PROD-79121 - Upgrade uuid from 8.3.2 to 11.1.1

The uuid dependency was pinned to ~8.3.2 (>=8.3.2 <8.4.0), which cannot
resolve to 11.1.1 or later. Consumers of rabbit-queue therefore cannot get
a patched uuid, leaving CVE-2026-41907 (GHSA, missing buffer bounds check
in v3/v5/v6 when buf is provided) unresolvable downstream.

rabbit-queue itself is not affected by that CVE: uuid is only used as
uuid.v4() with no arguments, in ts/queue.ts, ts/exchange.ts and
ts/reply-queue.ts. The pin is the problem, not the usage.

Targets uuid 11.x rather than the latest 14.x deliberately. This package
compiles with module: commonjs, and uuid 11.1.1 is the last line whose
exports map still declares a require condition
("require": "./dist/cjs/index.js"). uuid 12 and later are ESM-only for
Node and would break require() for every CommonJS consumer.

@types/uuid is dropped because uuid 11 ships its own type definitions;
keeping the v8 types alongside it would conflict.

Author: Dimitris-Ilias

package-lock.json

@@ -56,7 +56,7 @@
     "amqplib": ">=0.10.0",
     "lodash": "^4.17.23",
     "race-until": "~2.3.1",
-    "uuid": "~8.3.2"
+    "uuid": "^11.1.1"
   },
   "typings": "js/index",
   "devDependencies": {
@@ -66,7 +66,6 @@
     "@types/should": "^13.0.0",
     "@types/sinon": "~10.0.2",
     "@types/source-map-support": "~0.5.4",
-    "@types/uuid": "~8.3.1",
     "husky": "~7.0.1",
     "lint-staged": "~11.1.0",
     "mocha": "^11.7.5",