From 0a370999d6a2ce1528f962433c931ee2ef8397ca Mon Sep 17 00:00:00 2001
From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Date: Mon, 28 Sep 2026 13:19:22 +0000
Subject: [PATCH] fix!: override transitive uuid 8.3.2 -> 11.1.1 under
 istanbul-lib-processinfo (GHSA-w5hq-g745-h8pq)

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
---
 package.json | 3 ++-
 yarn.lock    | 7 +------
 2 files changed, 3 insertions(+), 7 deletions(-)

diff --git a/package.json b/package.json
index 6493f6f..c079e5b 100644
--- a/package.json
+++ b/package.json
@@ -563,6 +563,7 @@
 		"tough-cookie": ">=4.1.3",
 		"micromatch": ">=4.0.8",
 		"qs": ">=6.14.1",
-		"ip-address": ">=10.1.1"
+		"ip-address": ">=10.1.1",
+		"**/istanbul-lib-processinfo/uuid": "^11.1.1"
 	}
 }
diff --git a/yarn.lock b/yarn.lock
index af843d0..41233d7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5860,16 +5860,11 @@ utila@~0.4:
   resolved "https://registry.yarnpkg.com/utila/-/utila-0.4.0.tgz#8a16a05d445657a3aea5eecc5b12a4fa5379772c"
   integrity sha512-Z0DbgELS9/L/75wZbro8xAnT50pBVFQZ+hUEueGDU5FN51YSCYM+jdxsfCiHjwNP/4LCDD0i/graKpeBnOXKRA==
 
-uuid@^11.1.1:
+uuid@^11.1.1, uuid@^8.3.2:
   version "11.1.1"
   resolved "https://registry.yarnpkg.com/uuid/-/uuid-11.1.1.tgz#f6d81d2e1c65d00762e5e29b16c5d2d995e208ad"
   integrity sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==
 
-uuid@^8.3.2:
-  version "8.3.2"
-  resolved "https://registry.yarnpkg.com/uuid/-/uuid-8.3.2.tgz#80d5b5ced271bb9af6c445f21a1a04c606cefbe2"
-  integrity sha512-+NYs2QeMWy+GWFOEm9xnn6HCDp0l7QBD7ml8zLUmJ+93Q5NF0NocErnwkTkXVFNiX3/fpC6afS8Dhb/gz7R7eg==
-
 v8-to-istanbul@^9.0.0:
   version "9.3.0"
   resolved "https://registry.yarnpkg.com/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz#b9572abfa62bd556c16d75fdebc1a411d5ff3175"