Merge pull request #29609 from overleaf/renovate-npm-nanoid-vulnerability

Update dependency nanoid to v5 from ^4.0.2 [SECURITY]

GitOrigin-RevId: 9d87781d2169fb1c9003d3c42b4531bb9e1c377e
This commit is contained in:
Eric Mc Sween
2025-11-13 08:19:14 -05:00
committed by Copybot
parent c0c3bfe185
commit a67d70c74a
2 changed files with 63 additions and 6 deletions

View File

@@ -22,7 +22,7 @@
"effect": "^3.19.0",
"lucide-react": "^0.548.0",
"motion": "^12.23.24",
"nanoid": "^4.0.2",
"nanoid": "^5.0.0",
"react": "^18.3.1",
"react-dom": "^18.3.1",
"streamdown": "^1.4.0",

67
package-lock.json generated
View File

@@ -128,7 +128,7 @@
"effect": "^3.19.0",
"lucide-react": "^0.548.0",
"motion": "^12.23.24",
"nanoid": "^4.0.2",
"nanoid": "^5.0.0",
"react": "^18.3.1",
"react-dom": "^18.3.1",
"streamdown": "^1.4.0",
@@ -23232,6 +23232,25 @@
"preact": "^10.5.13"
}
},
"node_modules/@uppy/core/node_modules/nanoid": {
"version": "4.0.2",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
"integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
"dev": true,
"funding": [
{
"type": "github",
"url": "https://github.com/sponsors/ai"
}
],
"license": "MIT",
"bin": {
"nanoid": "bin/nanoid.js"
},
"engines": {
"node": "^14 || ^16 || >=18"
}
},
"node_modules/@uppy/informer": {
"version": "3.1.0",
"resolved": "https://registry.npmjs.org/@uppy/informer/-/informer-3.1.0.tgz",
@@ -23270,6 +23289,25 @@
"dev": true,
"license": "MIT"
},
"node_modules/@uppy/provider-views/node_modules/nanoid": {
"version": "4.0.2",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
"integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
"dev": true,
"funding": [
{
"type": "github",
"url": "https://github.com/sponsors/ai"
}
],
"license": "MIT",
"bin": {
"nanoid": "bin/nanoid.js"
},
"engines": {
"node": "^14 || ^16 || >=18"
}
},
"node_modules/@uppy/provider-views/node_modules/p-queue": {
"version": "7.4.1",
"resolved": "https://registry.npmjs.org/p-queue/-/p-queue-7.4.1.tgz",
@@ -42398,9 +42436,9 @@
"dev": true
},
"node_modules/nanoid": {
"version": "4.0.2",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
"integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
"version": "5.1.6",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.6.tgz",
"integrity": "sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==",
"funding": [
{
"type": "github",
@@ -42412,7 +42450,7 @@
"nanoid": "bin/nanoid.js"
},
"engines": {
"node": "^14 || ^16 || >=18"
"node": "^18 || >=20"
}
},
"node_modules/nanomatch": {
@@ -59549,6 +59587,25 @@
"url": "https://github.com/sponsors/isaacs"
}
},
"services/web/node_modules/nanoid": {
"version": "4.0.2",
"resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
"integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
"dev": true,
"funding": [
{
"type": "github",
"url": "https://github.com/sponsors/ai"
}
],
"license": "MIT",
"bin": {
"nanoid": "bin/nanoid.js"
},
"engines": {
"node": "^14 || ^16 || >=18"
}
},
"services/web/node_modules/nise": {
"version": "1.5.3",
"resolved": "https://registry.npmjs.org/nise/-/nise-1.5.3.tgz",