Skip to content

chore(deps): bump nanoid and uppy - #21

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-8871d010de
Open

chore(deps): bump nanoid and uppy#21
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-8871d010de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 9, 2026

Copy link
Copy Markdown

Bumps nanoid to 3.3.18 and updates ancestor dependency uppy. These dependencies need to be updated together.

Updates nanoid from 3.3.16 to 3.3.18

Release notes

Sourced from nanoid's releases.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.
Changelog

Sourced from nanoid's changelog.

3.3.18

3.3.17

  • Fixed infinite loop on zero size.
Commits

Updates uppy from 3.27.4 to 6.0.1

Release notes

Sourced from uppy's releases.

uppy@6.0.1

Patch Changes

  • Updated dependencies [24e96ee]
  • Updated dependencies [a4823a2]
  • Updated dependencies [f31b3c5]

uppy@6.0.0

Major Changes

  • 12de077: Remove @​uppy/instagram references from all the packages

Patch Changes

  • c3c7cef: Bump shared runtime dependencies (preact, nanoid, lodash, classnames, shallow-equal, pretty-bytes, p-queue, tus-js-client, @​transloadit/types @​transloadit/prettier-bytes v1, is-mobile, exifr, compressorjs, rxjs, tslib). Also includes type-only fixes in @uppy/companion's jwt.ts and request.ts to track @types/jsonwebtoken v9 and @types/node.
  • Updated dependencies [dc32b3d]
  • Updated dependencies [675697d]
  • Updated dependencies [1230ab6]
  • Updated dependencies [7e8e04f]
  • Updated dependencies [c3c7cef]
  • Updated dependencies [ddffd2c]
  • Updated dependencies [32b9f06]
  • Updated dependencies [2608032]
  • Updated dependencies [b9253f7]
  • Updated dependencies [2608031]
  • Updated dependencies [12de077]
  • Updated dependencies [260804f]
  • Updated dependencies [d9d44ce]
  • Updated dependencies [7ac2623]
  • Updated dependencies [57f8daf]
  • Updated dependencies [942db47]
  • Updated dependencies [ad4050b]
  • Updated dependencies [4a0e6c9]
  • Updated dependencies [2608043]
  • Updated dependencies [ca916f6]
  • Updated dependencies [2608044]
  • Updated dependencies [3899a6e]
  • Updated dependencies [84ad853]
  • Updated dependencies [1a1aef3]
    • @​uppy/aws-s3@​6.0.0
    • @​uppy/url@​6.0.0
    • @​uppy/core@​6.0.0
    • @​uppy/locales@​5.2.0
    • @​uppy/google-photos-picker@​2.0.0
    • @​uppy/google-drive-picker@​2.0.0
    • @​uppy/thumbnail-generator@​6.0.0
    • @​uppy/golden-retriever@​6.0.0
    • @​uppy/image-generator@​2.0.0

... (truncated)

Changelog

Sourced from uppy's changelog.

Changelog

This is our changelog which contains planned todos and past dones.

Items can be optionally tagged by the GitHub issue's owner, if a discussion happened / is needed.

Please add your entries in this format:

  • - [ ] (<plugin name>|website|core|meta|build|test): <Present tense verb> <subject> \(<list of associated owners/gh-issues>\).

In the current stage we aim to release a new version at least every month.

4.18.0

Released: 2025-06-30

Package Version Package Version
@​uppy/components 0.2.0 @​uppy/remote-sources 2.3.4
@​uppy/core 4.4.7 @​uppy/screen-capture 4.3.1
@​uppy/google-drive-picker 0.3.6 @​uppy/svelte 4.5.0
@​uppy/google-photos-picker 0.3.6 @​uppy/vue 2.3.0
@​uppy/locales 4.6.0 @​uppy/webcam 4.2.1
@​uppy/provider-views 4.4.5 uppy 4.18.0
@​uppy/react 4.4.0
  • meta: Remove remark reference from CI (Murderlon)
  • @​uppy/components,@​uppy/screen-capture: useScreenCapture fixes (Prakash / #5793)
  • examples: Add useRemoteSource (Merlijn Vos / #5778)
  • @​uppy/components: Use webcam fixes2 (Mikael Finstad / #5791)
  • meta: Remove remark (Merlijn Vos / #5790)
  • meta: Delete old, unused files (Merlijn Vos / #5788)
  • meta: Sort package.json (Murderlon)
  • examples: Headless Hooks: Add useScreenCapture (Prakash / #5784)
  • @​uppy/locales: Update pt_BR localization (Gabriel Pereira / #5780)
  • e2e: Skip for now then (Murderlon)
  • e2e: fixup! Fix CI for now (Murderlon)
  • e2e: Fix CI for now (Murderlon)
  • examples: Add useWebcam (Merlijn Vos / #5741)
  • @​uppy/react,@​uppy/svelte,@​uppy/vue: Add useDropzone & useFileInput (Merlijn Vos / #5735)
  • meta: build(deps): bump base-x from 3.0.9 to 3.0.11 (dependabot[bot] / #5772)
  • @​uppy/provider-views: improve metadata handling in Google Photos Picker (ben rosenbaum / #5769)

4.17.0

Released: 2025-06-02

... (truncated)

Commits
  • 2be1e33 [ci] release (#6531)
  • c625141 [ci] release
  • ad10c4d @​uppy/angular: remove stale files and cli scaffolding (#6528)
  • bcae547 Remove .npmignore files (#6523)
  • f4f1e5b build(deps-dev): bump @​vitejs/plugin-react from 6.0.2 to 6.1.0 (#6519)
  • 98539ec Merge branch 'main' into angular-cleanup
  • d33c38a remove exclude pattern from tsconfig
  • 46c0701 Remove Angular spec files that have no test runner
  • cc2f40b remove unused demo components
  • 3916bf1 Remove stray package/@​uppy/angular/package.tgz
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for uppy since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [nanoid](https://github.com/ai/nanoid) to 3.3.18 and updates ancestor dependency [uppy](https://github.com/transloadit/uppy). These dependencies need to be updated together.


Updates `nanoid` from 3.3.16 to 3.3.18
- [Release notes](https://github.com/ai/nanoid/releases)
- [Changelog](https://github.com/ai/nanoid/blob/3.3.18/CHANGELOG.md)
- [Commits](ai/nanoid@3.3.16...3.3.18)

Updates `uppy` from 3.27.4 to 6.0.1
- [Release notes](https://github.com/transloadit/uppy/releases)
- [Changelog](https://github.com/transloadit/uppy/blob/main/CHANGELOG.md)
- [Commits](https://github.com/transloadit/uppy/compare/uppy@3.27.4...uppy@6.0.1)

---
updated-dependencies:
- dependency-name: nanoid
  dependency-version: 3.3.18
  dependency-type: indirect
- dependency-name: uppy
  dependency-version: 6.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants