fix(deps): vuln uuid (major → 14.0.0)

[gh-worker-campaigns-3e9aa4]

Summary: Security update — 1 package upgraded (MAJOR changes included)

Manifests changed:

• . (npm)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
uuid	13.0.0	14.0.0	major	Direct	1 MODERATE

---

Warning

Major Version Upgrade

This update includes major version changes that may contain breaking changes. Please:

• Review the changelog/release notes for breaking changes
• Test thoroughly in a staging environment
• Update any code that depends on changed APIs
• Ensure all tests pass before merging

Security Details

ℹ️ Other Vulnerabilities (1)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In
uuid	GHSA-w5hq-g745-h8pq	MODERATE	uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided	13.0.0	14.0.0

---

Review Checklist

Extra review is recommended for this update:

• Review changes for compatibility with your code
• Check release notes for breaking changes
• Run integration tests to verify service behavior
• Test in staging environment before production
• Monitor key metrics after deployment
• Approve and merge this PR

---

Update Mode: Vulnerability Remediation

🤖 Generated by DataDog Automated Dependency Management System

[campaigner-prod]

Release Notes

uuid (13.0.0 → 14.0.0) — GitHub Release

v14.0.0

14.0.0 (2026-04-19)

⚠ BREAKING CHANGES

• expect crypto to be global everywhere (requires node@20+) (fix!: expect crypto to be global everywhere (requires node@20+) uuidjs/uuid#935)
• drop node@18 support (feat!: drop node@18 support uuidjs/uuid#934)

Features

• drop node@18 support (feat!: drop node@18 support uuidjs/uuid#934) (dc4ddb8)

Bug Fixes

• expect crypto to be global everywhere (requires node@20+) (fix!: expect crypto to be global everywhere (requires node@20+) uuidjs/uuid#935) (f2c235f)
• Use GITHUB_TOKEN for release-please and enable npm provenance (fix: Use GITHUB_TOKEN for release-please and enable npm provenance uuidjs/uuid#925) (ffa3138)

---

Generated by ADMS Sources: 1 GitHub Release.