chore(deps): use uuid ^11.1.1 to keep CommonJS support

[gustavovalverde]

uuid 14 ships only ESM entry points. next-auth and the adapters in this branch compile to CommonJS, so the published artifacts would throw ERR_REQUIRE_ESM on Node versions below 20.19 as soon as next-auth/jwt or an adapter loads. The mikro-orm adapter's Jest suite fails the same way at module load, so the package currently has zero executable tests.

uuid 11.1.1 is both the first version patched for GHSA-w5hq-g745-h8pq and the last major with a dual CJS/ESM build, so it keeps the advisory resolved without cutting off CommonJS consumers. The vulnerable code path (v3/v5/v6 with a caller-supplied buffer) is not used here; every call site is an argument-less v4().

Also regenerates the mikro-orm adapter's schema snapshots. They were written against an older @mikro-orm/core 5.x; the lockfile has since moved to 5.9.8, which adds an ignoreSchemaChanges column property and emits a default for the unique email column. The mismatch only surfaces now because this branch makes the suite runnable again.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
auth-docs	Error		Jul 20, 2026 6:02pm
next-auth-docs	Ready	Preview, Comment	Jul 20, 2026 6:02pm

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
proxy	Ignored		Jul 20, 2026 6:02pm

[socket-security]

Dependency limit exceeded — report not shown.

This pull request scan exceeded the 10,000-dependency limit applied to this scan, so the results are incomplete and may be inaccurate. To avoid reporting false positives, Socket has not posted a report.

Upgrade your plan to raise the dependency limit and get complete reports, or view the partial scan in the dashboard.

Socket is always free for open source. If this is a non-commercial open source project, contact us to request a free Team account.