chore(deps): update dependency nanoid to v5.1.9#3714
Open
renovate[bot] wants to merge 1 commit intodevelopfrom
Open
chore(deps): update dependency nanoid to v5.1.9#3714renovate[bot] wants to merge 1 commit intodevelopfrom
renovate[bot] wants to merge 1 commit intodevelopfrom
Conversation
renovate
Bot
force-pushed
the
renovate/nanoid-5.x-lockfile
branch
3 times, most recently
from
2951987 to
3a93bea
Compare
renovate
Bot
force-pushed
the
renovate/nanoid-5.x-lockfile
branch
from
3a93bea to
40a8365
Compare
Up to standards ✅🟢 Issues
|
| Metric | Results |
|---|---|
| Duplication | 0 |
TIP This summary will be updated as you push new changes. Give us feedback
renovate
Bot
force-pushed
the
renovate/nanoid-5.x-lockfile
branch
from
40a8365 to
1dd9f95
Compare
renovate
Bot
changed the title
renovate
Bot
force-pushed
the
renovate/nanoid-5.x-lockfile
branch
from
1dd9f95 to
6d23404
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Security Review: No Issues Found
This PR updates the nanoid dev dependency from 5.1.6 to 5.1.9 in web/package-lock.json only. No security concerns identified:
- Scope: Lockfile-only change; no application code modified.
- Dependency risk:
nanoidis a dev-only dependency (not shipped to production). No known vulnerabilities exist for the 5.1.x line (prior issues like CVE-2024-55565 were fixed in 5.0.9). - Supply chain: Integrity hashes are present and the package is resolved from the official npm registry. The update is authored by Renovate Bot, a trusted automated dependency manager.
Sent by Cursor Automation: Find vulnerabilities
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
5.1.6→5.1.9Release Notes
ai/nanoid (nanoid)
v5.1.9Compare Source
v5.1.8Compare Source
cusatomAlphabet75% faster (by @saripovdenis).v5.1.7Compare Source
--versionto CLI (by @mahmoodhamdi).nanoid.jsfor CDN (by @mahmoodhamdi).customRandomtypes (by @oguimbal).Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.