You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@superset.apache.org by jl...@apache.org on 2026/08/14 14:12:13 UTC

(superset) branch codex/ci-master-nanoid-20260814 created (now 1cc7b6cba6d)

This is an automated email from the ASF dual-hosted git repository.

sadpandajoe pushed a change to branch codex/ci-master-nanoid-20260814
in repository https://gitbox.apache.org/repos/asf/superset.git


      at 1cc7b6cba6d fix(ci): update vulnerable transitive nanoid

This branch includes the following new commits:

     new 1cc7b6cba6d fix(ci): update vulnerable transitive nanoid

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



(superset) 01/01: fix(ci): update vulnerable transitive nanoid

Posted by jl...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

sadpandajoe pushed a commit to branch codex/ci-master-nanoid-20260814
in repository https://gitbox.apache.org/repos/asf/superset.git

commit 1cc7b6cba6d93fcfe6377822fa76b9d67cc82604
Author: Joe Li <jo...@preset.io>
AuthorDate: Fri Aug 14 07:11:05 2026 -0700

    fix(ci): update vulnerable transitive nanoid
---
 superset-frontend/package-lock.json | 12 ++++++------
 superset-frontend/package.json      |  1 +
 2 files changed, 7 insertions(+), 6 deletions(-)

diff --git a/superset-frontend/package-lock.json b/superset-frontend/package-lock.json
index bff4e7a9f5f..da937f3e24a 100644
--- a/superset-frontend/package-lock.json
+++ b/superset-frontend/package-lock.json
@@ -33246,9 +33246,9 @@
       "license": "MIT"
     },
     "node_modules/postcss/node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "dev": true,
       "funding": [
         {
@@ -34955,9 +34955,9 @@
       }
     },
     "node_modules/react-checkbox-tree/node_modules/nanoid": {
-      "version": "3.3.12",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.12.tgz",
-      "integrity": "sha512-ZB9RH/39qpq5Vu6Y+NmUaFhQR6pp+M2Xt76XBnEwDaGcVAqhlvxrl3B2bKS5D3NH3QR76v3aSrKaF/Kiy7lEtQ==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",
diff --git a/superset-frontend/package.json b/superset-frontend/package.json
index f50a8314926..35d256ac00d 100644
--- a/superset-frontend/package.json
+++ b/superset-frontend/package.json
@@ -415,6 +415,7 @@
     "minimatch@>=10": {
       "brace-expansion": ">=5.0.8"
     },
+    "nanoid@>=3 <4": "3.3.18",
     "nwsapi": "^2.2.13",
     "puppeteer": "^22.4.1",
     "tar": "^7.5.16",