search

bubble-dev / _

🍱 metarepo of many packages and various monorepos
52 stars 6 forks source link

♻️ update nanoid to v3.1.31 [SECURITY] - autoclosed #544

Closed renovate[bot] closed 2 years ago

renovate[bot] commented 2 years ago

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nanoid 3.1.22 -> 3.1.31 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23566

The package nanoid before 3.1.31 are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

Release Notes

ai/nanoid ### [`v3.1.31`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3131) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.30...3.1.31) - Fixed collision vulnerability on object in `size` (by Artyom Arutyunyan). ### [`v3.1.30`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3130) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.29...3.1.30) - Reduced size for project with `brotli` compression (by Anton Khlynovskiy). ### [`v3.1.29`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3129) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.28...3.1.29) - Reduced npm package size. ### [`v3.1.28`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3128) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.27...3.1.28) - Reduced npm package size. ### [`v3.1.27`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3127) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.26...3.1.27) - Cleaned `dependencies` from development tools. ### [`v3.1.26`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3126) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.25...3.1.26) - Improved performance (by Eitan Har-Shoshanim). - Reduced npm package size. ### [`v3.1.25`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3125) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.24...3.1.25) - Fixed `browserify` support. ### [`v3.1.24`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3124) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.23...3.1.24) - Fixed `browserify` support (by Artur Paikin). ### [`v3.1.23`](https://togithub.com/ai/nanoid/blob/HEAD/CHANGELOG.md#​3123) [Compare Source](https://togithub.com/ai/nanoid/compare/3.1.22...3.1.23) - Fixed `esbuild` support.

Configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by WhiteSource Renovate. View repository job log here.