Skip to content

chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website - #57

Closed
dependabot[bot] wants to merge 29 commits into
mainfrom
dependabot/npm_and_yarn/website/nanoid-3.3.18
Closed

chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website#57
dependabot[bot] wants to merge 29 commits into
mainfrom
dependabot/npm_and_yarn/website/nanoid-3.3.18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps nanoid from 3.3.12 to 3.3.18.

Release notes

Sourced from nanoid's releases.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.

3.3.16

3.3.15

  • Fixed npm provenance error.

3.3.14

  • Fixed random pool corruption on big ID sizes.

3.3.13

  • Reduced npm package size.
Changelog

Sourced from nanoid's changelog.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.

3.3.16

3.3.15

  • Fixed npm provenance error.

3.3.14

  • Fixed random pool corruption on big ID sizes.

3.3.13

  • Reduced npm package size.
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

renovate Bot and others added 29 commits May 5, 2026 22:43
@renovate
Update dependency esbuild to ^0.28.0 (#10)
eb55609 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies (#11)
f9c11b0 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies (#14)
5180cc6 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies to ^22.19.20 (#15)
eb78e94 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@andrelin
chore: pin default Java to 25, bundle dependency bumps and docs updates
92160b8 
- pin default JAVA_HOME to openjdk@25 (was: latest installed openjdk)
- bump Node engines to >=24.16.0 and @types/node to ^24.13.2 (#19)
- bundle 3 dependabot bumps in /website (#17)
- never close Dependabot or Renovate PRs
@renovate
Update all non-major dependencies (#18)
9b255ef 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies to ^7.0.6 (#24)
34b9c52 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies (#26)
4130547 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies (#27)
c453123 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/checkout action to v7 (#20)
41df98b 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#…
99bd6f1 
…22)

Bumps [webpack-dev-server](https://github.com/webpack/webpack-dev-server) from 5.2.4 to 5.2.5.
- [Release notes](https://github.com/webpack/webpack-dev-server/releases)
- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack-dev-server@v5.2.4...v5.2.5)

---
updated-dependencies:
- dependency-name: webpack-dev-server
  dependency-version: 5.2.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@renovate
Update dependency serialize-javascript to ^7.0.7 (#28)
443d5b5 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.22.5 (#29)
f6b1b43 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.23.0 (#30)
e616703 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update lycheeverse/lychee-action action to v2.9.0 (#31)
2e1e76f 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency @types/node to ^24.13.3 (#32)
57af276 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies to ^3.10.2 (#34)
fe8b124 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/setup-node action to v6.5.0 (#35)
a137b8b 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.23.1 (#38)
9399221 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update actions/checkout action to v7.0.1 (#39)
b1a757a 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update all non-major dependencies to ^19.2.8 (#44)
abff1e9 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update Node.js to >=24.18.1 (#47)
f73679c 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency node to v24.18.1 (#48)
7a6c50c 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update Node.js to >=24.19.0 (#49)
dce5262 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency node to v24.19.0 (#52)
53c063f 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.23.4 (#54)
24615f3 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.23.5 (#55)
3e80b69 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
Update dependency tsx to ^4.23.7 (#56)
39dd008 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump nanoid from 3.3.12 to 3.3.18 in /website
b6c9898 
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.12 to 3.3.18.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.12...3.3.18)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 8, 2026
@dependabot dependabot Bot added javascript Pull requests that update javascript code dependencies Pull requests that update a dependency file labels Aug 8, 2026
andrelin added a commit that referenced this pull request Aug 10, 2026
@andrelin @claude
refresh website lockfile to clear transitive security advisories
2eea4dc 
Bumps 31 transitive packages in website/, taking the audit from 32 advisories
(1 critical, 25 high) down to 17. All were lockfile-only fixes; no direct
dependency in package.json changed, and the site builds unchanged.

Supersedes #58, #57, #53, #51, #50, #43, #42, #41, #40, #37, #25 and #23,
which each bumped one of these individually.

The remaining 17 are a single advisory: image-size's JXL/HEIF parsers allow a
denial of service, reached through @docusaurus/mdx-loader. There is no patched
version and Docusaurus is already on the latest 3.10.2, so this needs an
upstream release. It is a build-time parser fed only by our own content, so
there is no untrusted input path.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Looks like nanoid is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/website/nanoid-3.3.18 branch August 10, 2026 20:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@andrelin