[dependabot]

Bumps nanoid from 2.0.0 to 2.0.1.

Changelog

Sourced from nanoid's changelog.

[2.0.1] - 2026-10-17

Fixed

• Fixed infinite loop in Nanoid.generate with a custom alphabet when size is 0 or a non-integer (ported fix from upstream NanoID's handling of these cases).
• Kept the implementation on Ruby 2.0: no Integer#negative? (Ruby 2.3), no required keyword arguments (Ruby 2.1), and the alphabet mask is computed with integer shifts.
• Fixed Math::DomainError/FloatDomainError when using a custom alphabet with 0 or 1 characters.
• Raise a clear ArgumentError for a negative size, a non-numeric size, or an empty alphabet, instead of a cryptic internal error.

Changed

• Development dependencies are limited to the last releases that still run on Ruby 2.0: benchmark-ips 2.7.2, minitest 5.11.3, and rake 12.3.3. bundler, reek, and rubocop are no longer dependencies. Ruby 3.4 and newer also install mutex_m and ostruct, which those old gems still load.
• complex_generate now requests step random bytes per loop iteration instead of size, matching upstream and avoiding wasted loop iterations caused by indexing past a too-small random buffer.
• Fixed an O(n^2) slowdown in the collision test suite (generated.keys.size was evaluated eagerly on every iteration instead of the O(1) generated.size).

Commits

• 8274c28 Release 2.0.1
• 311fd48 Test Ruby 2.0, 2.7, and 3.4 only.
• aae3b46 Load mutex_m and ostruct on Ruby 3.4 and newer.
• c2e40e9 Run the test suite on GitHub Actions.
• 940b683 Keep the generator installable on Ruby 2.0.
• 1336bfe Stop custom alphabets from hanging on a bad size.
• 1df9213 Merge pull request #50 from radeno/dependabot/bundler/rake-13.0.3
• acf68de Merge pull request #45 from radeno/dependabot/bundler/benchmark-ips-2.8.4
• 6f246c1 Merge pull request #35 from radeno/dependabot/bundler/minitest-5.14.2
• baea2e1 Merge pull request #65 from citizen428/patch-1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric	Results
Complexity	0

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric	Results
Coverage variation	✅ +0.00% coverage variation (-1.00%)
Diff coverage	✅ ∅ diff coverage

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (e1e25a4)	7947	6597	83.01%
Head commit (dfc0803)	7947 (+0)	6597 (+0)	83.01% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#7391)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}