You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by jl...@apache.org on 2026/08/14 14:12:14 UTC
(superset) 01/01: fix(ci): update vulnerable transitive nanoid
This is an automated email from the ASF dual-hosted git repository.
sadpandajoe pushed a commit to branch codex/ci-master-nanoid-20260814
in repository https://gitbox.apache.org/repos/asf/superset.git
commit 1cc7b6cba6d93fcfe6377822fa76b9d67cc82604
Author: Joe Li <jo...@preset.io>
AuthorDate: Fri Aug 14 07:11:05 2026 -0700
fix(ci): update vulnerable transitive nanoid
---
superset-frontend/package-lock.json | 12 ++++++------
superset-frontend/package.json | 1 +
2 files changed, 7 insertions(+), 6 deletions(-)
diff --git a/superset-frontend/package-lock.json b/superset-frontend/package-lock.json
index bff4e7a9f5f..da937f3e24a 100644
--- a/superset-frontend/package-lock.json
+++ b/superset-frontend/package-lock.json
@@ -33246,9 +33246,9 @@
"license": "MIT"
},
"node_modules/postcss/node_modules/nanoid": {
- "version": "3.3.16",
- "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
- "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+ "version": "3.3.18",
+ "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+ "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
"dev": true,
"funding": [
{
@@ -34955,9 +34955,9 @@
}
},
"node_modules/react-checkbox-tree/node_modules/nanoid": {
- "version": "3.3.12",
- "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz",
- "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+ "version": "3.3.18",
+ "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+ "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
"funding": [
{
"type": "github",
diff --git a/superset-frontend/package.json b/superset-frontend/package.json
index f50a8314926..35d256ac00d 100644
--- a/superset-frontend/package.json
+++ b/superset-frontend/package.json
@@ -415,6 +415,7 @@
"minimatch@>=10": {
"brace-expansion": ">=5.0.8"
},
+ "nanoid@>=3 <4": "3.3.18",
"nwsapi": "^2.2.13",
"puppeteer": "^22.4.1",
"tar": "^7.5.16",