Skip to content

build(deps): bump @paralleldrive/cuid2 from 2.3.1 to 3.3.0#182

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/paralleldrive/cuid2-3.3.0
Open

build(deps): bump @paralleldrive/cuid2 from 2.3.1 to 3.3.0#182
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/paralleldrive/cuid2-3.3.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 1, 2026

Bumps @paralleldrive/cuid2 from 2.3.1 to 3.3.0.

Changelog

Sourced from @​paralleldrive/cuid2's changelog.

[3.3.0] - 2026-01-25

Fixed

  • Fix typo in package.json exports field: ./package.json path was incorrectly specified
  • Fix TypeScript compilation error (TS1203) by replacing export = with named exports in index.d.ts

Updated

  • Update AI development framework (aidd) to v2.5.0 for enhanced security reviews
  • Update all devDependencies to latest versions (@​types/node, @​types/react, eslint, eslint-config-next, eslint-config-prettier, eslint-plugin-prettier, next, prettier, react, react-dom, release-it, riteway, updtr, watch)

[3.0.2] - 2025-10-27

Changed

  • Remove collision-test from pre-commit hook to unblock release process

Fixed

  • Replace BigInt with bignumber.js for broader browser support (legacy browsers)
  • Add export module field to package.json for better ESM compatibility

Added

  • Implement CSPRNG using crypto.getRandomValues for enhanced security
  • Add validation to throw error when length > 32

Documentation

  • Fix typo: Change "Pseudo" to "Pseudo" in README.md
  • Update link for PleaseRobMe.com

[3.0.0] - 2025-10-18

⚠️ BREAKING CHANGES

  • Convert entire project from CommonJS to ES modules
    • Changed from require()/module.exports to import/export
    • Added "type": "module" to package.json
    • Users must use ESM imports or upgrade to this version carefully
    • For CommonJS compatibility, use v2.3.1 instead
Commits
  • 2275e80 chore(release): v3.3.0
  • 3af6f1b chore: update CHANGELOG for v3.2.1
  • ee1ff97 Merge pull request #119 from paralleldrive/update
  • 59541b5 chore: downgrade packages for security
  • aebdc31 chore: remove legacy Travis CI config
  • 71b5d09 ci: add GitHub Actions workflow
  • d044cfe chore: update dependencies and AI framework
  • 3bec9b1 Merge pull request #116 from paralleldrive/copilot/fix-typescript-error-ts1203
  • a910d6e Delete REVIEW.md
  • 76b5c83 docs: add comprehensive code review for TS1203 fix
  • Additional commits viewable in compare view
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [@paralleldrive/cuid2](https://github.com/ericelliott/cuid2) from 2.3.1 to 3.3.0.
- [Changelog](https://github.com/paralleldrive/cuid2/blob/main/CHANGELOG.md)
- [Commits](paralleldrive/cuid2@v2.3.1...v3.3.0)

---
updated-dependencies:
- dependency-name: "@paralleldrive/cuid2"
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants