# heroui-inc/heroui · RepoSense Release & Migration Intelligence

> fix(deps): override nanoid to ^3.3.18 to patch GHSA-2v37-7. Upgrade immediately to patch advisory. Migration: Low.

## Metadata
- **Repository URL**: https://github.com/heroui-inc/heroui
- **Primary Package**: `@heroui/react` (NPM)
- **Categories**: `STYLING`, `UI_PRIMITIVES`
- **Latest Version**: `v3.2.7`
- **Semantic Status**: `SECURITY_PATCH`
- **Bundle Size Impact (unavailable)**: `Size Unavailable`
- **Atom Ingestion Feed**: https://github.com/heroui-inc/heroui/releases.atom

## The Human Context (Plain-English Pitch)
@heroui/react is an open-source library and developer tool in the heroui-inc/heroui ecosystem. It saves developers from writing repetitive low-level boilerplate from scratch by providing a battle-tested, open-source implementation ready for production.

## Stage 1 Executive Summary ([Core Change] + [Required Action] + [Migration Effort])
fix(deps): override nanoid to ^3.3.18 to patch GHSA-2v37-7. Upgrade immediately to patch advisory. Migration: Low.

## Breaking Changes & Required Actions
- fix(deps): override nanoid to ^3.3.18 to patch GHSA-2v37-7h3g-55p8 by @wingkwong in #6873
- docs: correct and extend agent guidance by @wingkwong in #6877
- test(react): give coverage floors teeth and cover the weakest paths by @wingkwong in #6878
- fix(components): align components with documented conventions by @wingkwong in #6879

## Migration Snippet
```ts
npm install @heroui/react@3.2.7
```

## Ecosystem Compatibility Matrix & Graph Warnings
- **TypeScript 5.x** [`COMPATIBLE`]: Ships standard TypeScript declaration files without type regressions.

## Zero-Noise Release Timeline
- **v3.2.7** (2026-10-29) [SECURITY_PATCH]: fix(deps): override nanoid to ^3.3.18 to patch GHSA-2v37-7. Upgrade immediately to patch advisory. Migration: Low.

## Upgrade & Migration Q&A (GEO Direct Answers)
### Is heroui-inc/heroui v3.2.7 safe to upgrade in production?
heroui-inc/heroui v3.2.7 is classified as SECURITY_PATCH (PATCH release). fix(deps): override nanoid to ^3.3.18 to patch GHSA-2v37-7. Upgrade immediately to patch advisory. Migration: Low.

### What breaking changes or compatibility risks exist in heroui-inc/heroui v3.2.7?
No breaking API changes or peer dependency conflicts are recorded for heroui-inc/heroui v3.2.7 in the RepoSense compatibility graph.

### What is the bundle size impact of @heroui/react v3.2.7?
Measured bundle size telemetry is currently unavailable for @heroui/react v3.2.7; verify build output locally before deploying.

### How do I upgrade @heroui/react to v3.2.7?
Upgrade @heroui/react to v3.2.7 by running "npm install @heroui/react@3.2.7" and applying the migration steps: npm install @heroui/react@3.2.7