Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies so nanoid can be updated to 3.3.8 #6972

Open
fsmeier opened this issue Dec 20, 2024 · 1 comment · May be fixed by #6982
Open

Update dependencies so nanoid can be updated to 3.3.8 #6972

fsmeier opened this issue Dec 20, 2024 · 1 comment · May be fixed by #6982
Labels
type: bug code to address defects in shipped code

Comments

@fsmeier
Copy link

fsmeier commented Dec 20, 2024

Describe the bug

Summary

npm audit report

nanoid <3.3.8
Severity: moderate
Predictable results in nanoid generation when given non-integer values - GHSA-mwcw-c2x4-8c55

Steps to reproduce

Netlify dependencies somehow prevent updating it to 3.3.8. (netlify-cli version 17.38.1)

npm why nanoid

[email protected] dev
node_modules/netlify-cli/node_modules/nanoid
  nanoid@"^3.3.7" from [email protected]
  node_modules/netlify-cli/node_modules/postcss
    postcss@"^8.4.23" from [email protected]
    node_modules/netlify-cli/node_modules/detective-postcss
      detective-postcss@"^6.1.3" from [email protected]
      node_modules/netlify-cli/node_modules/precinct
        precinct@"^11.0.0" from @netlify/[email protected]
        node_modules/netlify-cli/node_modules/@netlify/zip-it-and-ship-it
          @netlify/zip-it-and-ship-it@"9.42.1" from [email protected]
          node_modules/netlify-cli
            dev netlify-cli@"^17.38.1" from the root project
          @netlify/zip-it-and-ship-it@"9.42.1" from @netlify/[email protected]
          node_modules/netlify-cli/node_modules/@netlify/build
            @netlify/build@"29.58.0" from [email protected]
            node_modules/netlify-cli
              dev netlify-cli@"^17.38.1" from the root project
          @netlify/zip-it-and-ship-it@"9.42.1" from @netlify/[email protected]
          node_modules/netlify-cli/node_modules/@netlify/functions-utils
            @netlify/functions-utils@"^5.3.1" from @netlify/[email protected]
            node_modules/netlify-cli/node_modules/@netlify/build
              @netlify/build@"29.58.0" from [email protected]
              node_modules/netlify-cli
                dev netlify-cli@"^17.38.1" from the root project
    peer postcss@"^8.2.9" from [email protected]
    node_modules/netlify-cli/node_modules/postcss-values-parser
      postcss-values-parser@"^6.0.2" from [email protected]
      node_modules/netlify-cli/node_modules/detective-postcss
        detective-postcss@"^6.1.3" from [email protected]
        node_modules/netlify-cli/node_modules/precinct
          precinct@"^11.0.0" from @netlify/[email protected]
          node_modules/netlify-cli/node_modules/@netlify/zip-it-and-ship-it
            @netlify/zip-it-and-ship-it@"9.42.1" from [email protected]
            node_modules/netlify-cli
              dev netlify-cli@"^17.38.1" from the root project
            @netlify/zip-it-and-ship-it@"9.42.1" from @netlify/[email protected]
            node_modules/netlify-cli/node_modules/@netlify/build
              @netlify/build@"29.58.0" from [email protected]
              node_modules/netlify-cli
                dev netlify-cli@"^17.38.1" from the root project
            @netlify/zip-it-and-ship-it@"9.42.1" from @netlify/[email protected]
            node_modules/netlify-cli/node_modules/@netlify/functions-utils
              @netlify/functions-utils@"^5.3.1" from @netlify/[email protected]
              node_modules/netlify-cli/node_modules/@netlify/build
                @netlify/build@"29.58.0" from [email protected]
                node_modules/netlify-cli
                  dev netlify-cli@"^17.38.1" from the root project

Configuration

No response

Environment

sh: 1: envinfo: not found

@fsmeier fsmeier added the type: bug code to address defects in shipped code label Dec 20, 2024
@DerianCordobaPerez DerianCordobaPerez linked a pull request Dec 30, 2024 that will close this issue
5 tasks
@DerianCordobaPerez
Copy link

Hi @fsmeier I open a PR to update the nanoid dependency: #6982

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
type: bug code to address defects in shipped code
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants