Skip to content

chore(deps): bump nanoid from 3.3.11 to 3.3.16 - #351

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/nanoid-3.3.16
Open

chore(deps): bump nanoid from 3.3.11 to 3.3.16#351
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/nanoid-3.3.16

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor

Bumps nanoid from 3.3.11 to 3.3.16.

Release notes

Sourced from nanoid's releases.

3.3.16

3.3.15

  • Fixed npm provenance error.

3.3.14

  • Fixed random pool corruption on big ID sizes.

3.3.13

  • Reduced npm package size.

3.3.12

  • Fixed breaking Nano ID by requesting big ID.
Changelog

Sourced from nanoid's changelog.

3.3.16

3.3.15

  • Fixed npm provenance error.

3.3.14

  • Fixed random pool corruption on big ID sizes.

3.3.13

  • Reduced npm package size.

3.3.12

  • Fixed breaking Nano ID by requesting big ID.
Commits
  • 9760e11 Release 3.3.16 version
  • e835c9b fix(non-secure): clamp negative size to prevent infinite loop (#601)
  • 96dd086 Update CI action
  • ba0bc3b Do not create latest release for v3
  • 6819724 Release 3.3.15 version
  • fb0b137 Fix tag for v3
  • e084bc9 Back-port new release system and fix pre-commit hook
  • 7e32945 Release 3.3.14 version
  • 6bd27b8 Another way to deal with pool damage
  • 41ad2ac Reduce ID size
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.


@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 9, 2026
@codesandbox

codesandbox Bot commented Aug 9, 2026

Copy link
Copy Markdown

Review or Edit in CodeSandbox

Open the branch in Web EditorVS CodeInsiders

Open Preview

@AminDhouib

Copy link
Copy Markdown
Member

Diagnosis: this lockfile regen floats @types/node, whose newer types make Buffer<ArrayBufferLike> unassignable to BodyInit — the board-wide red is real, not flake. #353 fixes the first breakage (@upupjs/next pages-handler, now typed RequestInit['body'] and verified against both old and new @types/node). Known residue this branch will still hit after a rebase: @upupjs/core + @upupjs/storybook-config test fixtures (Uint8Array<ArrayBufferLike> vs BlobPart) and apps/next-example (TS2305). Plan: once #353 reaches master, rebase this PR and fix the remaining fixture typings.

AminDhouib added a commit that referenced this pull request Aug 12, 2026
Issue batch: migration-feedback fixes (#337-#344) + nightly issue-arm and #351 compat
Bumps [nanoid](https://github.com/ai/nanoid) from 3.3.11 to 3.3.16.
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/main/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.11...3.3.16)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.16
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/nanoid-3.3.16 branch from 6063503 to 5b1bbc4 Compare August 21, 2026 23:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant