi-4d7a8abe09 branch September 8, 2026 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rg-engineering