docs: Bump version to 1.27.0

Author: dfenster

.bumpversion.toml

@@ -1,7 +1,7 @@
 # Configuration file for bumpversion
 # See https://github.com/callowayproject/bump-my-version
 [tool.bumpversion]
-current_version = "1.26.0"
+current_version = "1.27.0"
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<patch>\\d+)"
 serialize = ["{major}.{minor}.{patch}"]
 search = "{current_version}"

CHANGELOG.md

@@ -5,6 +5,16 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
+
+## [1.27.0] - 2026-04-27
+### Changed
+- Replaced the `uuid` dependency with Node's built-in `crypto.randomUUID()`.
+  Resolves GHSA-w5hq-g745-h8pq (`uuid <14.0.0`) and removes a runtime
+  dependency.
+- Bumped minimum Node version from `>=12.0` to `>=14.17`. Node 12 reached
+  end of life in April 2022, and `crypto.randomUUID()` is available from
+  Node 14.17 onward.
+
 ### Fixed
 - HTTP requests that fail with `ECONNRESET`, `EPIPE`, or `EAI_AGAIN` are now
   retried. Previously these were classified as non-retryable, surfacing

package-lock.json

@@ -1,7 +1,7 @@
 {
     "name": "deepl-node",
     "description": "deepl-node is the official DeepL Node.js client library",
-    "version": "1.26.0",
+    "version": "1.27.0",
     "author": "DeepL SE <open-source@deepl.com> (https://www.deepl.com)",
     "license": "MIT",
     "repository": {

package.json

@@ -697,7 +697,7 @@ export class Translator {
         sendPlatformInfo: boolean,
         appInfo: AppInfo | undefined,
     ): string {
-        let libraryInfoString = 'deepl-node/1.26.0';
+        let libraryInfoString = 'deepl-node/1.27.0';
         if (sendPlatformInfo) {
             const systemType = os.type();
             const systemVersion = os.version();