Repository navigation
fix(deps): update dependency nanoid to v6 - #10602
metamask-ci[bot] wants to merge 2 commits into
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
777d1a5 to
add4767
Compare
e738a0f to
d2ccd44
Compare
c3b3f6e to
b5979bf
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
84206e8 to
d5261ab
Compare
1613ac9 to
e476014
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit e476014. Configure here.
| "@types/lodash": "^4.17.26", | ||
| "lodash-es": "^4.18.1", | ||
| "nanoid": "^3.3.19" | ||
| "nanoid": "^6.0.2" |
There was a problem hiding this comment.
ESM-only nanoid breaks Jest tests
High Severity
Bumping nanoid from v3 to v6 drops CommonJS. Jest still compiles these packages to CommonJS and leaves node_modules untransformed, so imports of nanoid fail on Node 22 with ERR_REQUIRE_ESM. CI runs that matrix, and other Jest packages that load these sources through the workspace mapper hit the same failure.
Additional Locations (2)
Reviewed by Cursor Bugbot for commit e476014. Configure here.
This PR contains the following updates:
^3.3.19→^6.0.2Release Notes
ai/nanoid (nanoid)
v6.0.2Compare Source
customRandom(by @lost-signals).customRandomon changes size (by @00200200).v6.0.1Compare Source
v6.0.0Compare Source
nanoid()andcustomAlphabet()4 times faster (by @orhanayd).v5.1.16Compare Source
v5.1.15Compare Source
v5.1.14Compare Source
v5.1.13Compare Source
v5.1.12Compare Source
v5.1.11Compare Source
v5.1.10Compare Source
v5.1.9Compare Source
v5.1.8Compare Source
cusatomAlphabet75% faster (by @saripovdenis).v5.1.7Compare Source
--versionto CLI (by @mahmoodhamdi).nanoid.jsfor CDN (by @mahmoodhamdi).customRandomtypes (by @oguimbal).v5.1.6Compare Source
customAlphabet.v5.1.5Compare Source
v5.1.4Compare Source
v5.1.3Compare Source
v5.1.2Compare Source
v5.1.1Compare Source
v5.1.0Compare Source
v5.0.9Compare Source
v5.0.8Compare Source
customAlphabetsize (by @kirillgroshkov).v5.0.7Compare Source
v5.0.6Compare Source
v5.0.5Compare Source
v5.0.4Compare Source
v5.0.3Compare Source
v5.0.2Compare Source
webcryptoimport (by Divyansh Singh).v5.0.1Compare Source
v5.0.0Compare Source
v4.0.2Compare Source
v4.0.1Compare Source
v4.0.0Compare Source
v3.3.20Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR has been generated by Mend Renovate CLI.
Note
Medium Risk
Major nanoid upgrade affects ID generation in approval, permission, and JSON-RPC provider paths; API usage is unchanged and packages already target Node 22+, aligning with nanoid v6’s engine requirements.
Overview
Upgrades
nanoidfrom^3.3.19to^6.0.2across four workspace packages and refreshes the lockfile.@metamask/approval-controller,@metamask/eth-json-rpc-provider, and@metamask/permission-controllerlist it as a runtime dependency;@metamask/permission-log-controllerkeeps it as a devDependency for tests.Changelog Unreleased notes are updated so the documented range is
^3.3.8→^6.0.2(including prior bump PRs). There are no application source changes—onlypackage.json, changelogs, andyarn.lock.Reviewed by Cursor Bugbot for commit 512dda0. Bugbot is set up for automated code reviews on this repo. Configure here.