From 103bbf65cd8c8de7b1bd99233a24639dfa2241f2 Mon Sep 17 00:00:00 2001
From: Claude Code <daniilerosov12@gmail.com>
Date: Tue, 18 Aug 2026 14:11:06 +0300
Subject: [PATCH] =?UTF-8?q?build(deps):=20=D0=B7=D0=B0=D0=BA=D1=80=D1=8B?=
 =?UTF-8?q?=D1=82=D1=8C=20advisory=20nanoid<3.3.18=20=D0=BF=D0=BE=D0=B4?=
 =?UTF-8?q?=D1=8A=D1=91=D0=BC=D0=BE=D0=BC=20override=20=D0=B4=D0=BE=20^3.3?=
 =?UTF-8?q?.18?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

RED: pnpm audit --audit-level moderate на main падает HIGH (nanoid <3.3.18,
пути через vite>postcss и vitest) — CI run 31987225212 (PR #278).
GREEN: после override и пересборки lockfile audit чист локально.
Гейт INV-18 (audit в verify-цепи) не даёт классу вернуться молча.
---
 pnpm-lock.yaml      | 10 +++++-----
 pnpm-workspace.yaml |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4c46c41b..b3b81fb2 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10,7 +10,7 @@ overrides:
   fast-uri@>=3.0.0 <=3.1.3: ^3.1.4
   postcss@<=8.5.17: ^8.5.18
   qs: ^6.15.2
-  nanoid@<3.3.17: ^3.3.17
+  nanoid@<3.3.18: ^3.3.18
 
 importers:
 
@@ -1604,8 +1604,8 @@ packages:
   mz@2.7.0:
     resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
 
-  nanoid@3.3.17:
-    resolution: {integrity: sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==}
+  nanoid@3.3.18:
+    resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
@@ -3507,7 +3507,7 @@ snapshots:
       object-assign: 4.1.1
       thenify-all: 1.6.0
 
-  nanoid@3.3.17: {}
+  nanoid@3.3.18: {}
 
   node-releases@2.0.50: {}
 
@@ -3566,7 +3566,7 @@ snapshots:
 
   postcss@8.5.25:
     dependencies:
-      nanoid: 3.3.17
+      nanoid: 3.3.18
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 02267ad3..28a02111 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -7,7 +7,7 @@ overrides:
   fast-uri@>=3.0.0 <=3.1.3: ^3.1.4
   postcss@<=8.5.17: ^8.5.18
   qs: ^6.15.2
-  nanoid@<3.3.17: ^3.3.17
+  nanoid@<3.3.18: ^3.3.18
 pmOnFail: error
 peerDependencyRules:
   allowedVersions: