From 23a81834a81a7b761e51cfbbbce9973c6f102b7b Mon Sep 17 00:00:00 2001 From: Jonathan Norris Date: Mon, 17 Aug 2026 10:18:05 -0400 Subject: [PATCH] chore: resolve open dependabot security alerts - nanoid 3.3.17 -> 3.3.18 (high, alert #128) Signed-off-by: Jonathan Norris --- package-lock.json | 6 +++--- package.json | 3 ++- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/package-lock.json b/package-lock.json index 6a61edd..cd9d898 100644 --- a/package-lock.json +++ b/package-lock.json @@ -8889,9 +8889,9 @@ } }, "node_modules/nanoid": { - "version": "3.3.17", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz", - "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "funding": [ { "type": "github", diff --git a/package.json b/package.json index 34767d8..7cbc96e 100644 --- a/package.json +++ b/package.json @@ -49,7 +49,8 @@ "sharp": "$sharp", "brace-expansion": ">=1.1.16 <2", "@opentelemetry/core": "^2.8.0", - "@opentelemetry/resources": "^2.8.0" + "@opentelemetry/resources": "^2.8.0", + "nanoid": ">=3.3.18 <4" }, "devDependencies": { "@tanstack/eslint-plugin-query": "^5.74.7",