Skip to content

chore(deps): bump uuid and lerna#706

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-9b4d6c4650
Open

chore(deps): bump uuid and lerna#706
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/npm_and_yarn/multi-9b4d6c4650

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 23, 2026

Removes uuid. It's no longer used after updating ancestor dependency lerna. These dependencies need to be updated together.

Removes uuid

Updates lerna from 5.6.2 to 9.0.7

Release notes

Sourced from lerna's releases.

v9.0.7

9.0.7 (2026-03-13)

Bug Fixes

  • core: normalize ./ prefix in workspace globs for package detection (#4308) (bd39779)
  • core: remove multimatch dependency and legacy-core internals (#4314) (ec01462)
  • version: skip config resolution in prettier getFileInfo check (#4306) (ae53efe)
  • version: support ESM and new v8+ conventional-changelog preset API (#4302) (575b248)

v9.0.6

9.0.6 (2026-03-11)

Bug Fixes

v9.0.5

9.0.5 (2026-02-28)

Bug Fixes

v9.0.4

9.0.4 (2026-02-10)

Bug Fixes

  • bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

v9.0.3

9.0.3 (2025-11-27)

Bumped some dependencies to reduce audit warning noise.

NOTE: 9.0.2 does not exist because of a failed release

v9.0.1

9.0.1 (2025-11-14)

Bug Fixes

  • expand version range to include nx v22.x (#4242) (0cca286)

... (truncated)

Changelog

Sourced from lerna's changelog.

9.0.7 (2026-03-13)

Bug Fixes

  • core: remove multimatch dependency and legacy-core internals (#4314) (ec01462)

9.0.6 (2026-03-11)

Bug Fixes

9.0.5 (2026-02-28)

Bug Fixes

9.0.4 (2026-02-10)

Bug Fixes

  • bump tar to 7.5.7, rimraf to 6.1.2, @​npmcli/run-script to 10.0.3 (#4267) (43e3d46)

9.0.3 (2025-11-27)

Note: Version bump only for package lerna

9.0.2 (2025-11-27)

Note: Version bump only for package lerna

9.0.1 (2025-11-14)

Bug Fixes

  • expand version range to include nx v22.x (#4242) (0cca286)

9.0.0 (2025-09-23)

Bug Fixes

  • publish: ensure README file names are populated on package.json (#4211) (362875d)

Features

  • support OIDC trusted publishing (d51e344)

... (truncated)

Commits
  • 4322536 chore(misc): publish 9.0.7
  • ec01462 fix(core): remove multimatch dependency and legacy-core internals (#4314)
  • 538bf1a chore(deps): replace write-pkg with internal writePackage utility (#4313)
  • ebf6729 chore(deps): remove set-blocking, is-stream, get-port (#4311)
  • 76ad78b chore(deps): replace uuid, pify, temp-dir with native Node.js APIs (#4310)
  • 5ad1cf8 chore(deps): replace make-dir, rimraf, resolve-from with native Node.js APIs ...
  • bb30d88 chore(misc): publish 9.0.6
  • c15070b refactor(create): consolidate @​lerna/create into the main lerna package (#4300)
  • 7a69a57 fix(deps): bump tar from 7.5.8 to 7.5.11 (#4296)
  • b768187 fix(deps): add missing ci-info dependency (#4263)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna). These dependencies need to be updated together.


Removes `uuid`

Updates `lerna` from 5.6.2 to 9.0.7
- [Release notes](https://github.com/lerna/lerna/releases)
- [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md)
- [Commits](https://github.com/lerna/lerna/commits/v9.0.7/packages/lerna)

---
updated-dependencies:
- dependency-name: uuid
  dependency-version: 
  dependency-type: indirect
- dependency-name: lerna
  dependency-version: 9.0.7
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 23, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented Apr 23, 2026

Deploy Preview for thingweb-playground failed. Why did it fail? →

Name Link
🔨 Latest commit 01bcd42
🔍 Latest deploy log https://app.netlify.com/projects/thingweb-playground/deploys/69e97910c1d7790009055250

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants