Skip to content

build(deps): bump uuid and bootstrap-italia#616

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-1dae278b79
Open

build(deps): bump uuid and bootstrap-italia#616
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/multi-1dae278b79

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.1 and updates ancestor dependency bootstrap-italia. These dependencies need to be updated together.

Updates uuid from 8.3.2 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uuid since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates bootstrap-italia from 2.14.0 to 2.18.1

Release notes

Sourced from bootstrap-italia's releases.

v2.18.1

2.18.1 (2026-04-23)

Bug Fixes

  • correct table style inheritance description (5914bf7)
  • replace shadow with border color #1597 (#1761) (f1e198c)
  • update examples_api_update_3.yml branch name (feace15)

v2.18.0

2.18.0 (2026-03-05)

Bug Fixes

  • a11y: improve modal with icon example and docs (#1593) (6a09ef0)
  • tooltip stays open when mouse moves on it (a2529b1)

Features

  • increase gutter-x starting from md breakpoint (407fed5)

v2.17.5

2.17.5 (2026-02-24)

Bug Fixes

  • docs: image background on d-flex component viewer (ad5eacb)
  • docs: typo (e78b675)
  • icon paths in card examples (e62ee01)

v2.17.4

2.17.4 (2026-02-17)

Bug Fixes

v2.17.3

2.17.3 (2026-02-04)

  • security update

v2.17.2

2.17.2 (2026-01-19)

Bug Fixes

  • removed invalid selector :after .icon (e4804b9)

... (truncated)

Changelog

Sourced from bootstrap-italia's changelog.

2.18.1 (2026-04-23)

Bug Fixes

  • correct table style inheritance description (5914bf7)
  • replace shadow with border color #1597 (#1761) (f1e198c)
  • update examples_api_update_3.yml branch name (feace15)

2.18.0 (2026-03-05)

Bug Fixes

  • a11y: improve modal with icon example and docs (#1593) (6a09ef0)
  • tooltip stays open when mouse moves on it (a2529b1)

Features

  • increase gutter-x starting from md breakpoint (407fed5)

2.17.5 (2026-02-24)

Bug Fixes

  • docs: image background on d-flex component viewer (ad5eacb)
  • docs: typo (e78b675)
  • icon paths in card examples (e62ee01)

2.17.4 (2026-02-17)

Bug Fixes

2.17.3 (2026-02-04)

  • security update

... (truncated)

Commits
  • 4ada670 chore(release): 2.18.1 🎉
  • f1e198c fix: replace shadow with border color #1597 (#1761)
  • 26034b3 chore(deps): bump uuid and conventional-changelog-cli
  • 3ff7ed9 chore(deps): bump @​xmldom/xmldom from 0.8.12 to 0.8.13
  • bda8aac chore: update publiccode
  • f612670 chore(deps-dev): bump follow-redirects from 1.15.11 to 1.16.0
  • 8dd3831 chore: update algolia key
  • 4e7df29 chore(deps): bump basic-ftp from 5.2.1 to 5.2.2
  • 3f1c76b chore: update algolia index
  • 10f2b1b chore(deps): bump serialize-javascript and @​rollup/plugin-terser
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jun 30, 2026
@vercel

vercel Bot commented Jun 30, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
publiccode-editor Ready Ready Preview Jul 13, 2026 12:51pm

Request Review

@valeriocomo

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-1dae278b79 branch from b2c15f7 to 6cf2816 Compare June 30, 2026 09:34
@valeriocomo

Copy link
Copy Markdown
Member

it cannot be merged. this PR needs some fixes.

Bottom-right buttons label color aren't white anymore.

image

@valeriocomo valeriocomo self-assigned this Jun 30, 2026
@valeriocomo

Copy link
Copy Markdown
Member

@dependabot rebase

@valeriocomo

valeriocomo commented Jul 3, 2026

Copy link
Copy Markdown
Member

hey @AlexPalaz! I need a quality check by you about this PR.
Let me know if I spot any kind of UI regressions.
Otherwise, let's approve the review and LGTM.

@valeriocomo

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor Author

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@valeriocomo

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.1 and updates ancestor dependency [bootstrap-italia](https://github.com/italia/bootstrap-italia). These dependencies need to be updated together.


Updates `uuid` from 8.3.2 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v8.3.2...v14.0.1)

Updates `bootstrap-italia` from 2.14.0 to 2.18.1
- [Release notes](https://github.com/italia/bootstrap-italia/releases)
- [Changelog](https://github.com/italia/bootstrap-italia/blob/main/CHANGELOG.md)
- [Commits](italia/bootstrap-italia@v2.14.0...v2.18.1)

---
updated-dependencies:
- dependency-name: bootstrap-italia
  dependency-version: 2.18.1
  dependency-type: direct:production
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-1dae278b79 branch from fa6353a to d1a4121 Compare July 13, 2026 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant