fix(astro): Update dependency nanoid to v5.0.9 [SECURITY] (#4744)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Jacek <[email protected]>
clerk · Dec 10, 2024 · 3a1d19a · 3a1d19a
1 parent d0efff7
commit 3a1d19a
Show file tree

Hide file tree

Showing 3 changed files with 13 additions and 7 deletions.
diff --git a/.changeset/rotten-jobs-lie.md b/.changeset/rotten-jobs-lie.md
@@ -0,0 +1,6 @@
+---
+'@clerk/astro': patch
+---
+
+Addresses: CVE-2024-55565i
+nanoid (aka Nano ID) before 5.0.9 mishandles non-integer values. 3.3.8 is also a fixed version.
diff --git a/packages/astro/package.json b/packages/astro/package.json
@@ -84,7 +84,7 @@
     "@clerk/backend": "workspace:*",
     "@clerk/shared": "workspace:*",
     "@clerk/types": "workspace:*",
-    "nanoid": "5.0.7",
+    "nanoid": "5.0.9",
     "nanostores": "0.11.3"
   },
   "devDependencies": {

diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml