Bowen7 / regex-vis

🎨 Regex visualizer & editor
https://regex-vis.com
MIT License
3.78k stars 279 forks source link

fix(deps): update dependency nanoid to v3.1.31 [security] #122

Closed renovate[bot] closed 4 months ago

renovate[bot] commented 9 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nanoid 3.1.23 -> 3.1.31 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23566

The package nanoid from 3.0.0, before 3.1.31, are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.


Release Notes

ai/nanoid (nanoid) ### [`v3.1.31`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3131) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.30...3.1.31) - Fixed collision vulnerability on object in `size` (by Artyom Arutyunyan). ### [`v3.1.30`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3130) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.29...3.1.30) - Reduced size for project with `brotli` compression (by Anton Khlynovskiy). ### [`v3.1.29`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3129) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.28...3.1.29) - Reduced npm package size. ### [`v3.1.28`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3128) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.27...3.1.28) - Reduced npm package size. ### [`v3.1.27`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3127) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.26...3.1.27) - Cleaned `dependencies` from development tools. ### [`v3.1.26`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3126) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.25...3.1.26) - Improved performance (by Eitan Har-Shoshanim). - Reduced npm package size. ### [`v3.1.25`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3125) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.24...3.1.25) - Fixed `browserify` support. ### [`v3.1.24`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3124) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.23...3.1.24) - Fixed `browserify` support (by Artur Paikin).

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.

vercel[bot] commented 9 months ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
regex-vis ✅ Ready (Inspect) Visit Preview 💬 Add feedback Feb 25, 2024 10:31am