search

bubble-dev / _

🍱 metarepo of many packages and various monorepos
52 stars 6 forks source link

♻️ update nanoid to v3.1.31 [SECURITY] #566

Open renovate[bot] opened 1 year ago

renovate[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
nanoid 3.1.22 -> 3.1.31 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23566

The package nanoid from 3.0.0, before 3.1.31, are vulnerable to Information Exposure via the valueOf() function which allows to reproduce the last id generated.

Release Notes

ai/nanoid (nanoid) ### [`v3.1.31`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3131) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.30...3.1.31) - Fixed collision vulnerability on object in `size` (by Artyom Arutyunyan). ### [`v3.1.30`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3130) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.29...3.1.30) - Reduced size for project with `brotli` compression (by Anton Khlynovskiy). ### [`v3.1.29`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3129) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.28...3.1.29) - Reduced npm package size. ### [`v3.1.28`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3128) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.27...3.1.28) - Reduced npm package size. ### [`v3.1.27`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3127) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.26...3.1.27) - Cleaned `dependencies` from development tools. ### [`v3.1.26`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3126) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.25...3.1.26) - Improved performance (by Eitan Har-Shoshanim). - Reduced npm package size. ### [`v3.1.25`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3125) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.24...3.1.25) - Fixed `browserify` support. ### [`v3.1.24`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3124) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.23...3.1.24) - Fixed `browserify` support (by Artur Paikin). ### [`v3.1.23`](https://redirect.github.com/ai/nanoid/blob/HEAD/CHANGELOG.md#3123) [Compare Source](https://redirect.github.com/ai/nanoid/compare/3.1.22...3.1.23) - Fixed `esbuild` support.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.