From 6a5ee21ff622ca2e365675233901c246d78b69f9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Jan 2023 09:01:08 +0000 Subject: [PATCH] Bump cuid from 2.1.8 to 3.0.0 Bumps [cuid](https://github.com/ericelliott/cuid) from 2.1.8 to 3.0.0. - [Release notes](https://github.com/ericelliott/cuid/releases) - [Commits](https://github.com/ericelliott/cuid/compare/v2.1.8...v3.0.0) --- updated-dependencies: - dependency-name: cuid dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- package-lock.json | 9 +++++---- package.json | 2 +- 2 files changed, 6 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index ffa1295..1fc51e8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -28,7 +28,7 @@ "concurrently": "^7.6.0", "coveralls": "^3.1.1", "cross-env": "^7.0.3", - "cuid": "^2.1.8", + "cuid": "^3.0.0", "express": "^4.18.2", "fastify": "^4.10.2", "fastify-express": "^0.4.0", @@ -1938,9 +1938,10 @@ "dev": true }, "node_modules/cuid": { - "version": "2.1.8", - "resolved": "https://registry.npmjs.org/cuid/-/cuid-2.1.8.tgz", - "integrity": "sha512-xiEMER6E7TlTPnDxrM4eRiC6TRgjNX9xzEZ5U/Se2YJKr7Mq4pJn/2XEHjl3STcSh96GmkHPcBXLES8M29wyyg==", + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/cuid/-/cuid-3.0.0.tgz", + "integrity": "sha512-WZYYkHdIDnaxdeP8Misq3Lah5vFjJwGuItJuV+tvMafosMzw0nF297T7mrm8IOWiPJkV6gc7sa8pzx27+w25Zg==", + "deprecated": "Cuid and other k-sortable and non-cryptographic ids (Ulid, ObjectId, KSUID, all UUIDs) are all insecure. Use @paralleldrive/cuid2 instead.", "dev": true }, "node_modules/dashdash": { diff --git a/package.json b/package.json index 8298cce..6839a96 100644 --- a/package.json +++ b/package.json @@ -116,7 +116,7 @@ "concurrently": "^7.6.0", "coveralls": "^3.1.1", "cross-env": "^7.0.3", - "cuid": "^2.1.8", + "cuid": "^3.0.0", "express": "^4.18.2", "fastify": "^4.10.2", "fastify-express": "^0.4.0",