Skip to content

chore: update nanoid 3.3.17 → 3.3.18 - #78

Merged
sds merged 1 commit into
mainfrom
audit-nanoid
Aug 21, 2026
Merged

chore: update nanoid 3.3.17 → 3.3.18#78
sds merged 1 commit into
mainfrom
audit-nanoid

Conversation

@sds

@sds sds commented Aug 21, 2026

Copy link
Copy Markdown
Member

Fixes the failing pnpm audit check: bumps the transitive nanoid 3.x override from 3.3.17 to 3.3.18 for GHSA-2v37-7h3g-55p8 (custom generators can loop indefinitely when size is zero; patched in >=3.3.18). The direct nanoid@5.1.16 dependency is not affected.

pnpm audit and pnpm install --frozen-lockfile pass locally.

@sds sds changed the title chore: audit chore: update nanoid 3.3.17 → 3.3.18 Aug 21, 2026
@sds
sds enabled auto-merge (squash) August 21, 2026 05:58
@sds
sds disabled auto-merge August 21, 2026 05:58
@sds
sds enabled auto-merge (squash) August 21, 2026 05:59
@sds
sds merged commit 7e1838f into main Aug 21, 2026
8 checks passed
@sds
sds deleted the audit-nanoid branch August 21, 2026 05:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant