chore(deps): bump uuid and typeorm in /backend by dependabot[bot] · Pull Request #24 · hackclub/beest

dependabot · 2026-05-25T13:33:01Z

Removes uuid. It's no longer used after updating ancestor dependency typeorm. These dependencies need to be updated together.

Removes uuid

Updates typeorm from 0.3.28 to 1.0.0

Release notes

Sourced from typeorm's releases.

1.0.0

TypeORM v1.0 is here! 🥳

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

This release includes breaking changes. See the v1.0 Upgrade Guide

What's Changed

fix: include joined entity primary keys in pagination subquery by @mag123c in typeorm/typeorm#11669

feat(postgres): add support for PostgreSQL indices by @freePixel in typeorm/typeorm#11318

refactor!: remove legacy expo driver by @G0maa in typeorm/typeorm#11860

fix(cockroachdb): preserve structured query results during txn retry replay by @naorpeled in typeorm/typeorm#11861

docs: add version dropdown (stable/dev) to master by @naorpeled in typeorm/typeorm#11862

docs: link to queryrunner api docs from top level queryrunner page by @hughrawlinson in typeorm/typeorm#11869

feat: add error handling and log warning for ormconfig loading failures by @Cprakhar in typeorm/typeorm#11871

refactor: remove shajs by @G0maa in typeorm/typeorm#11864

ci: setup pnpm by @alumni in typeorm/typeorm#11881

chore(docs): move to PNPM by @naorpeled in typeorm/typeorm#11884

feat: add better typing for conditions in increment and decrement of EntityManager by @OSA413 in typeorm/typeorm#11294

fix: getPendingMigrations unnecessarily creating migrations table by @pkuczynski in typeorm/typeorm#11672

fix: copy cordova query rows affected into query result by @jacobg in typeorm/typeorm#10873

fix: resolve nameless TableForeignKey on drop foreign key by @taichunmin in typeorm/typeorm#10744

feat(docs): add Kapa.ai widget for AI-powered documentation assistance by @dlhck in typeorm/typeorm#11891

fix: virtual property handling in schema builder by @skyran1278 in typeorm/typeorm#11000

fix(mongo): correctly process embedded arrays of nested documents by @mciuchitu in typeorm/typeorm#10940

feat(postgres): use ADD VALUE when changing enum values if possible by @janzipek in typeorm/typeorm#10956

test: add mutation testing and mutation score badge by @OSA413 in typeorm/typeorm#11253

fix: change import for process dependency by @yohannpoli in typeorm/typeorm#11248

chore(tests): adapt Stryker mutator to pnpm and fix markup in README for badges by @OSA413 in typeorm/typeorm#11893

chore(tests): send only mutation score to the Stryker dashboard by @OSA413 in typeorm/typeorm#11895

fix: fix working with tables with quotes in the names for postgres and cockroachdb by @iskalyakin in typeorm/typeorm#10993

refactor: replace uuid with native Crypto API by @mag123c in typeorm/typeorm#11769

fix(mysql): getVersion returning undefined for PolarDB-X 2.0 by @Missna in typeorm/typeorm#11837

test: align file names by @gioboa in typeorm/typeorm#11898

ci: ensure pull request follow conventional commits spec by @pkuczynski in typeorm/typeorm#11840

feat(qodo): enable new review experience by @naorpeled in typeorm/typeorm#11909

test: modify tests to confirm ON CONFLICT ON CONSTRAINT on PostgreSQL/CockroachDB by @Cprakhar in typeorm/typeorm#11908

feat: add support for installing additional postgres extensions by @Cprakhar in typeorm/typeorm#11888

feat: add deferrable support to exclusion decorator to mirror unique and index decorators by @oGAD31 in typeorm/typeorm#11802

chore(mutation testing): tweak Stryker for lower resource usage and decrease timeout for slow running mutants by @OSA413 in typeorm/typeorm#11901

fix: raw select query with correctly ordered selected columns by @Cprakhar in typeorm/typeorm#11902

docs: fix typo 'spass' to 'pass' by @guoxk-me in typeorm/typeorm#11919

chore: align master with v0.3 by @gioboa in typeorm/typeorm#11912

fix: update child's mpath by @JoseCToscano in typeorm/typeorm#10844

test: verify column names when using referencedColumnName in composite relations by @Cprakhar in typeorm/typeorm#11883

fix: merging into an entity now respects null values by @knoid in typeorm/typeorm#11154

fix: handle re-save of postgres geometric types by @Cprakhar in typeorm/typeorm#11857

fix(sqlite): handle simple-enum arrays correctly by @Cprakhar in typeorm/typeorm#11865

fix: fix up map objects comparison by @mgohin in typeorm/typeorm#10990

feat: support INSERT INTO ... SELECT FROM ... in QueryBuilder by @Cprakhar in typeorm/typeorm#11896

... (truncated)

Changelog

Sourced from typeorm's changelog.

1.0.0 (2026-05-19)

👉 For a structured walk-through of the changes in v1.0 — breaking changes, new features, security fixes, and the upgrade path from 0.3.x — see the v1.0 Release Notes.

The list below is the set of commits between 0.3.30 and 1.0.0 — fixes already shipped on the 0.3.x line are listed under their respective 0.3.x entries below.

feat!: drop support for node 16 and 18 (#11382) (349d910), closes #11382

Bug Fixes

cascade: propagate withDeleted to relation-id loader for many-to-many recover (#12287) (cfba9e7)

cascade: support cascade remove for OneToMany relations with composite PKs (#12286) (09183c8)

cli: preserve devDependencies needed by init command in published package (#12281) (c3b771c)

cockroachdb: preserve structured query results during txn retry replay (#11861) (09db48c)

codemod: apply find-options select/relations rewrites to .exists() too (#12399) (4461063)

codemod: correct relation-count guidance and flag loadRelationCountAndMap (#12374) (5de5490)

codemod: cover ColumnMetadata args.options in column option rewrites (#12400) (7a68cf2)

codemod: exclude type declarations from build (#12292) (4c645f0)

codemod: handle aliases, quoted keys, and ObjectProperty variants (#12377) (2d15644)

codemod: handle lock option objects correctly and increase test coverage (#12353) (b871719)

codemod: handle typeof type queries and use getStringValue consistently (#12379) (dedea37)

codemod: harden destructure and DI accessor rewrites for connection to dataSource rename (#12398) (057ddbc)

codemod: harden scope and type-name detection across more AST shapes (#12394) (9d1fd8d)

codemod: harden scope, idempotency, and import-strip semantics (#12391) (ed5a19b)

codemod: recognize typeorm deep-path imports (#12382) (a96b097)

codemod: rename .connection on EntityMetadata, ColumnMetadata, IndexMetadata (#12383) (8a51e30), closes #12249

codemod: rewrite typeorm re-exports in barrel files (#12373) (25f0b5f)

codemod: scope v1 transforms to typeorm imports and skip .d.ts files (#12372) (a34fdb2)

codemod: track DataSource accessor chains for typed-variable renames (#12385) (14a3132)

copy cordova query rows affected into query result (#10873) (ad22c10)

disable global order for aggregate functions (#11925) (2efb2a1)

do not run npm install during CLI init (#12386) (66aa930)

docs: add lunr as explicit dependency for pnpm strict hoisting (f4d435e)

docs: align code style (#12081) (5f6eb4c)

docs: complete Typesense removal missed during cherry-pick (eb7a5b6)

docs: update docs pnpm lockfile for new dependencies (4123db9)

eager load relation strategy (#11326) (5797d97)

enhance upsert functionality for proper sql generation with table alias (#11915) (42ce630)

expo: auto-load expo-sqlite driver via loadDependencies() (#12363) (212c8ef)

fix up change detection with date transformer (#11963) (e3e3c97)

fix up generated query with .update() (#11993) (fe6c072)

fix up join attributes inside bracket (#11218) (d233daa)

fix up map objects comparison (#10990) (f66eee7)

fix up save with eagerly loaded relation (#11975) (f5cea95)

fix working with tables with quotes in the names for postgres and cockroachdb (#10993) (e5a8afb)

handle re-save of postgres geometric types (#11857) (65dea3c)

handle relation ids in nested embedded entities (#11942) (5237bee)

include joined entity primary keys in pagination subquery (#11669) (4ffe666)

make shorten method to properly work with camelCase_aliases (#11283) (8a9a376)

merging into an entity now respects null values (#11154) (1676484)

... (truncated)

Commits

cf3f13f docs: restyle version dropdown for v1 release (#12514)
6997b23 chore: release v1.0.0 (#12510)
df09802 fix(cockroachdb): adjust join in loadTables to load correct table columns (#1...
f5cc456 fix(find-options): allow array values in JsonContains (#12420)
9440998 fix(mysql)!: use index identifiers instead of raw SQL in QB.useIndex() (#12...
a4f26af chore(deps): bump the github-actions-official group with 3 updates (#12483)
ac2ffc6 chore(deps): bump the github-actions-third-party group with 3 updates (#12484)
62948a3 revert: fix up limit with joins (#12478)
c2b788f ci: pin all GitHub Actions to commit SHAs (#12481)
9284c16 fix(security): validate limit() in Update/SoftDelete query builders (#12436)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for typeorm since your current version.

socket-security · 2026-05-25T13:33:40Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
uplot@1.6.32
vite@7.3.2
typeorm@0.3.28 ⏵ 1.0.0	^-5	⁺¹

View full report

socket-security · 2026-05-25T13:33:42Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependency [typeorm](https://github.com/typeorm/typeorm). These dependencies need to be updated together. Removes `uuid` Updates `typeorm` from 0.3.28 to 1.0.0 - [Release notes](https://github.com/typeorm/typeorm/releases) - [Changelog](https://github.com/typeorm/typeorm/blob/master/CHANGELOG.md) - [Commits](typeorm/typeorm@0.3.28...1.0.0) --- updated-dependencies: - dependency-name: typeorm dependency-version: 1.0.0 dependency-type: direct:production - dependency-name: uuid dependency-version: dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 25, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/backend/multi-3549ac115b branch from 941d491 to 4542ef4 Compare May 27, 2026 21:50

dependabot Bot force-pushed the dependabot/npm_and_yarn/backend/multi-3549ac115b branch from 4542ef4 to cfa4d4e Compare June 3, 2026 19:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump uuid and typeorm in /backend#24

chore(deps): bump uuid and typeorm in /backend#24
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/backend/multi-3549ac115b

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 25, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented May 25, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.0.0

What's Changed

1.0.0 (2026-05-19)

Bug Fixes

Uh oh!

socket-security Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented May 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github May 25, 2026 •

edited

Loading

socket-security Bot commented May 25, 2026 •

edited

Loading

socket-security Bot commented May 25, 2026 •

edited

Loading