Merge pull request #29609 from overleaf/renovate-npm-nanoid-vulnerability

Update dependency nanoid to v5 from ^4.0.2 [SECURITY]

GitOrigin-RevId: 9d87781d2169fb1c9003d3c42b4531bb9e1c377e

libraries/ai/package.json

@@ -22,7 +22,7 @@
     "effect": "^3.19.0",
     "lucide-react": "^0.548.0",
     "motion": "^12.23.24",
-    "nanoid": "^4.0.2",
+    "nanoid": "^5.0.0",
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
     "streamdown": "^1.4.0",

package-lock.json

@@ -128,7 +128,7 @@
         "effect": "^3.19.0",
         "lucide-react": "^0.548.0",
         "motion": "^12.23.24",
-        "nanoid": "^4.0.2",
+        "nanoid": "^5.0.0",
         "react": "^18.3.1",
         "react-dom": "^18.3.1",
         "streamdown": "^1.4.0",
@@ -23232,6 +23232,25 @@
         "preact": "^10.5.13"
       }
     },
+    "node_modules/@uppy/core/node_modules/nanoid": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
+      "integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.js"
+      },
+      "engines": {
+        "node": "^14 || ^16 || >=18"
+      }
+    },
     "node_modules/@uppy/informer": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/@uppy/informer/-/informer-3.1.0.tgz",
@@ -23270,6 +23289,25 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@uppy/provider-views/node_modules/nanoid": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
+      "integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.js"
+      },
+      "engines": {
+        "node": "^14 || ^16 || >=18"
+      }
+    },
     "node_modules/@uppy/provider-views/node_modules/p-queue": {
       "version": "7.4.1",
       "resolved": "https://registry.npmjs.org/p-queue/-/p-queue-7.4.1.tgz",
@@ -42398,9 +42436,9 @@
       "dev": true
     },
     "node_modules/nanoid": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
-      "integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
+      "version": "5.1.6",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-5.1.6.tgz",
+      "integrity": "sha512-c7+7RQ+dMB5dPwwCp4ee1/iV/q2P6aK1mTZcfr1BTuVlyW9hJYiMPybJCcnBlQtuSmTIWNeazm/zqNoZSSElBg==",
       "funding": [
         {
           "type": "github",
@@ -42412,7 +42450,7 @@
         "nanoid": "bin/nanoid.js"
       },
       "engines": {
-        "node": "^14 || ^16 || >=18"
+        "node": "^18 || >=20"
       }
     },
     "node_modules/nanomatch": {
@@ -59549,6 +59587,25 @@
         "url": "https://github.com/sponsors/isaacs"
       }
     },
+    "services/web/node_modules/nanoid": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-4.0.2.tgz",
+      "integrity": "sha512-7ZtY5KTCNheRGfEFxnedV5zFiORN1+Y1N6zvPTnHQd8ENUvfaDBeuJDZb2bN/oXwXxu3qkTXDzy57W5vAmDTBw==",
+      "dev": true,
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/ai"
+        }
+      ],
+      "license": "MIT",
+      "bin": {
+        "nanoid": "bin/nanoid.js"
+      },
+      "engines": {
+        "node": "^14 || ^16 || >=18"
+      }
+    },
     "services/web/node_modules/nise": {
       "version": "1.5.3",
       "resolved": "https://registry.npmjs.org/nise/-/nise-1.5.3.tgz",