chore(deps): bump nanoid from 3.3.11 to 3.3.16

[dependabot]

Bumps nanoid from 3.3.11 to 3.3.16.

Release notes

Sourced from nanoid's releases.

3.3.16

• Fixed infinite loop on negative size (by @​greymoth-jp).

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Changelog

Sourced from nanoid's changelog.

3.3.16

• Fixed infinite loop on negative size (by @​greymoth-jp).

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Commits

• 9760e11 Release 3.3.16 version
• e835c9b fix(non-secure): clamp negative size to prevent infinite loop (#601)
• 96dd086 Update CI action
• ba0bc3b Do not create latest release for v3
• 6819724 Release 3.3.15 version
• fb0b137 Fix tag for v3
• e084bc9 Back-port new release system and fix pre-commit hook
• 7e32945 Release 3.3.14 version
• 6bd27b8 Another way to deal with pool damage
• 41ad2ac Reduce ID size
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.

Note

Bump nanoid from 3.3.11 to 3.3.16

Updates the nanoid dependency to 3.3.16 in the lockfile.

^{Macroscope summarized 69edf9b.}

[codeant-ai]

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 964e8f3a8e

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

[chatgpt-codex-connector]

Wait for the release-age gate before locking new packages

This lockfile resolves newly published packages (for example nanoid@3.3.18, and also oxlint@1.77.0 later in the file) while pnpm-workspace.yaml sets minimumReleaseAge: 10080 with no exclusions. As of August 8, 2026 these npm versions are still inside the configured 7-day cooldown, so committing them bypasses the repo’s supply-chain delay for CI installs that consume the checked-in lockfile; please regenerate after the versions age out or pin the latest allowed versions.

Useful? React with 👍 / 👎.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud