Compare Versions - uuid
14.0.0 (2026-04-19)
Security
- Fixes GHSA-w5hq-g745-h8pq:
v3(),v5(), andv6()did not validate that writes would remain within the bounds of a caller-supplied buffer, allowing out-of-bounds writes when an invalidoffsetwas provided. ARangeErroris now thrown ifoffset < 0oroffset + 16 > buf.length.
⚠ BREAKING CHANGES
11.0.0 (2024-10-26)
⚠ BREAKING CHANGES
- refactor v1 internal state and options logic (#780)
- refactor v7 internal state and options logic, fixes #764 (#779)
- Port to TypeScript, closes #762 (#763)
- update node support matrix (only support node 16-20) (#750)
Features
- Port to TypeScript, closes #762 (#763) (1e0f987)
- update node support matrix (only support node 16-20) (#750) (883b163)
Bug Fixes
- missing v7 expectations in browser spec (#751) (f54a866)
- refactor v1 internal state and options logic (#780) (031b3d3)
- refactor v7 internal state and options logic, fixes #764 (#779) (9dbd1cd)
- remove v4 options default assignment preventing native.randomUUID from being used (#786) (afe6232), closes #763
- seq_hi shift for byte 6 (#775) (1d532ca)
- tsconfig module type (#778) (7eff835)
10.0.0 (2024-06-07)
⚠ BREAKING CHANGES
- update node support (drop node@12, node@14, add node@20) (#750)
Features
- support support rfc9562 MAX uuid (new in RFC9562) (#714) (0385cd3)
- support rfc9562 v6 uuids (#754) (c4ed13e)
- support rfc9562 v7 uuids (#681) (db76a12)
- update node support matrix (only support node 16-20) (#750) (883b163)
- support rfc9562 v8 uuids (#759) (35a5342)
Bug Fixes
9.0.0 (2022-09-05)
⚠ BREAKING CHANGES
-
Drop Node.js 10.x support. This library always aims at supporting one EOLed LTS release which by this time now is 12.x which has reached EOL 30 Apr 2022.
-
Remove the minified UMD build from the package.
Minified code is hard to audit and since this is a widely used library it seems more appropriate nowadays to optimize for auditability than to ship a legacy module format that, at best, serves educational purposes nowadays.
For production browser use cases, users should be using a bundler. For educational purposes, today's online sandboxes like replit.com offer convenient ways to load npm modules, so the use case for UMD through repos like UNPKG or jsDelivr has largely vanished.
-
Drop IE 11 and Safari 10 support. Drop support for browsers that don't correctly implement const/let and default arguments, and no longer transpile the browser build to ES2015.
This also removes the fallback on msCrypto instead of the crypto API.
Browser tests are run in the first supported version of each supported browser and in the latest (as of this commit) version available on Browserstack.
Features
- optimize uuid.v1 by 1.3x uuid.v4 by 4.3x (430%) (#597) (3a033f6)
- remove UMD build (#645) (e948a0f), closes #620
- use native crypto.randomUUID when available (#600) (c9e076c)
Bug Fixes
- add Jest/jsdom compatibility (#642) (16f9c46)
- change default export to named function (#545) (c57bc5a)
- handle error when parameter is not set in v3 and v5 (#622) (fcd7388)
- run npm audit fix (#644) (04686f5)
- upgrading from uuid3 broken link (#568) (1c849da)
build
8.0.0 (2020-04-29)
⚠ BREAKING CHANGES
-
For native ECMAScript Module (ESM) usage in Node.js only named exports are exposed, there is no more default export.
-import uuid from 'uuid'; -console.log(uuid.v4()); // -> 'cd6c3b08-0adc-4f4b-a6ef-36087a1c9869' +import { v4 as uuidv4 } from 'uuid'; +uuidv4(); // ⇨ '9b1deb4d-3b7d-4bad-9bdd-2b0d7b3dcb6d' -
Deep requiring specific algorithms of this library like
require('uuid/v4'), which has been deprecated inuuid@7, is no longer supported.Instead use the named exports that this module exports.
For ECMAScript Modules (ESM):
-import uuidv4 from 'uuid/v4'; +import { v4 as uuidv4 } from 'uuid'; uuidv4();For CommonJS:
-const uuidv4 = require('uuid/v4'); +const { v4: uuidv4 } = require('uuid'); uuidv4();
Features
- native Node.js ES Modules (wrapper approach) (#423) (2d9f590), closes #245 #419 #342
- remove deep requires (#426) (daf72b8)
Bug Fixes
7.0.0 (2020-02-24)
⚠ BREAKING CHANGES
- The default export, which used to be the v4() method but which was already discouraged in v3.x of this library, has been removed.
- Explicitly note that deep imports of the different uuid version functions are deprecated and no longer encouraged and that ECMAScript module named imports should be used instead. Emit a deprecation warning for people who deep-require the different algorithm variants.
- Remove builtin support for insecure random number generators in the browser. Users who want that will have to supply their own random number generator function.
- Remove support for generating v3 and v5 UUIDs in Node.js<4.x
- Convert code base to ECMAScript Modules (ESM) and release CommonJS build for node and ESM build for browser bundlers.
Features
- add UMD build to npm package (#357) (4e75adf), closes #345
- add various es module and CommonJS examples (b238510)
- ensure that docs are up-to-date in CI (ee5e77d)
- hybrid CommonJS & ECMAScript modules build (a3f078f)
- remove insecure fallback random number generator (3a5842b), closes #173
- remove support for pre Node.js v4 Buffer API (#356) (b59b5c5)
- rename repository to github:uuidjs/uuid (#351) (c37a518), closes #338
Bug Fixes
3.1.0 (2017-06-17)
Bug Fixes
- (fix) Add .npmignore file to exclude test/ and other non-essential files from packing. (#183)
- Fix typo (#178)
- Simple typo fix (#165)
Features
- v5 support in CLI (#197)
- V5 support (#188)
3.0.1 (2016-11-28)
- split uuid versions into separate files
3.0.0 (2016-11-17)
- remove .parse and .unparse
2.0.0
- Removed uuid.BufferClass
1.4.0
- Improved module context detection
- Removed public RNG functions