fix(deps): update dependency nanoid to v5.0.9 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
nanoid	5.0.7 -> 5.0.9

GitHub Vulnerability Alerts

CVE-2024-55565

When nanoid is called with a fractional value, there were a number of undesirable effects:

1. in browser and non-secure, the code infinite loops on while (size--)
2. in node, the value of poolOffset becomes fractional, causing calls to nanoid to return zeroes until the pool is next filled
3. if the first call in node is a fractional argument, the initial buffer allocation fails with an error

Version 3.3.8 and 5.0.9 are fixed.

---

Release Notes

ai/nanoid (nanoid)

v5.0.9

Compare Source

• Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

v5.0.8

Compare Source

• Reduced customAlphabet size (by @​kirillgroshkov).

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
chirpy	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Dec 10, 2024 1:06am

[changeset-bot]

⚠️ No Changeset found

Latest commit: c5775fe

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[relativeci]

#1447 Bundle Size — 2.56MiB (-0.26%).

c3724a6(current) vs a0dfb35 main#1445(baseline)

Warning

Bundle contains 4 duplicate packages – View duplicate packages

Bundle metrics   4 changes 1 regression

	Current #1447	Baseline #1445
Initial JS	1.64MiB(+0.02%)	1.64MiB
Initial CSS	90.94KiB	90.94KiB
Cache Invalidation	41.78%	2.03%
Chunks	63	63
Assets	83	83
Modules	1841(-0.27%)	1846
Duplicate Modules	273	273
Duplicate Code	6.24%(+0.32%)	6.22%
Packages	151	151
Duplicate Packages	3	3

Bundle size by type   1 change 1 improvement

	Current #1447	Baseline #1445
JS	2.26MiB (-0.3%)	2.27MiB
Fonts	203.29KiB	203.29KiB
CSS	90.94KiB	90.94KiB
Other	16.41KiB	16.41KiB
IMG	1.73KiB	1.73KiB

Bundle analysis report Branch refs/pull/591/merge Project dashboard

---

^{Generated by RelativeCI Documentation Report issue}