Skip to content

Bump uuid, deepl-node and nyc - #494

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-062cf2280a
Open

Bump uuid, deepl-node and nyc#494
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-062cf2280a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 25, 2026

Copy link
Copy Markdown
Contributor

Removes uuid. It's no longer used after updating ancestor dependencies uuid, deepl-node and nyc. These dependencies need to be updated together.

Removes uuid

Updates deepl-node from 1.24.0 to 1.27.0

Release notes

Sourced from deepl-node's releases.

v1.26.0

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

v1.25.0

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in theDeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.
Changelog

Sourced from deepl-node's changelog.

[1.27.0] - 2026-04-27

Changed

  • Replaced the uuid dependency with Node's built-in crypto.randomUUID(). Resolves GHSA-w5hq-g745-h8pq (uuid <14.0.0) and removes a runtime dependency.
  • Bumped minimum Node version from >=12.0 to >=14.17. Node 12 reached end of life in April 2022, and crypto.randomUUID() is available from Node 14.17 onward.

Fixed

  • HTTP requests that fail with ECONNRESET, EPIPE, or EAI_AGAIN are now retried. Previously these were classified as non-retryable, surfacing transient transport failures (e.g. stale keep-alive sockets) as hard errors on the first attempt. Behavior now aligns with deepl-python.

Security

[1.26.0] - 2026-04-09

Added

  • Added support for translation memories in text translation via translationMemory and translationMemoryThreshold options in translateText().
  • Added listTranslationMemories() method to the DeepLClient class for listing available translation memories.

Changed

Fixed

  • Fix write tests that broke from language expansion

[1.25.0] - 2026-03-26

Added

  • Added new language constants from January 2026 API release of 81 new languages.
  • Added jsonBody option to SendRequestOptions, enabling JSON-encoded API calls.
  • Added support for style rules CRUD endpoints in the DeepLClient class: createStyleRule(), getStyleRule(), updateStyleRuleName(), updateStyleRuleConfiguredRules(), and deleteStyleRule().
  • Added support for style rule custom instruction CRUD endpoints in the DeepLClient class: createStyleRuleCustomInstruction(), getStyleRuleCustomInstruction(), updateStyleRuleCustomInstruction(), and deleteStyleRuleCustomInstruction(). Please refer to the README for usage instructions.

Changed

  • Updated formality tests to accept either formal or informal output when using default formality, since default formality is now automatic.
  • Removed Node 12 from the CI as it broke and is end-of-life.
  • Updated our model type tests to expect the model_type_used to be populated when the model_type is specified in the request

... (truncated)

Commits

Updates nyc from 17.1.0 to 18.0.0

Release notes

Sourced from nyc's releases.

nyc: v18.0.0

18.0.0 (2026-02-22)

⚠ BREAKING CHANGES

  • deps: transitive dependencies now require node 20 || >=22.

Bug Fixes

  • deps: update dependencies pulling in old glob (#1612) (0707729)
Changelog

Sourced from nyc's changelog.

18.0.0 (2026-02-22)

⚠ BREAKING CHANGES

  • deps: transitive dependencies now require node 20 || >=22.

Bug Fixes

  • deps: update dependencies pulling in old glob (#1612) (0707729)
Commits
  • 3ce6d97 chore(main): release nyc 18.0.0 (#1613)
  • b9f6781 build: publication is now manual again due to changes in tokens
  • 0707729 fix(deps)!: update dependencies pulling in old glob (#1612)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jul 25, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): uuid, deepl-node, nyc
  • Update type: unknown (raw: (empty))
  • Dependency type: package-lock
  • Previous version:
  • New version:

@snyk-io

snyk-io Bot commented Jul 25, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependencies [uuid](https://github.com/uuidjs/uuid), [deepl-node](https://github.com/DeepLcom/deepl-node) and [nyc](https://github.com/istanbuljs/nyc). These dependencies need to be updated together.


Removes `uuid`

Updates `deepl-node` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/DeepLcom/deepl-node/releases)
- [Changelog](https://github.com/DeepL/deepl-node/blob/main/CHANGELOG.md)
- [Commits](DeepL/deepl-node@v1.24.0...v1.27.0)

Updates `nyc` from 17.1.0 to 18.0.0
- [Release notes](https://github.com/istanbuljs/nyc/releases)
- [Changelog](https://github.com/istanbuljs/nyc/blob/main/CHANGELOG.md)
- [Commits](istanbuljs/nyc@nyc-v17.1.0...nyc-v18.0.0)

---
updated-dependencies:
- dependency-name: deepl-node
  dependency-version: 1.27.0
  dependency-type: indirect
- dependency-name: nyc
  dependency-version: 18.0.0
  dependency-type: indirect
- dependency-name: uuid
  dependency-version:
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/multi-062cf2280a branch from a4b8a64 to 2df67d9 Compare July 25, 2026 00:53
@github-actions

Copy link
Copy Markdown
Contributor

Not Automerged — Unknown Update Type

The update type (empty) is not recognized. Only version-update:semver-patch, version-update:semver-minor, and version-update:semver-major are supported.

No further processing was performed.

Dependabot Information:

  • Package name(s): deepl-node, nyc, uuid
  • Update type: unknown (raw: (empty))
  • Dependency type: package-lock
  • Previous version:
  • New version:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants