diff --git a/package-lock.json b/package-lock.json index 5a08a08..83e30fc 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1207,9 +1207,9 @@ "license": "MIT" }, "node_modules/nanoid": { - "version": "3.3.16", - "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz", - "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==", + "version": "3.3.18", + "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz", + "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==", "dev": true, "funding": [ { diff --git a/tests/test_s102_frontend_dependency_hardening.py b/tests/test_s102_frontend_dependency_hardening.py index d249f11..9fe8b2f 100644 --- a/tests/test_s102_frontend_dependency_hardening.py +++ b/tests/test_s102_frontend_dependency_hardening.py @@ -46,6 +46,10 @@ class TestFrontendDependencyHardening(unittest.TestCase): _version_tuple(packages["node_modules/postcss"]["version"]), (8, 5, 18), ) + self.assertGreaterEqual( + _version_tuple(packages["node_modules/nanoid"]["version"]), + (3, 3, 17), + ) def test_root_manifest_does_not_claim_transitive_packages(self): root_dependencies = {