From ecf8b3334b0baba54f58646f32d453922345839d Mon Sep 17 00:00:00 2001 From: Michael Novotny Date: Fri, 28 Aug 2026 17:14:39 -0500 Subject: [PATCH] chore(astro): Update dependency nanoid to v5.1.16 [SECURITY] Co-Authored-By: Claude Fable 5 --- .changeset/heavy-moons-refuse.md | 5 +++++ packages/astro/package.json | 2 +- pnpm-lock.yaml | 10 +++++----- 3 files changed, 11 insertions(+), 6 deletions(-) create mode 100644 .changeset/heavy-moons-refuse.md diff --git a/.changeset/heavy-moons-refuse.md b/.changeset/heavy-moons-refuse.md new file mode 100644 index 00000000000..28e545d44ab --- /dev/null +++ b/.changeset/heavy-moons-refuse.md @@ -0,0 +1,5 @@ +--- +'@clerk/astro': patch +--- + +Update `nanoid` to 5.1.16 to resolve [GHSA-28wg-ghj8-5hjv](https://github.com/advisories/GHSA-28wg-ghj8-5hjv), which every fresh install of `@clerk/astro` surfaced as a high-severity `npm audit` warning. diff --git a/packages/astro/package.json b/packages/astro/package.json index 1563d8f9d17..9293be14345 100644 --- a/packages/astro/package.json +++ b/packages/astro/package.json @@ -92,7 +92,7 @@ "dependencies": { "@clerk/backend": "workspace:^", "@clerk/shared": "workspace:^", - "nanoid": "5.1.6", + "nanoid": "5.1.16", "nanostores": "1.0.1" }, "devDependencies": { diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml index 654977b9b2f..37fa00eb897 100644 --- a/pnpm-lock.yaml +++ b/pnpm-lock.yaml @@ -364,8 +364,8 @@ importers: specifier: workspace:^ version: link:../shared nanoid: - specifier: 5.1.6 - version: 5.1.6 + specifier: 5.1.16 + version: 5.1.16 nanostores: specifier: 1.0.1 version: 1.0.1 @@ -11794,8 +11794,8 @@ packages: engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1} hasBin: true - nanoid@5.1.6: - resolution: {integrity: sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==} + nanoid@5.1.16: + resolution: {integrity: sha512-kVrnsrJqMR8+oLJnGEmSWw9BivK5mt7H3FZatVRjrc5wGqFYuBxX1yG7+A7Gi5AefkX6t/oCkizcQgpu0cY1dQ==} engines: {node: ^18 || >=20} hasBin: true @@ -28259,7 +28259,7 @@ snapshots: nanoid@3.3.12: {} - nanoid@5.1.6: {} + nanoid@5.1.16: {} nanostores@1.0.1: {}