Skip to content

fix(deps): update nanoid in Next example - #7

Merged
jason-allen-oneal merged 1 commit into
mainfrom
fix/next-example-nanoid
Aug 30, 2026
Merged

fix(deps): update nanoid in Next example#7
jason-allen-oneal merged 1 commit into
mainfrom
fix/next-example-nanoid

Conversation

@jason-allen-oneal

Copy link
Copy Markdown
Member

Summary

  • update the Next.js example lockfile from nanoid 3.3.16 to 3.3.18
  • resolve GHSA-2v37-7h3g-55p8 and restore the next-example CI job

Validation

  • root npm ci --ignore-scripts
  • root npm run build
  • root npm test (22/22 passing)
  • root npm run test:package
  • root npm audit --omit=dev --audit-level=high
  • example npm ci --ignore-scripts
  • example npm audit --audit-level=high (0 vulnerabilities)
  • example npm run build

@morrow-bluedot morrow-bluedot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Independent security review: exact-head diff is limited to nanoid 3.3.16→3.3.18 in the Next example lockfile; Node 18/20 and next-example hosted checks are green.

@jason-allen-oneal
jason-allen-oneal merged commit 65618c8 into main Aug 30, 2026
3 checks passed
@jason-allen-oneal
jason-allen-oneal deleted the fix/next-example-nanoid branch August 30, 2026 21:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants