From 9a8a263c3fa179c889416e6fadd085bf95f9c4b4 Mon Sep 17 00:00:00 2001
From: Orien Madgwick <vcs@orien.io>
Date: Wed, 15 Jul 2026 10:39:43 +1000
Subject: [PATCH] chore(deps): upgrade uuid to v11

Move off the unmaintained v8 line onto v11 (legacy-11), the newest
uuid release that still ships CommonJS and includes the fix for
CVE-2026-41907. Requires no test-harness changes.
---
 package-lock.json | 21 +++++++++++++--------
 package.json      |  2 +-
 2 files changed, 14 insertions(+), 9 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index b92778e3..6da697cb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -17,7 +17,7 @@
         "d3-shape": "^1.3.7",
         "d3-zoom": "^3.0.0",
         "dequal": "^2.0.2",
-        "uuid": "^8.3.1"
+        "uuid": "^11.1.1"
       },
       "devDependencies": {
         "@babel/core": "^7.8.3",
@@ -11445,11 +11445,16 @@
       }
     },
     "node_modules/uuid": {
-      "version": "8.3.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.1.tgz",
-      "integrity": "sha512-FOmRr+FmWEIG8uhZv6C2bTgEVXsHk08kE7mPlrBbEe+c3r9pjceVPgupIfNIhc4yx55H69OXANrUaSuu9eInKg==",
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==",
+      "funding": [
+        "https://github.com/sponsors/broofa",
+        "https://github.com/sponsors/ctavan"
+      ],
+      "license": "MIT",
       "bin": {
-        "uuid": "dist/bin/uuid"
+        "uuid": "dist/esm/bin/uuid"
       }
     },
     "node_modules/validate-npm-package-license": {
@@ -20857,9 +20862,9 @@
       }
     },
     "uuid": {
-      "version": "8.3.1",
-      "resolved": "https://registry.npmjs.org/uuid/-/uuid-8.3.1.tgz",
-      "integrity": "sha512-FOmRr+FmWEIG8uhZv6C2bTgEVXsHk08kE7mPlrBbEe+c3r9pjceVPgupIfNIhc4yx55H69OXANrUaSuu9eInKg=="
+      "version": "11.1.1",
+      "resolved": "https://registry.npmjs.org/uuid/-/uuid-11.1.1.tgz",
+      "integrity": "sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ=="
     },
     "validate-npm-package-license": {
       "version": "3.0.4",
diff --git a/package.json b/package.json
index 9b8273b2..f69a246a 100644
--- a/package.json
+++ b/package.json
@@ -85,7 +85,7 @@
     "d3-shape": "^1.3.7",
     "d3-zoom": "^3.0.0",
     "dequal": "^2.0.2",
-    "uuid": "^8.3.1"
+    "uuid": "^11.1.1"
   },
   "peerDependencies": {
     "react": "16.x || 17.x || 18.x || 19.x",