[Snyk] Upgrade nanoid from 3.1.30 to 3.3.4

[snyk-bot]

Snyk has created this PR to upgrade nanoid from 3.1.30 to 3.3.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2022-05-03.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-NANOID-2332193	521/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: nanoid

• 3.3.4 - 2022-05-03
  

  3.3.4

• 3.3.3 - 2022-04-18
  

  3.3.3

• 3.3.2 - 2022-03-28
  

  3.3.2

• 3.3.1 - 2022-02-16
  

  3.3.1

• 3.3.0 - 2022-02-14
  

  3.3

• 3.2.0 - 2022-01-16
  

  3.2

• 3.1.32 - 2022-01-12
  

  3.1.32

• 3.1.31 - 2022-01-11
  

  3.1.31

• 3.1.30 - 2021-10-13
  

  3.1.30

from nanoid GitHub release notes

Commit messages

Package name: nanoid

• fc5bd0d Release 3.3.4 version
• 5ae2628 Update dependencies
• 2f48e9c Try to fix CI
• 85991e3 fix: CLI help examples (#361)
• 89d994c Update dependencies
• 00547e7 Fix benchmark order
• a8f4099 bench: add back @ napi-rs/uuid (#360)
• acd897f Added postgres extension to various README files (#359)
• 772a613 Update CI and dependencies
• e7aeb0f Added zig-nanoid to readme. (#357)
• 0454333 Release 3.3.3 version
• 71271f2 Update dependencies
• f4e7325 reduce bundlesize by moving from while to reduce (#355)
• cb3053e Add R implementation to the language lists (#353)
• 7f0df47 Release 3.3.2 version
• 56f3f5c Update dependencies
• 41cc4e2 Update CI
• ec6f809 Release 3.3.1 version
• c7d8578 Update dependencies
• 05b2596 Remove old tests
• 368a6e7 Remove process.env.NODE_ENV
• ee7dee3 Remove @ napi-rs/uuid to fix CI
• defe20f Try to fix CI
• ee85121 Try to fix CI

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs