For AWS-SDK, uuid package out of date may cause problems with random numbers

[ConzumexGame]

Confirm by changing [ ] to [x] below to ensure that it's a bug:

• I've gone through Developer Guide and API reference
• I've checked AWS Forums and StackOverflow for answers
• I've searched for previous similar issues and didn't find any solution
• [] This is an issue with version 2.x of the SDK

Describe the bug
I get several warnings when installing aws-sdk package using npm. It is complaining about the version of uuid used. Which is significantly behind the current version. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.

Is the issue in the browser/Node.js?
Browser/Node.js

If on Node.js, are you running this on AWS Lambda?

Details of the browser/Node.js version
v16.13.0

SDK version number
[email protected]

To Reproduce (observed behavior)
npm i aws-sdk

Expected behavior
No warnings

Screenshots
If applicable, add screenshots to help explain your problem.

Additional context
Add any other context about the problem here.

[ajredniwja]

Hey @ConzumexGame thanks for bringing this up, can you please share what warnings you get?

[github-actions]

This issue has not received a response in 1 week. If you still think there is a problem, please leave a comment to avoid the issue from automatically closing.

[SchmitzChristian]

Hi @ajredniwja this is what i get:

[email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See #https://v8.dev/blog/math-random for details.

This should be the same problem as discussed here:

#3812

[purejgleason]

Same issue here problem is...

"uuid": "3.3.2",

[purejgleason]

Also getting

[email protected]: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.

Thanks to the dep on url...

 "url": "0.10.3",

Should be 0.11.0

[robahtou]

Any updates on this? getting same warnings

npm WARN deprecated [email protected]: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.  
npm WARN deprecated [email protected]: Please upgrade  to version 7 or higher.  Older versions may use Math.random() in certain circumstances, which is known to be problematic.  See https://v8.dev/blog/math-random for details.

[ezequiel454]

I will follow this thread with same errors

`npm WARN deprecated [email protected]: The querystring API is considered Legacy. new code should use the URLSearchParams API instead.

npm WARN deprecated [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.

npm WARN deprecated [email protected]: Please upgrade to version 7 or higher. Older versions may use Math.random() in certain circumstances, which is known to be problematic. See https://v8.dev/blog/math-random for details.`

[jeremychone]

I really hope this can be fixed soon.

Now, uuid is at version > 8.x, and having such an old deprecated version in our builds is worrisome and makes our security team nervous.

AWS-SQK team, your library is great, and we use it for big enterprise applications with high compliance requirements, but this issue has been a problem in our context.

[ajredniwja]

Closing this issue now. #3924