diff --git a/package-lock.json b/package-lock.json
index 119bf58..9349960 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -6441,9 +6441,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "funding": [
         {
           "type": "github",
@@ -7855,9 +7855,9 @@
       }
     },
     "node_modules/nanoid": {
-      "version": "3.3.16",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.16.tgz",
-      "integrity": "sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",
@@ -8552,9 +8552,9 @@
       }
     },
     "node_modules/read-yaml-file/node_modules/js-yaml": {
-      "version": "3.15.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
-      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
+      "version": "3.15.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.1.tgz",
+      "integrity": "sha512-S99WuO3HlhO3XN41EtYUNl9zzXjoJx7QvmipxsJVxtCBT0YHEFy+iOJhjSvrmV12nYhWpZaM8lPHkJm0yUMbag==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index adb5457..c87695e 100644
--- a/package.json
+++ b/package.json
@@ -49,12 +49,13 @@
       "vite": "7.3.6"
     },
     "postcss": "8.5.23",
+    "nanoid": "3.3.18",
     "tsup": {
       "esbuild": "0.28.1"
     },
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "read-yaml-file": {
-      "js-yaml": "3.15.0"
+      "js-yaml": "3.15.1"
     },
     "sharp": "0.35.0",
     "svgo": "4.0.2",
diff --git a/test/integration/dependency-security.test.ts b/test/integration/dependency-security.test.ts
index 2898e9d..40af853 100644
--- a/test/integration/dependency-security.test.ts
+++ b/test/integration/dependency-security.test.ts
@@ -119,16 +119,20 @@ function isVulnerableVersion(name: string, version: string): boolean {
 
   if (name === "js-yaml") {
     if (major === 3) {
-      return compareSemver(version, "3.15.0") < 0;
+      return compareSemver(version, "3.15.1") < 0;
     }
 
     if (major === 4) {
-      return compareSemver(version, "4.3.0") < 0;
+      return compareSemver(version, "4.3.1") < 0;
     }
 
     return false;
   }
 
+  if (name === "nanoid") {
+    return compareSemver(version, "3.3.18") < 0;
+  }
+
   if (name === "sharp") {
     return compareSemver(version, "0.35.0") < 0;
   }
@@ -167,6 +171,7 @@ describe("dependency security", () => {
       "defu",
       "esbuild",
       "js-yaml",
+      "nanoid",
       "picomatch",
       "postcss",
       "sharp",