diff --git a/crates/bashkit-js/package.json b/crates/bashkit-js/package.json
index 199fea937..5201af369 100644
--- a/crates/bashkit-js/package.json
+++ b/crates/bashkit-js/package.json
@@ -118,7 +118,7 @@
   },
   "pnpm": {
     "overrides": {
-      "brace-expansion": "^2.1.2",
+      "brace-expansion": "^2.1.4",
       "esbuild": ">=0.28.1",
       "js-yaml": "^4.3.1",
       "tar": "^7.5.18"
diff --git a/crates/bashkit-js/pnpm-lock.yaml b/crates/bashkit-js/pnpm-lock.yaml
index 34b47c03b..f74443be4 100644
--- a/crates/bashkit-js/pnpm-lock.yaml
+++ b/crates/bashkit-js/pnpm-lock.yaml
@@ -5,7 +5,7 @@ settings:
   excludeLinksFromLockfile: false
 
 overrides:
-  brace-expansion: ^2.1.2
+  brace-expansion: ^2.1.4
   esbuild: '>=0.28.1'
   js-yaml: ^4.3.1
   tar: ^7.5.18
@@ -1068,8 +1068,8 @@ packages:
   blueimp-md5@2.19.0:
     resolution: {integrity: sha512-DRQrD6gJyy8FbiE4s+bDoXS9hiW3Vbx5uCdwvcCf3zLHL+Iv7LtGHLpr+GZV8rHG8tK766FGYBwRbu8pELTt+w==}
 
-  brace-expansion@2.1.2:
-    resolution: {integrity: sha512-w5JZcKgdhDOgOwm8H+KgbosopHMuGcl6qbulwjtz3SM7I7P3yW1eAjzMPLrIE+NQ9vjgANKHWeMHnrT0OXW1oA==}
+  brace-expansion@2.1.4:
+    resolution: {integrity: sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==}
 
   braces@3.0.3:
     resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
@@ -2547,7 +2547,7 @@ snapshots:
 
   blueimp-md5@2.19.0: {}
 
-  brace-expansion@2.1.2:
+  brace-expansion@2.1.4:
     dependencies:
       balanced-match: 1.0.2
 
@@ -2862,7 +2862,7 @@ snapshots:
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 2.1.2
+      brace-expansion: 2.1.4
 
   minipass@7.1.3: {}
 
diff --git a/examples/browser/package.json b/examples/browser/package.json
index 753243dc1..f9ebac394 100644
--- a/examples/browser/package.json
+++ b/examples/browser/package.json
@@ -14,5 +14,10 @@
   },
   "devDependencies": {
     "vite": "6.4.3"
+  },
+  "pnpm": {
+    "overrides": {
+      "nanoid": "^3.3.17"
+    }
   }
 }
diff --git a/examples/browser/pnpm-lock.yaml b/examples/browser/pnpm-lock.yaml
index 409da2786..590da7fb6 100644
--- a/examples/browser/pnpm-lock.yaml
+++ b/examples/browser/pnpm-lock.yaml
@@ -4,6 +4,9 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
+overrides:
+  nanoid: ^3.3.17
+
 importers:
 
   .:
@@ -337,8 +340,8 @@ packages:
     engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
     os: [darwin]
 
-  nanoid@3.3.16:
-    resolution: {integrity: sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==}
+  nanoid@3.3.18:
+    resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
@@ -601,7 +604,7 @@ snapshots:
   fsevents@2.3.3:
     optional: true
 
-  nanoid@3.3.16: {}
+  nanoid@3.3.18: {}
 
   picocolors@1.1.1: {}
 
@@ -609,7 +612,7 @@ snapshots:
 
   postcss@8.5.25:
     dependencies:
-      nanoid: 3.3.16
+      nanoid: 3.3.18
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
diff --git a/site/package.json b/site/package.json
index 8649d67df..8972fb355 100644
--- a/site/package.json
+++ b/site/package.json
@@ -38,6 +38,7 @@
       "esbuild": ">=0.28.1",
       "fast-uri": "^3.1.5",
       "js-yaml": "^4.3.1",
+      "nanoid": "^3.3.17",
       "postcss": ">=8.5.18",
       "sharp": ">=0.35.0 <0.36.0",
       "svgo": "^4.0.2",
diff --git a/site/pnpm-lock.yaml b/site/pnpm-lock.yaml
index bce7a7b97..646a6fc50 100644
--- a/site/pnpm-lock.yaml
+++ b/site/pnpm-lock.yaml
@@ -8,6 +8,7 @@ overrides:
   esbuild: '>=0.28.1'
   fast-uri: ^3.1.5
   js-yaml: ^4.3.1
+  nanoid: ^3.3.17
   postcss: '>=8.5.18'
   sharp: '>=0.35.0 <0.36.0'
   svgo: ^4.0.2
@@ -1581,8 +1582,8 @@ packages:
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
-  nanoid@3.3.16:
-    resolution: {integrity: sha512-bzlKTyNJ7+LdGIIwy8ijFpIqEQIvafahV7eYykJ8Cvh42EdJeODoJ6gUJXpQJvej1BddH8OqTXZNE/KfbWAu8Q==}
+  nanoid@3.3.18:
+    resolution: {integrity: sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==}
     engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
     hasBin: true
 
@@ -3930,7 +3931,7 @@ snapshots:
 
   muggle-string@0.4.1: {}
 
-  nanoid@3.3.16: {}
+  nanoid@3.3.18: {}
 
   neotraverse@1.0.1: {}
 
@@ -4008,7 +4009,7 @@ snapshots:
 
   postcss@8.5.23:
     dependencies:
-      nanoid: 3.3.16
+      nanoid: 3.3.18
       picocolors: 1.1.1
       source-map-js: 1.2.1