JustFly1984 / react-google-maps-api

React Google Maps API
MIT License
1.75k stars 426 forks source link

[Snyk] Security upgrade gatsby from 5.5.0 to 5.9.1 #3241

Open snyk-bot opened 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 608/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4.3
Information Exposure
SNYK-JS-GATSBY-5671647
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gatsby The new version differs by 248 commits.
  • 774313b chore(release): Publish
  • fb30dc0 fix(gatsby): handle cyclic chunkgroup children (#38052) (#38061)
  • ae5a654 fix(gatsby): don't serve codeframes for files outside of compilation (#38059) (#38062)
  • 18a47da chore(release): Publish
  • 52ad261 fix(gatsby-source-contentful): don't call `createNode` on `null` (#37958) (#37960)
  • e95b10a chore(release): Publish
  • 311b202 fix(gatsby-source-contentful): reduce memory usage (#37910)
  • c1f0bbf fix(gatsby-plugin-google-gtag): Add plugin options (#37953)
  • 2dbd95d chore(docs): Move existing main tutorial to "getting-started" name (#37539)
  • 4c4a4f1 chore(docs): New "Creating a Source Plugin" tutorial (#37538)
  • aece9ef chore(deps): update starters and examples (#37950)
  • 7fd887e chore(docs): Gatsby functions update (#37941)
  • 4a1b2ce chore(gatsby-plugin-feed): Update README with clearer instructions (#37930)
  • dc998d5 fix(gatsby): Shadowing with resourceQuery (#37938)
  • 0e9feeb feat(gatsby-source-wordpress): opt out of stale node checks (#37920)
  • e258553 chore(docs): Add "ESM and Gatsby" (#37934)
  • 68510e1 chore(gatsby-source-drupal): Improve README wording
  • 1fd967b fix(gatsby): Fix argument order for `onPreRouteUpdate` (#30339)
  • 792937c feat(gatsby-plugin-utils): make image cdn urls configurable (#37932)
  • ba2a45f fix(gatsby): move typing for `enableStatefulSourceNodes` into `Actions` (#37933)
  • 579fe1e fix(deps): update dependency xstate to ^4.37.1 for gatsby-source-filesystem (#37872)
  • dd47b7c fix(gatsby-plugin-sitemap): remove splice for default filter (#37916)
  • ccb0e7a chore(deps): update starters and examples (#37926)
  • e62123f chore(docs): Update "Set Node.js version" cloud (#37924)
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.