Skip to content

fix(deps): bump nanoid to 5.1.16 with minimal pnpm lockfile - #80

Closed
TimInTech wants to merge 2 commits into
mainfrom
fix/dependabot-nanoid-5.1.16
Closed

TimInTech wants to merge 2 commits into
mainfrom
fix/dependabot-nanoid-5.1.16

Conversation

@TimInTech

Copy link
Copy Markdown
Owner

Replaces Dependabot PR #78.

This preserves the intended NanoID security update while removing the unrelated pnpm lockfile reserialization and dependency refresh.

Changes:

  • nanoid: 5.1.6 -> 5.1.16
  • only the direct NanoID package, importer, resolution and snapshot are changed
  • no unrelated postcss, esbuild, @esbuild/*, get-tsconfig, or nanoid 3.x changes

The equivalent minimal change was validated by the preceding Copilot repair run with pnpm 10.4.1:

  • pnpm install --frozen-lockfile
  • pnpm run check
  • pnpm run build

All completed successfully.

Copilot AI balanced review requested due to automatic review settings September 29, 2026 23:50

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

Copy link
Copy Markdown
Owner Author

Superseded by #81, which reapplied the same minimal NanoID security update on top of the already merged PostCSS change. #81 has now been merged.

@TimInTech TimInTech closed this Sep 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants