Merge pull request #20726 from cypress-io/renovate/npm-nanoid-vulnera…

…bility chore(deps): update dependency nanoid to v3.1.31 [security]
cypress-io · Mar 24, 2022 · 88556c2 · 88556c2 · cypress-bot · Mar 24, 2022
2 parents d59b7bd + bf85d7c
commit 88556c2
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 3 deletions.
diff --git a/packages/runner-ct/package.json b/packages/runner-ct/package.json
@@ -45,7 +45,7 @@
     "mobx": "5.15.4",
     "mobx-react": "6.1.8",
     "mocha": "^8.1.3",
-    "nanoid": "3.1.20",
+    "nanoid": "3.1.31",
     "react": "16.8.6",
     "react-devtools-inline": "^4.10.1",
     "react-dom": "16.8.6",

diff --git a/packages/runner-shared/package.json b/packages/runner-shared/package.json
@@ -25,7 +25,7 @@
     "mobx": "5.15.4",
     "mobx-react": "6.1.8",
     "mocha": "7.0.1",
-    "nanoid": "3.1.20",
+    "nanoid": "3.1.31",
     "react": "16.8.6",
     "react-dom": "16.8.6",
     "react-popper": "2.2.5",

diff --git a/packages/runner-shared/src/store.ts b/packages/runner-shared/src/store.ts
@@ -1,5 +1,5 @@
 import { action, observable } from 'mobx'
-import { nanoid } from 'nanoid'
+import { nanoid } from 'nanoid/non-secure'
 
 export type RunMode = 'single' | 'multi'
 

diff --git a/yarn.lock b/yarn.lock
@@ -28746,6 +28746,11 @@ nanoid@3.1.20:
   resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.1.20.tgz#badc263c6b1dcf14b71efaa85f6ab4c1d6cfc788"
   integrity sha512-a1cQNyczgKbLX9jwbS/+d7W8fX/RfgYR7lVWwWOGIPNgK2m0MWvrGF6/m4kk6U3QcFMnZf3RIhL0v2Jgh/0Uxw==
 
+nanoid@3.1.31:
+  version "3.1.31"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.1.31.tgz#f5b58a1ce1b7604da5f0605757840598d8974dc6"
+  integrity sha512-ZivnJm0o9bb13p2Ot5CpgC2rQdzB9Uxm/mFZweqm5eMViqOJe3PV6LU2E30SiLgheesmcPrjquqraoolONSA0A==
+
 nanoid@3.2.0, nanoid@^3.1.16, nanoid@^3.1.22, nanoid@^3.1.23:
   version "3.2.0"
   resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.2.0.tgz#62667522da6673971cca916a6d3eff3f415ff80c"