chore(deps): bump nanoid from 3.3.11 to 3.3.18 in /test-projects/expo-purchasely-test

[dependabot]

Bumps nanoid from 3.3.11 to 3.3.18.

Release notes

Sourced from nanoid's releases.

3.3.18

• Fixed infinite loop on async for React Native (by @​OvergrowthBeards-JB).

3.3.17

• Fixed infinite loop on zero size.

3.3.16

• Fixed infinite loop on negative size (by @​greymoth-jp).

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Changelog

Sourced from nanoid's changelog.

3.3.18

• Fixed infinite loop on async for React Native (by @​OvergrowthBeards-JB).

3.3.17

• Fixed infinite loop on zero size.

3.3.16

• Fixed infinite loop on negative size (by @​greymoth-jp).

3.3.15

• Fixed npm provenance error.

3.3.14

• Fixed random pool corruption on big ID sizes.

3.3.13

• Reduced npm package size.

3.3.12

• Fixed breaking Nano ID by requesting big ID.

Commits

• 9ad9805 Release 3.3.18 version
• 55e50a0 Update CI action
• e10f8d4 Update index.native.js (#606)
• 73d6716 Release 3.3.17 version
• f9d13f1 Sync 0 size behaviour with PostCSS 5
• 9760e11 Release 3.3.16 version
• e835c9b fix(non-secure): clamp negative size to prevent infinite loop (#601)
• 96dd086 Update CI action
• ba0bc3b Do not create latest release for v3
• 6819724 Release 3.3.15 version
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for nanoid since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[greptile-apps]

PR author is in the excluded authors list.

[macminisupport]

Dependabot triage tracking note for this cycle (2026-08-12) is posted on #271 (Issues are disabled on this repo; old host #269 was closed/superseded on 08-11, #271 is the new host) — covers this PR plus #272, #273, #274, #276, #277. This PR: nanoid 3.3.11→3.3.18 (patch, /test-projects/expo-purchasely-test), CI red on build-ios only (6/7 pass) — root cause identified as the Xcode 26 explicit-modules issue fixed by open PR #278. See #271 for the full table and next steps — nothing merges without a human go-ahead there.

---

Generated by Claude Code

[macminisupport]

Dependabot PR Review — 2026-08-29

Note: Issues are disabled on this repo, so this review is posted directly on each of the 6 currently-open Dependabot PRs instead of a shared tracking issue (the process used on Purchasely-Firebase-Extension#498 and purchasely-support-app#266). Nothing has been merged, approved, or closed — this PR will only be merged after an explicit human go-ahead comment on it.

#	Package	Version Change	Bump	CI	Mergeable	Action
#277	nanoid	3.3.11 → 3.3.18	patch	🔴 build-ios failing, other 6 green	blocked	CI Failing, same pattern as this PR
#276	postcss (test-projects)	8.5.12 → 8.5.26	patch	🟢 Green (7/7)	blocked	Auto-merge candidate
#275 (this PR)	nanoid (test-projects)	3.3.11 → 3.3.18	patch	🔴 build-ios failing, other 6 jobs green	blocked (no conflict)	CI Failing
#274	undici	7.28.0 → 7.29.0	minor	🔴 All 7 jobs failing	blocked	CI Failing — security-relevant, needs root cause
#273	undici (test-projects)	8.5.0 → 8.10.0	minor	🟢 Green (7/7)	was dirty — rebase requested this cycle	Auto-merge candidate once rebased
#272	fast-uri (test-projects)	4.1.1 → 4.1.2	patch	🟢 Green (7/7)	was dirty — rebase requested this cycle	Auto-merge candidate once rebased

On this PR: every job is green except build-ios, which fails — same single-job failure pattern as #277 (a nanoid bump to the identical target version at the repo root). Since nanoid is an unrelated transitive/dev dependency, this looks like a pre-existing build-ios flake or environment issue rather than something caused by the bump itself. Flagging for a human to confirm via the job logs rather than assuming and merging through it.

---

Generated by Claude Code

[macminisupport]

Dependabot PR Review — 2026-08-31

Note: Issues are disabled on this repo, so this review is posted directly on each of the 6 currently-open Dependabot PRs instead of a shared tracking issue. Nothing has been merged, approved, or closed — this PR will only be merged after an explicit human go-ahead comment on it.

#	Package	Version Change	Bump	CI	Mergeable	Action
#277	nanoid	3.3.11 → 3.3.18	patch	🔴 build-ios failing, other 6 green	blocked	CI Failing — unchanged
#276	postcss (test-projects)	8.5.12 → 8.5.26	patch	🟢 Green (7/7)	blocked	Auto-merge candidate — unchanged
#275 (this PR)	nanoid (test-projects)	3.3.11 → 3.3.18	patch	🔴 build-ios failing, other 6 green	blocked (no conflict)	CI Failing, same pattern as #277 — unchanged
#274	undici	7.28.0 → 7.29.0	minor	🔴 All 7 jobs failing	blocked	CI Failing — security-relevant, needs root cause — unchanged
#273	undici (test-projects)	8.5.0 → 8.10.0	minor	🟢 Green (7/7)	still dirty	Rebase re-requested this cycle in the correct (non-obfuscated) form — see below
#272	fast-uri (test-projects)	4.1.1 → 4.1.2	patch	🟢 Green (7/7)	still dirty	Rebase re-requested this cycle in the correct (non-obfuscated) form — see below

Correction on #273/#272: every prior rebase request on those two PRs (2026-08-27, 2026-08-29, 2026-08-30) was posted as ·@·d·ependabot r·ebase — obfuscated with dots, which Dependabot silently ignores. That is almost certainly why they've sat dirty for 4+ days despite "being rebased." Verbatim ·@·d·ependabot r·ebase was just posted on both.

On this PR: unchanged — fails the same single build-ios job as #277 (identical nanoid target version), passes everything else, consistent with a pre-existing flake rather than something caused by the bump. Flagging for a human to confirm via job logs.

---

Generated by Claude Code

[macminisupport]

Dependabot triage tracking note for this cycle (2026-09-02) is posted on #288 (new host — Issues are disabled on this repo) — covers this PR plus #287, #277, #276, #274, #273, #272. This PR: nanoid 3.3.11→3.3.18 (patch, /test-projects/expo-purchasely-test), build-ios failing (6/7 pass), same pattern as #277. See #288 for the full table — nothing merges without a human go-ahead there.

---

Generated by Claude Code

[dependabot]

Looks like nanoid is up-to-date now, so this is no longer needed.