From 5d4e0bc3a81942aa68324f8de77d7bb397301b28 Mon Sep 17 00:00:00 2001
From: Jennifer Takagi <jennifer.takagi@jimdo.com>
Date: Mon, 10 Aug 2026 05:28:08 -0400
Subject: [PATCH] chore: resolve Dependabot security alerts - 2026-08-07
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bump nanoid 3.3.16 -> 3.3.18 (transitive via vitest > vite > postcss)
to resolve GHSA-2v37-7h3g-55p8 (infinite-loop DoS, high).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

🤖 Generated with Claude Code
---
 package-lock.json | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/package-lock.json b/package-lock.json
index 958d5e2..d6be29d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -3568,9 +3568,9 @@
       "license": "ISC"
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "dev": true,
       "funding": [
         {