Skip to content

Conversation

@cam-shaw
Copy link

@cam-shaw cam-shaw commented Jan 2, 2025

CVE: https://www.cve.org/CVERecord?id=CVE-2024-55565

PR simply updates nanoid to 5.0.9

Based on this compared, the changes (and change log) don't indicate to my any concerns for upgrading two major versions
ai/nanoid@3.3.1...5.0.9

Notes from nanoid 4.0 if curious

4.0

  • Removed CommonJS support. Nano ID 4 will work only with ESM applications.
    We will support 3.x branch with CommonJS for users who can’t migrate to ESM.
  • Removed Node.js 10 and Node.js 12 support.
  • Reduced npm package size.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant