Skip to content

chore(deps): bump uuid and deepl-node - #478

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4d7a8abe09
Open

chore(deps): bump uuid and deepl-node#478
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-4d7a8abe09

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 21, 2026

Copy link
Copy Markdown
Contributor

Bumps uuid to 14.0.1 and updates ancestor dependency deepl-node. These dependencies need to be updated together.

Updates uuid from 11.1.1 to 14.0.1

Release notes

Sourced from uuid's releases.

v14.0.1

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

  • expect crypto to be global everywhere (requires node@20+) (#935)
  • drop node@18 support (#934)

Features

Bug Fixes

  • expect crypto to be global everywhere (requires node@20+) (#935) (f2c235f)
  • Use GITHUB_TOKEN for release-please and enable npm provenance (#925) (ffa3138)

v13.0.2

13.0.2 (2026-05-04)

Bug Fixes

  • rerelease to fix provenance. (49ccb35)

v13.0.1

13.0.1 (2026-04-27)

Bug Fixes

v13.0.0

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

... (truncated)

Changelog

Sourced from uuid's changelog.

14.0.1 (2026-06-20)

Bug Fixes

  • add types condition to node export for moduleResolution bundler (#961) (27ffae5)

14.0.0 (2026-04-19)

Security

  • Fixes GHSA-w5hq-g745-h8pq: v3(), v5(), and v6() did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalid offset was provided. A RangeError is now thrown if offset < 0 or offset + 16 > buf.length.

⚠ BREAKING CHANGES

  • crypto is now expected to be globally defined (requires node@20+) (#935)
  • drop node@18 support (#934)
  • upgrade minimum supported TypeScript version to 5.4.3, in keeping with the project's policy of supporting TypeScript versions released within the last two years

13.0.0 (2025-09-08)

⚠ BREAKING CHANGES

  • make browser exports the default (#901)

Bug Fixes

12.0.0 (2025-09-05)

⚠ BREAKING CHANGES

  • update to typescript@5.2 (#887)
  • remove CommonJS support (#886)
  • drop node@16 support (#883)

Features

Bug Fixes

... (truncated)

Commits
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Updates deepl-node from 1.19.1 to 1.27.0

Release notes

Sourced from deepl-node's releases.

v1.26.0

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

v1.25.0

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in theDeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.

v1.24.0

Added

  • Added tagHandlingVersion parameter to translateText() to specify which version of the tag handling algorithm to use. Options are v1 and v2.

v1.23.0

Added

  • Added customInstructions parameter to translateText() to customize translation behavior with up to 10 instructions (max 300 characters each). Only supported for target languages: de, en, es, fr, it, ja, ko, zh and their variants. Note: using the customInstructions parameter will use quality_optimized model type as the default. Requests combining customInstructions and the latency_optimized model type will be rejected.

v1.22.0

Added

  • Added support for the GET /v3/style_rules endpoint in the client library, the implementation can be found in the DeepLClient class. Please refer to the README for usage instructions
  • Added styleId option to translateText() which allows text and document translation with style rules.

v1.21.0

Added

  • Added extraRequestParameters option to text and document translation methods to pass arbitrary parameters in the request body. This can be used to access beta features or override built-in parameters (such as target_lang, source_lang, etc.).

v1.20.0

Added

  • Official support for Node.js versions 20, 22 and 24

Fixed

  • Fixed document minification/deminification to preserve translated content. Previously, when document minification was enabled, the deminify process would use the original minified file instead of the translated version, causing translations to be lost.
  • Fixed handling of documents without media files during translation. The library now correctly processes documents that don't contain embedded media.
Changelog

Sourced from deepl-node's changelog.

[1.27.0] - 2026-04-27

Changed

  • Replaced the uuid dependency with Node's built-in crypto.randomUUID(). Resolves GHSA-w5hq-g745-h8pq (uuid <14.0.0) and removes a runtime dependency.
  • Bumped minimum Node version from >=12.0 to >=14.17. Node 12 reached end of life in April 2022, and crypto.randomUUID() is available from Node 14.17 onward.

Fixed

  • HTTP requests that fail with ECONNRESET, EPIPE, or EAI_AGAIN are now retried. Previously these were classified as non-retryable, surfacing transient transport failures (e.g. stale keep-alive sockets) as hard errors on the first attempt. Behavior now aligns with deepl-python.

Security

[1.26.0] - 2026-04-09

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

[1.25.0] - 2026-03-26

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in the DeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.

Changed

  • Updated formality tests to accept either formal or informal output when using default formality, since default formality is now automatic.
  • Removed Node 12 from the CI as it broke and is end-of-life.
  • Updated our model type tests to expect the model_type_used to be populated when the model_type is specified in the request

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by deepl-com, a new releaser for deepl-node since your current version.


Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 21, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): uuid, deepl-node
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4d7a8abe09 branch from 0e306c5 to ca6e51d Compare July 1, 2026 18:49
@github-actions

github-actions Bot commented Jul 1, 2026

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): deepl-node, uuid
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

Bumps [uuid](https://github.com/uuidjs/uuid) to 14.0.1 and updates ancestor dependency [deepl-node](https://github.com/DeepLcom/deepl-node). These dependencies need to be updated together.


Updates `uuid` from 11.1.1 to 14.0.1
- [Release notes](https://github.com/uuidjs/uuid/releases)
- [Changelog](https://github.com/uuidjs/uuid/blob/main/CHANGELOG.md)
- [Commits](uuidjs/uuid@v11.1.1...v14.0.1)

Updates `deepl-node` from 1.19.1 to 1.27.0
- [Release notes](https://github.com/DeepLcom/deepl-node/releases)
- [Changelog](https://github.com/DeepL/deepl-node/blob/main/CHANGELOG.md)
- [Commits](DeepL/deepl-node@v1.19.1...v1.27.0)

---
updated-dependencies:
- dependency-name: deepl-node
  dependency-version: 1.27.0
  dependency-type: indirect
- dependency-name: uuid
  dependency-version: 14.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-4d7a8abe09 branch from ca6e51d to 34061a6 Compare July 18, 2026 10:07
@github-actions

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): deepl-node, uuid
  • Update type: unknown (raw: (empty))
  • Dependency type: production
  • Previous version:
  • New version:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants