From facef01abd99dad718f3c3b43f0497f4f1f698f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 14:26:52 +0000 Subject: [PATCH 1/3] Bump uuid from 11.1.1 to 14.0.3 Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.3. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v11.1.1...v14.0.3) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package.json | 4 ++-- yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index ef718ea..35494ab 100644 --- a/package.json +++ b/package.json @@ -545,7 +545,7 @@ "opn": "5.3.0", "rimraf": "^3.0.2", "tar-fs": "^2.1.4", - "uuid": "^11.1.1" + "uuid": "^14.0.3" }, "resolutions": { "node.extend": "^1.1.7", @@ -567,6 +567,6 @@ "form-data": ">=4.0.6", "browserslist": ">=4.28.7", "baseline-browser-mapping": ">=2.11.0", - "uuid": "^11.1.1" + "uuid": "^14.0.3" } } diff --git a/yarn.lock b/yarn.lock index 7016f31..73094d7 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5762,10 +5762,10 @@ utila@~0.4: resolved "https://registry.yarnpkg.com/utila/-/utila-0.4.0.tgz#8a16a05d445657a3aea5eecc5b12a4fa5379772c" integrity sha512-Z0DbgELS9/L/75wZbro8xAnT50pBVFQZ+hUEueGDU5FN51YSCYM+jdxsfCiHjwNP/4LCDD0i/graKpeBnOXKRA== -uuid@^11.1.1, uuid@^8.3.2: - version "11.1.1" - resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.1.1.tgz#f6d81d2e1c65d00762e5e29b16c5d2d995e208ad" - integrity sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ== +uuid@^14.0.3, uuid@^8.3.2: + version "14.0.3" + resolved "https://registry.yarnpkg.com/uuid/-/uuid-14.0.3.tgz#48c9b0dcf5a42d983c23162399eeb9af8b2cc617" + integrity sha512-Sc5u1VVln93y1Xnz4R+CunOZc7R9LUcTmhj7Rc7Eg3HVcf7rVn2FOoa812fe0W8p3jD7xeoGSYbfqCGGH2B6xw== v8-to-istanbul@^9.0.0: version "9.3.0" From b6de9de8cabe46e36d2a92ad5ca16e57563e0e91 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 15:42:37 +0000 Subject: [PATCH 2/3] Bump uuid from 11.1.1 to 14.0.3 Bumps [uuid](https://github.com/uuidjs/uuid) from 11.1.1 to 14.0.3. - [Release notes](https://github.com/uuidjs/uuid/releases) - [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md) - [Commits](https://github.com/uuidjs/uuid/compare/v11.1.1...v14.0.3) --- updated-dependencies: - dependency-name: uuid dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package.json | 4 ++-- yarn.lock | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) diff --git a/package.json b/package.json index 447b8d2..fcd61ae 100644 --- a/package.json +++ b/package.json @@ -545,7 +545,7 @@ "opn": "5.3.0", "rimraf": "^3.0.2", "tar-fs": "^3.1.3", - "uuid": "^11.1.1" + "uuid": "^14.0.3" }, "resolutions": { "node.extend": "^1.1.7", @@ -567,6 +567,6 @@ "form-data": ">=4.0.6", "browserslist": ">=4.28.7", "baseline-browser-mapping": ">=2.11.0", - "uuid": "^11.1.1" + "uuid": "^14.0.3" } } diff --git a/yarn.lock b/yarn.lock index f30daa5..9022e95 100644 --- a/yarn.lock +++ b/yarn.lock @@ -5839,10 +5839,10 @@ utila@~0.4: resolved "https://registry.yarnpkg.com/utila/-/utila-0.4.0.tgz#8a16a05d445657a3aea5eecc5b12a4fa5379772c" integrity sha512-Z0DbgELS9/L/75wZbro8xAnT50pBVFQZ+hUEueGDU5FN51YSCYM+jdxsfCiHjwNP/4LCDD0i/graKpeBnOXKRA== -uuid@^11.1.1, uuid@^8.3.2: - version "11.1.1" - resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.1.1.tgz#f6d81d2e1c65d00762e5e29b16c5d2d995e208ad" - integrity sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ== +uuid@^14.0.3, uuid@^8.3.2: + version "14.0.3" + resolved "https://registry.yarnpkg.com/uuid/-/uuid-14.0.3.tgz#48c9b0dcf5a42d983c23162399eeb9af8b2cc617" + integrity sha512-Sc5u1VVln93y1Xnz4R+CunOZc7R9LUcTmhj7Rc7Eg3HVcf7rVn2FOoa812fe0W8p3jD7xeoGSYbfqCGGH2B6xw== v8-to-istanbul@^9.0.0: version "9.3.0" From 49a694acf58e4aa16ff6efdc8c40d95fe12772d4 Mon Sep 17 00:00:00 2001 From: Cody Spath Date: Wed, 21 Oct 2026 11:50:56 -0400 Subject: [PATCH 3/3] Replace uuid with crypto.randomUUID in auth provider uuid 14 relies on a global crypto.getRandomValues(), which is not available on Node 18 (VS Code 1.82-1.89, still allowed by engines.vscode). Use Node's built-in crypto.randomUUID() instead and drop uuid as a direct dependency. Co-Authored-By: Claude Opus 5.5 --- package.json | 3 +-- src/providers/authProvider.ts | 6 +++--- 2 files changed, 4 insertions(+), 5 deletions(-) diff --git a/package.json b/package.json index fcd61ae..23c98b0 100644 --- a/package.json +++ b/package.json @@ -544,8 +544,7 @@ "node-fetch": "^3.3.2", "opn": "5.3.0", "rimraf": "^3.0.2", - "tar-fs": "^3.1.3", - "uuid": "^14.0.3" + "tar-fs": "^3.1.3" }, "resolutions": { "node.extend": "^1.1.7", diff --git a/src/providers/authProvider.ts b/src/providers/authProvider.ts index d46f06b..890f2b5 100644 --- a/src/providers/authProvider.ts +++ b/src/providers/authProvider.ts @@ -14,7 +14,7 @@ import { window, workspace, } from 'vscode'; -import { v4 as uuid } from 'uuid'; +import { randomUUID } from 'crypto'; import { PromiseAdapter, promiseFromEvent } from '../utils/common'; import fetch from 'node-fetch'; import { ILaunchDarklyAuthenticationSession, Member, Team } from '../models'; @@ -127,7 +127,7 @@ export class LaunchDarklyAuthenticationProvider implements AuthenticationProvide ); const session: ILaunchDarklyAuthenticationSession = { - id: uuid(), + id: randomUUID(), accessToken: access_token, refreshToken: refresh_token, account: { @@ -194,7 +194,7 @@ export class LaunchDarklyAuthenticationProvider implements AuthenticationProvide cancellable: true, }, async (_, token) => { - const stateId = uuid(); + const stateId = randomUUID(); this._pendingStates.push(stateId); const scopeString = scopes.join(' '); const instances: QuickPickItem[] = [