This is an automated email from the ASF dual-hosted git repository.
kpvdr pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/qpid-interop-test.git
The following commit(s) were added to refs/heads/main by this push:
new 15a376e Remove unused uuid dependency from Rhea shim
15a376e is described below
commit 15a376e18d3ce8fc97be31d07e1213d10182c014
Author: QIT Development Team <[email protected]>
AuthorDate: Tue Aug 11 11:07:53 2026 -0400
Remove unused uuid dependency from Rhea shim
The uuid package (v9) had a Dependabot security alert (CVE-2026-41907:
buffer bounds check in v3/v5/v6). The import was dead code — uuidv4
was imported but never called. Remove the dependency entirely.
Assisted-by: Claude Opus 4.6 <[email protected]>
---
shims/javascript-rhea/package.json | 3 +--
shims/javascript-rhea/shim.js | 1 -
2 files changed, 1 insertion(+), 3 deletions(-)
diff --git a/shims/javascript-rhea/package.json
b/shims/javascript-rhea/package.json
index 708779d..9095987 100644
--- a/shims/javascript-rhea/package.json
+++ b/shims/javascript-rhea/package.json
@@ -10,7 +10,6 @@
"author": "Red Hat AMQ Team",
"license": "Apache-2.0",
"dependencies": {
- "rhea": "^3.0.0",
- "uuid": "^9.0.0"
+ "rhea": "^3.0.0"
}
}
diff --git a/shims/javascript-rhea/shim.js b/shims/javascript-rhea/shim.js
index c0e9e77..cdc3d1b 100755
--- a/shims/javascript-rhea/shim.js
+++ b/shims/javascript-rhea/shim.js
@@ -27,7 +27,6 @@
const rhea = require('rhea');
const rhea_message = require('rhea/lib/message');
-const { v4: uuidv4 } = require('uuid');
// Monkey-patch Writer to support:
// 1. Nested described types (AmqpValue wrapping custom described types)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
