Merge pull request #35 from etienne-martin/fix-vulnerablity

Fix nanoid vulnerablity

package.json

@@ -1,6 +1,6 @@
 {
   "name": "express-aggressive-cache",
-  "version": "2.1.5",
+  "version": "2.1.6",
   "description": "An aggressive yet obedient cache middleware for express",
   "homepage": "https://github.com/etienne-martin/express-aggressive-cache",
   "keywords": [
@@ -44,7 +44,7 @@
   "dependencies": {
     "cache-control-parser": "^1.0.6",
     "lru-cache": "5.1.1",
-    "nanoid": "2.1.11",
+    "nanoid": "3.2.0",
     "normalize-url": "5.3.1",
     "redlock": "4.1.0"
   },
@@ -58,7 +58,7 @@
     "@types/ioredis": "4.14.7",
     "@types/jest": "26.0.9",
     "@types/lru-cache": "5.1.0",
-    "@types/nanoid": "2.1.0",
+    "@types/nanoid": "3.0.0",
     "@types/redlock": "4.0.1",
     "@types/supertest": "^2.0.8",
     "@typescript-eslint/eslint-plugin": "2.11.0",

src/middleware.ts

@@ -1,4 +1,4 @@
-import nanoid from "nanoid";
+import { nanoid } from "nanoid";
 import { Request, NextFunction } from "express";
 import {
   CachedResponse,

src/tests/shared.routes.ts

@@ -1,6 +1,6 @@
 import express, { Router } from "express";
 import path from "path";
-import nanoid from "nanoid";
+import { nanoid } from "nanoid";
 
 export const sharedRoutes = Router();
 

yarn.lock

@@ -818,12 +818,12 @@
   resolved "https://registry.yarnpkg.com/@types/mime/-/mime-2.0.1.tgz#dc488842312a7f075149312905b5e3c0b054c79d"
   integrity sha512-FwI9gX75FgVBJ7ywgnq/P7tw+/o1GUbtP0KzbtusLigAOgIgNISRK0ZPl4qertvXSIE8YbsVJueQ90cDt9YYyw==
 
-"@types/nanoid@2.1.0":
-  version "2.1.0"
-  resolved "https://registry.yarnpkg.com/@types/nanoid/-/nanoid-2.1.0.tgz#41edfda78986e9127d0dc14de982de766f994020"
-  integrity sha512-xdkn/oRTA0GSNPLIKZgHWqDTWZsVrieKomxJBOQUK9YDD+zfSgmwD5t4WJYra5S7XyhTw7tfvwznW+pFexaepQ==
+"@types/nanoid@3.0.0":
+  version "3.0.0"
+  resolved "https://registry.yarnpkg.com/@types/nanoid/-/nanoid-3.0.0.tgz#c757b20f343f3a1dd76e80a9a431b6290fc20f35"
+  integrity sha512-UXitWSmXCwhDmAKe7D3hNQtQaHeHt5L8LO1CB8GF8jlYVzOv5cBWDNqiJ+oPEWrWei3i3dkZtHY/bUtd0R/uOQ==
   dependencies:
-    "@types/node" "*"
+    nanoid "*"
 
 "@types/node@*":
   version "12.12.6"
@@ -5181,10 +5181,10 @@ nan@^2.12.1:
   resolved "https://registry.yarnpkg.com/nan/-/nan-2.14.0.tgz#7818f722027b2459a86f0295d434d1fc2336c52c"
   integrity sha512-INOFj37C7k3AfaNTtX8RhsTw7qRy7eLET14cROi9+5HAVbbHuIWUHEauBv5qT4Av2tWasiTY1Jw6puUNqRJXQg==
 
-nanoid@2.1.11:
-  version "2.1.11"
-  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-2.1.11.tgz#ec24b8a758d591561531b4176a01e3ab4f0f0280"
-  integrity sha512-s/snB+WGm6uwi0WjsZdaVcuf3KJXlfGl2LcxgwkEwJF0D/BWzVWAZW/XY4bFaiR7s0Jk3FPvlnepg1H1b1UwlA==
+nanoid@*, nanoid@3.2.0:
+  version "3.2.0"
+  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.2.0.tgz#62667522da6673971cca916a6d3eff3f415ff80c"
+  integrity sha512-fmsZYa9lpn69Ad5eDn7FMcnnSR+8R34W9qJEijxYhTbfOWzr22n1QxCMzXLK+ODyW2973V3Fux959iQoUxzUIA==
 
 nanomatch@^1.2.9:
   version "1.2.13"