Skip to content

deps(deps): bump @paralleldrive/cuid2 from 2.3.1 to 3.3.0 - #84

Closed
dependabot[bot] wants to merge 2 commits into
developfrom
dependabot/npm_and_yarn/develop/paralleldrive/cuid2-3.3.0
Closed

deps(deps): bump @paralleldrive/cuid2 from 2.3.1 to 3.3.0#84
dependabot[bot] wants to merge 2 commits into
developfrom
dependabot/npm_and_yarn/develop/paralleldrive/cuid2-3.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown

Bumps @paralleldrive/cuid2 from 2.3.1 to 3.3.0.

Changelog

Sourced from @​paralleldrive/cuid2's changelog.

[3.3.0] - 2026-01-25

Fixed

  • Fix typo in package.json exports field: ./package.json path was incorrectly specified
  • Fix TypeScript compilation error (TS1203) by replacing export = with named exports in index.d.ts

Updated

  • Update AI development framework (aidd) to v2.5.0 for enhanced security reviews
  • Update all devDependencies to latest versions (@​types/node, @​types/react, eslint, eslint-config-next, eslint-config-prettier, eslint-plugin-prettier, next, prettier, react, react-dom, release-it, riteway, updtr, watch)

[3.0.2] - 2025-10-27

Changed

  • Remove collision-test from pre-commit hook to unblock release process

Fixed

  • Replace BigInt with bignumber.js for broader browser support (legacy browsers)
  • Add export module field to package.json for better ESM compatibility

Added

  • Implement CSPRNG using crypto.getRandomValues for enhanced security
  • Add validation to throw error when length > 32

Documentation

  • Fix typo: Change "Pseudo" to "Pseudo" in README.md
  • Update link for PleaseRobMe.com

[3.0.0] - 2025-10-18

⚠️ BREAKING CHANGES

  • Convert entire project from CommonJS to ES modules
    • Changed from require()/module.exports to import/export
    • Added "type": "module" to package.json
    • Users must use ESM imports or upgrade to this version carefully
    • For CommonJS compatibility, use v2.3.1 instead
Commits
  • 2275e80 chore(release): v3.3.0
  • 3af6f1b chore: update CHANGELOG for v3.2.1
  • ee1ff97 Merge pull request #119 from paralleldrive/update
  • 59541b5 chore: downgrade packages for security
  • aebdc31 chore: remove legacy Travis CI config
  • 71b5d09 ci: add GitHub Actions workflow
  • d044cfe chore: update dependencies and AI framework
  • 3bec9b1 Merge pull request #116 from paralleldrive/copilot/fix-typescript-error-ts1203
  • a910d6e Delete REVIEW.md
  • 76b5c83 docs: add comprehensive code review for TS1203 fix
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

ajccarlson and others added 2 commits July 27, 2026 01:16
* Restore watchlist dark theme contrast

* Fix nightly e2e rate limiting and Scorecard branch trigger

The nightly browser suites were failing with 429s: the e2e server runs
in production mode and nothing ever set PLAYWRIGHT_TEST_BASE_URL, so the
rate-limit relaxation in server/index.ts was dead and the whole suite
shared production limits (10 auth POSTs/min). Set the marker in the
Playwright webServer env so test runs get the intended multiplier.

The OpenSSF Scorecard workflow triggered on pushes to main, but
scorecard-action only supports the default branch (develop), so every
push run failed with "only default branch is supported".

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Bumps [@paralleldrive/cuid2](https://github.com/ericelliott/cuid2) from 2.3.1 to 3.3.0.
- [Changelog](https://github.com/paralleldrive/cuid2/blob/main/CHANGELOG.md)
- [Commits](paralleldrive/cuid2@v2.3.1...v3.3.0)

---
updated-dependencies:
- dependency-name: "@paralleldrive/cuid2"
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from ajccarlson as a code owner July 27, 2026 16:13
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 27, 2026
@ajccarlson

Copy link
Copy Markdown
Owner

Superseded by #92, which landed this upgrade.

@ajccarlson ajccarlson closed this Jul 27, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@ajccarlson
ajccarlson deleted the dependabot/npm_and_yarn/develop/paralleldrive/cuid2-3.3.0 branch July 27, 2026 23:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant