chore(deps-dev): Remove unused uuid devDependency#6041
Merged
Conversation
The uuid devDependency is not imported anywhere — all uuid4() calls in the codebase come from @sentry/core. The dep appears to have been left behind during the yarn v3 / monorepo move. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
📲 Install BuildsAndroid
|
Contributor
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit c7f55ae. Configure here.
Contributor
iOS (legacy) Performance metrics 🚀
|
| Revision | Plain | With Sentry | Diff |
|---|---|---|---|
| 7ac3378+dirty | 1213.37 ms | 1218.15 ms | 4.78 ms |
| 4b87b12+dirty | 1212.90 ms | 1222.09 ms | 9.19 ms |
| 890d145+dirty | 1223.59 ms | 1231.37 ms | 7.78 ms |
| 0d9949d+dirty | 1211.38 ms | 1219.67 ms | 8.29 ms |
| 04207c4+dirty | 1191.27 ms | 1189.78 ms | -1.48 ms |
| 3ce5254+dirty | 1219.93 ms | 1221.90 ms | 1.96 ms |
| 4953e94+dirty | 1212.06 ms | 1214.83 ms | 2.77 ms |
| 2c735cc+dirty | 1229.67 ms | 1221.50 ms | -8.17 ms |
| a50b33d+dirty | 1197.74 ms | 1197.17 ms | -0.57 ms |
| df5d108+dirty | 1225.90 ms | 1220.14 ms | -5.76 ms |
App size
| Revision | Plain | With Sentry | Diff |
|---|---|---|---|
| 7ac3378+dirty | 3.38 MiB | 4.76 MiB | 1.38 MiB |
| 4b87b12+dirty | 3.38 MiB | 4.77 MiB | 1.39 MiB |
| 890d145+dirty | 3.38 MiB | 4.77 MiB | 1.38 MiB |
| 0d9949d+dirty | 3.38 MiB | 4.76 MiB | 1.38 MiB |
| 04207c4+dirty | 3.38 MiB | 4.76 MiB | 1.38 MiB |
| 3ce5254+dirty | 3.38 MiB | 4.76 MiB | 1.38 MiB |
| 4953e94+dirty | 3.38 MiB | 4.73 MiB | 1.35 MiB |
| 2c735cc+dirty | 3.38 MiB | 4.74 MiB | 1.35 MiB |
| a50b33d+dirty | 3.38 MiB | 4.73 MiB | 1.35 MiB |
| df5d108+dirty | 3.38 MiB | 4.73 MiB | 1.35 MiB |
Companion to the uuid removal — @types/uuid provided types for a package no longer in the project. Flagged by Cursor Bugbot review. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Type of change
Description
Removes
uuidfrompackages/core/devDependencies. The package is not imported anywhere in the repo — a grep acrosssrc/,test/,plugin/,scripts/, and sample apps turns up zerofrom 'uuid'/require('uuid')statements. Alluuid4()calls in the codebase come from@sentry/core.Git history suggests the dep was left behind during the Yarn v3 / monorepo move (#4057) and has been unused since.
Motivation and Context
Closes the need for #6036 (Dependabot bumping uuid 9.0.1 → 14.0.0). That bump crosses several breaking changes (CJS removal in v12, browser-default exports in v13, Node 20+ requirement in v14) for a dep we don't use. Deleting it is cleaner than merging a major-version bump on dead weight, and silences future Dependabot noise for this package.
So also close/demote https://github.com/getsentry/sentry-react-native/security/dependabot/505 and https://github.com/getsentry/sentry-react-native/security/dependabot/511
How did you test it?
yarn install— lockfile updated, uuid removed cleanlyyarn build— succeedsyarn test— 210/210 passyarn circularDepCheck— no circular depsChecklist
Next steps
Close #6036 with
@dependabot ignore this dependencyafter this merges.