Yarn Audit: new or newly blocking advisories on main (0c39d89797)

**1** new or newly blocking advisory detected on push to `main` (0 release-blocking).

CI run: https://github.com/MetaMask/metamask-extension/actions/runs/33551897516

## Informational (dev-only or low severity)

- **nanoid** (high, dev-only) — nanoid: Integer Overflow or Wraparound
https://github.com/advisories/GHSA-xwg4-73v4-xw9w

Native audit tree

```
├─ nanoid
│ ├─ ID: 1153189
│ ├─ Issue: nanoid: Integer Overflow or Wraparound
│ ├─ URL: https://github.com/advisories/GHSA-xwg4-73v4-xw9w
│ ├─ Severity: high
│ ├─ Vulnerable Versions: <3.3.12
│ │
│ ├─ Tree Versions
│ │ └─ 2.1.11
│ │
│ └─ Dependents
│ └─ redux-devtools-core@npm:0.2.1
│
```

Start with the linked CI run and native audit tree, then trace redux-devtools-core@npm:0.2.1 to the dependency declaration and lockfile. Done means the nanoid advisory is no longer reported by the audit, while the audit still completes successfully.

Written by the indexing model from the issue text.