fix(deps): resolve August Dependabot alerts

pyproject.toml

@@ -371,7 +371,7 @@ override-dependencies = [
   "pynacl>=1.6,<1.7",
 ]
 exclude-newer = "14 days"
-exclude-newer-package = { vercel = false, nemo-relay = false, huggingface_hub = false, cryptography = false, aiohttp = false }
+exclude-newer-package = { vercel = false, nemo-relay = false, huggingface_hub = false, cryptography = false, aiohttp = false, h2 = false }
 
 [tool.setuptools]
 # Top-level single-file modules (not packages). Without this, uv2nix's

website/.npmrc

@@ -15,3 +15,5 @@ min-release-age-exclude[]=brace-expansion
 min-release-age-exclude[]=postcss
 min-release-age-exclude[]=undici
 min-release-age-exclude[]=@opentelemetry/*
+min-release-age-exclude[]=nanoid
+min-release-age-exclude[]=js-yaml

website/package.json

@@ -36,7 +36,7 @@
     "typescript": "6.0.3"
   },
   "overrides": {
-    "js-yaml": "4.3.0",
+    "js-yaml": "4.3.1",
     "brace-expansion": "1.1.18",
     "fast-uri": "3.1.5",
     "serialize-javascript": "7.0.5",
@@ -70,7 +70,8 @@
     "@docusaurus/utils-common": "3.10.2",
     "@docusaurus/utils-validation": "3.10.2",
     "postcss": "8.5.23",
-    "undici": "7.29.0"
+    "undici": "7.29.0",
+    "nanoid": "3.3.17"
   },
   "browserslist": {
     "production": [