[PR #856] [MERGED] chore(deps): bump nanoid from 2.1.11 to 5.0.9 #3512

Closed
opened 2026-03-13 10:56:24 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/better-auth/better-auth/pull/856
Author: @dependabot[bot]
Created: 12/11/2024
Status: Merged
Merged: 12/11/2024
Merged by: @Bekacru

Base: mainHead: dependabot/npm_and_yarn/nanoid-5.0.9


📝 Commits (1)

  • bdc0983 chore(deps): bump nanoid from 2.1.11 to 5.0.9

📊 Changes

1 file changed (+6 additions, -13 deletions)

View changed files

📝 pnpm-lock.yaml (+6 -13)

📄 Description

Bumps nanoid from 2.1.11 to 5.0.9.

Release notes

Sourced from nanoid's releases.

5.0.9

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

5.0.7

5.0.6

  • Fixed React Native support.

3.0 Migration Guide

Nano ID 3.0 is the biggest release in the project history. Unfortunately, you will need to change the code of your application. But the changes are very small in most cases. In return, you will have better performance, smaller size, ES modules and TypeScript support.

Known Issues

  • Only Create React App 4.0 supports dual ESM/CJS modules.

Simple Case

In simple cases, you just need to change default import to named import.

- import nanoid from 'nanoid'
+ import { nanoid } from 'nanoid'

nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"
nanoid(5) //=> "ISe9l"

If you support IE, you need to transpile node_modules by Babel.

Non-secure and asynchronous Nano ID need only import changes as well.

- import nanoid from 'nanoid/non-secure'
+ import { nanoid } from 'nanoid/non-secure'

nanoid() //=> "sSAi9F8yakJZPxOCr_WFb"

- import nanoid from 'nanoid/async'
+ import { nanoid } from 'nanoid/async'

nanoid().then(id => {
id //=> "sSAi9F8yakJZPxOCr_WFb"
})

... (truncated)

Changelog

Sourced from nanoid's changelog.

5.0.9

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

5.0.8

5.0.7

5.0.6

  • Fixed React Native support.

5.0.5

  • Make browser’s version faster by increasing size a little (by Samuel Elgozi).

5.0.4

5.0.3

  • Fixed CLI docs (by Chris Schmich).

5.0.2

  • Fixed webcrypto import (by Divyansh Singh).

5.0.1

  • Fixed Node.js 18 support.

5.0

  • Moved Node.js version to Web Crypto API.
  • Removed async API since Web Crypto API has only sync version.
  • Removed Node.js 14 and 16 support.

4.0.2

  • Added link to Github Sponsors.

4.0.1

4.0

  • Removed CommonJS support. Nano ID 4 will work only with ESM applications. We will support 3.x branch with CommonJS for users who can’t migrate to ESM.
  • Removed Node.js 10 and Node.js 12 support.
  • Reduced npm package size.

3.3.8

  • Fixed a way to break Nano ID by passing non-integer size (by @​myndzi).

3.3.7

  • Fixed node16 TypeScript support (by Saadi Myftija).

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/better-auth/better-auth/pull/856 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/11/2024 **Status:** ✅ Merged **Merged:** 12/11/2024 **Merged by:** [@Bekacru](https://github.com/Bekacru) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/nanoid-5.0.9` --- ### 📝 Commits (1) - [`bdc0983`](https://github.com/better-auth/better-auth/commit/bdc09839e59f7058e0e47ccbe2379c1421baa055) chore(deps): bump nanoid from 2.1.11 to 5.0.9 ### 📊 Changes **1 file changed** (+6 additions, -13 deletions) <details> <summary>View changed files</summary> 📝 `pnpm-lock.yaml` (+6 -13) </details> ### 📄 Description Bumps [nanoid](https://github.com/ai/nanoid) from 2.1.11 to 5.0.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ai/nanoid/releases">nanoid's releases</a>.</em></p> <blockquote> <h2>5.0.9</h2> <ul> <li>Fixed a way to break Nano ID by passing non-integer size (by <a href="https://github.com/myndzi"><code>@​myndzi</code></a>).</li> </ul> <h2>5.0.8</h2> <ul> <li>Reduced <code>customAlphabet</code> size (by <a href="https://github.com/kirillgroshkov"><code>@​kirillgroshkov</code></a>).</li> </ul> <h2>5.0.7</h2> <ul> <li>Fixed Parcel support (by <a href="https://github.com/WilhelmYakunin"><code>@​WilhelmYakunin</code></a>).</li> </ul> <h2>5.0.6</h2> <ul> <li>Fixed React Native support.</li> </ul> <h2>3.0 Migration Guide</h2> <p>Nano ID 3.0 is the biggest release in the project history. Unfortunately, you will need to change the code of your application. But the changes are very small in most cases. In return, you will have better performance, smaller size, ES modules and TypeScript support.</p> <h2>Known Issues</h2> <ul> <li>Only <strong>Create React App</strong> 4.0 supports dual ESM/CJS modules.</li> </ul> <h2>Simple Case</h2> <p>In simple cases, you just need to change default import to named import.</p> <pre lang="diff"><code>- import nanoid from 'nanoid' + import { nanoid } from 'nanoid' <p>nanoid() //=&gt; &quot;sSAi9F8yakJZPxOCr_WFb&quot;<br /> nanoid(5) //=&gt; &quot;ISe9l&quot;<br /> </code></pre></p> <p>If you support IE, you need to <a href="https://developer.epages.com/blog/coding/how-to-transpile-node-modules-with-babel-and-webpack-in-a-monorepo/">transpile <code>node_modules</code> by Babel</a>.</p> <p>Non-secure and asynchronous Nano ID need only import changes as well.</p> <pre lang="diff"><code>- import nanoid from 'nanoid/non-secure' + import { nanoid } from 'nanoid/non-secure' <p>nanoid() //=&gt; &quot;sSAi9F8yakJZPxOCr_WFb&quot;<br /> </code></pre></p> <pre lang="diff"><code>- import nanoid from 'nanoid/async' + import { nanoid } from 'nanoid/async' nanoid().then(id =&gt; { id //=&gt; &quot;sSAi9F8yakJZPxOCr_WFb&quot; }) </code></pre> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/ai/nanoid/blob/main/CHANGELOG.md">nanoid's changelog</a>.</em></p> <blockquote> <h2>5.0.9</h2> <ul> <li>Fixed a way to break Nano ID by passing non-integer size (by <a href="https://github.com/myndzi"><code>@​myndzi</code></a>).</li> </ul> <h2>5.0.8</h2> <ul> <li>Reduced <code>customAlphabet</code> size (by <a href="https://github.com/kirillgroshkov"><code>@​kirillgroshkov</code></a>).</li> </ul> <h2>5.0.7</h2> <ul> <li>Fixed Parcel support (by <a href="https://github.com/WilhelmYakunin"><code>@​WilhelmYakunin</code></a>).</li> </ul> <h2>5.0.6</h2> <ul> <li>Fixed React Native support.</li> </ul> <h2>5.0.5</h2> <ul> <li>Make browser’s version faster by increasing size a little (by Samuel Elgozi).</li> </ul> <h2>5.0.4</h2> <ul> <li>Fixed CLI docs (by <a href="https://github.com/ilyaboka"><code>@​ilyaboka</code></a>).</li> </ul> <h2>5.0.3</h2> <ul> <li>Fixed CLI docs (by Chris Schmich).</li> </ul> <h2>5.0.2</h2> <ul> <li>Fixed <code>webcrypto</code> import (by Divyansh Singh).</li> </ul> <h2>5.0.1</h2> <ul> <li>Fixed Node.js 18 support.</li> </ul> <h2>5.0</h2> <ul> <li>Moved Node.js version to Web Crypto API.</li> <li>Removed async API since Web Crypto API has only sync version.</li> <li>Removed Node.js 14 and 16 support.</li> </ul> <h2>4.0.2</h2> <ul> <li>Added <a href="https://github.com/sponsors/ai">link</a> to Github Sponsors.</li> </ul> <h2>4.0.1</h2> <ul> <li>Reduced npm package size (by <a href="https://github.com/HiChen404"><code>@​HiChen404</code></a>).</li> </ul> <h2>4.0</h2> <ul> <li>Removed CommonJS support. Nano ID 4 will work only with ESM applications. We will support 3.x branch with CommonJS for users who can’t migrate to ESM.</li> <li>Removed Node.js 10 and Node.js 12 support.</li> <li>Reduced npm package size.</li> </ul> <h2>3.3.8</h2> <ul> <li>Fixed a way to break Nano ID by passing non-integer size (by <a href="https://github.com/myndzi"><code>@​myndzi</code></a>).</li> </ul> <h2>3.3.7</h2> <ul> <li>Fixed <code>node16</code> TypeScript support (by Saadi Myftija).</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ai/nanoid/commit/65a38ac63a0709c420b9de30b15511b84e87c423"><code>65a38ac</code></a> Release 5.0.9 version</li> <li><a href="https://github.com/ai/nanoid/commit/b00d120d7a88ef045df0835c89fed6bf29b26bda"><code>b00d120</code></a> Merge after 3.3.8 release</li> <li><a href="https://github.com/ai/nanoid/commit/3044cd5e73f4cf31795f61f6e6b961c8c0a5c744"><code>3044cd5</code></a> Release 3.3.8 version</li> <li><a href="https://github.com/ai/nanoid/commit/cdc3edc2f57652d97e566acecef7f1bb0f4650db"><code>cdc3edc</code></a> Update size limit</li> <li><a href="https://github.com/ai/nanoid/commit/4fe34959c34e5b3573889ed4f24fe91d1d3e7231"><code>4fe3495</code></a> Update size limit</li> <li><a href="https://github.com/ai/nanoid/commit/d643045f40d6dc8afa000a644d857da1436ed08c"><code>d643045</code></a> Fix pool pollution, infinite loop (<a href="https://redirect.github.com/ai/nanoid/issues/510">#510</a>)</li> <li><a href="https://github.com/ai/nanoid/commit/0daa00f68acc2f958ba19f73ddef700ce4049ab7"><code>0daa00f</code></a> Additional fixes and tests for <a href="https://redirect.github.com/ai/nanoid/issues/508">#508</a> (<a href="https://redirect.github.com/ai/nanoid/issues/509">#509</a>)</li> <li><a href="https://github.com/ai/nanoid/commit/313a14eb0e0557adba8a00d22b66f6a41a8b1cee"><code>313a14e</code></a> Update dependencies</li> <li><a href="https://github.com/ai/nanoid/commit/eb2db95a181c1cd42580f1c5ff88e455ad03ffb7"><code>eb2db95</code></a> Fix size limit and linting</li> <li><a href="https://github.com/ai/nanoid/commit/9da8f607e1ebaae1aac73c9ba7fb199b5a4592f6"><code>9da8f60</code></a> Fix pool pollution, infinite loop (<a href="https://redirect.github.com/ai/nanoid/issues/508">#508</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ai/nanoid/compare/2.1.11...5.0.9">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nanoid&package-manager=npm_and_yarn&previous-version=2.1.11&new-version=5.0.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/better-auth/better-auth/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-03-13 10:56:24 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#3512