chore(codeapi): remediate SCA dependency findings (#3414) (#71)

Source: ClickHouse/ai@573e859e52c5e8566843556438bdc2e479f011b4

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: github-actions[bot]

api/bun.lock

@@ -16,7 +16,7 @@
     "@opentelemetry/resources": "2.8.0",
     "@opentelemetry/sdk-trace-base": "2.8.0",
     "express": "^4.22.2",
-    "nanoid": "^3.3.7",
+    "nanoid": "^5.1.16",
     "pino": "^10.3.0",
     "prom-client": "^15.1.3",
     "semver": "^7.8.0"

api/package-lock.json

@@ -41,7 +41,7 @@
     "express-rate-limit": "^7.4.1",
     "ioredis": "^5.4.1",
     "minio": "^8.0.5",
-    "nanoid": "^3.3.7",
+    "nanoid": "^5.1.16",
     "prom-client": "^15.1.3",
     "rate-limit-redis": "^4.2.0",
     "winston": "^3.14.2"
@@ -60,7 +60,6 @@
     "@types/busboy": "^1.5.4",
     "@types/express": "^4.17.21",
     "@types/ioredis-mock": "^8.2.7",
-    "@types/nanoid": "^3.0.0",
     "@types/node": "^22.5.5",
     "@typescript-eslint/eslint-plugin": "^8.0.1",
     "@typescript-eslint/parser": "^8.0.1",
@@ -73,5 +72,8 @@
     "rollup-plugin-sourcemaps": "^0.6.3",
     "ts-node": "^10.9.2",
     "typescript": "^5.5.4"
+  },
+  "overrides": {
+    "decode-uri-component": "0.5.0"
   }
 }