search

dermyhughes / gatsby-ghost-blog

Gatsby front end blog using Ghost as headless CMS
MIT License
0 stars 0 forks source link

Bump shell-quote and gatsby #136

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps shell-quote and gatsby. These dependencies needed to be updated together. Updates shell-quote from 1.6.1 to 1.7.3

Release notes

Sourced from shell-quote's releases.

v1.7.2

  • Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2)

v1.7.1

  • Fix $ being removed when not part of an environment variable name. (@​Adman in #32)

v1.7.0

  • Add support for parsing >> and >& redirection operators. (@​forivall in #16)
  • Add support for parsing <( process substitution operator. (@​cuonglm in #15)

v1.6.3

  • Fix Windows path quoting problems. (@​dy in #34)

v1.6.2

  • Remove dependencies in favour of native methods. (@​zertosh in #21)
Changelog

Sourced from shell-quote's changelog.

1.7.3

  • Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the quoting rules. (CVE-2021-42740)

1.7.2

  • Fix a regression introduced in 1.6.3. This reverts the Windows path quoting fix. (144e1c2)

1.7.1

  • Fix $ being removed when not part of an environment variable name. (@​Adman in #32)

1.7.0

  • Add support for parsing >> and >& redirection operators. (@​forivall in #16)
  • Add support for parsing <( process substitution operator. (@​cuonglm in #15)

1.6.3

  • Fix Windows path quoting problems. (@​dy in #34)

1.6.2

  • Remove dependencies in favour of native methods. (@​zertosh in #21)
Commits


Updates gatsby from 2.32.13 to 4.22.1

Release notes

Sourced from gatsby's releases.

v4.22

Welcome to gatsby@4.22.0 release (August 2022 #3)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.21

Welcome to gatsby@4.21.0 release (August 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.20

Welcome to gatsby@4.20.0 release (August 2022 #1)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

Previous release notes

Full changelog

v4.19

Welcome to gatsby@4.19.0 release (July 2022 #2)

Key highlights of this release:

Bleeding Edge: Want to try new features as soon as possible? Install gatsby@next and let us know if you have any issues.

... (truncated)

Commits
  • 3265a99 chore(release): Publish
  • 8e10e1c fix: ci pipeline (#36544) (#36568)
  • 725f071 fix(create-gatsby): Missing "plugins" in cmses.json (#36566) (#36567)
  • 78f8c7a chore(release): Publish
  • 4dcdeb1 chore(gatsby): Add env log for build and remove incorrect log for functions (...
  • 41de1f0 feat(gatsby): add partial hydration flag (#36436)
  • b8c2072 fix(gatsby-source-graphql): add dataLoaderOptions validation to gatsby-source...
  • b45debc chore(docs): fix incorrect closing tag in tutorial (#36459)
  • 222793d chore(docs): Update plugin count in part 3 of the tutorial (#36455)
  • 3222684 chore(docs): Fix page link to page 6 of remark tutorial (#36437)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by j0sh77, a new releaser for gatsby since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dermyhughes/gatsby-ghost-blog/network/alerts).
dependabot[bot] commented 2 years ago

Looks like these dependencies are up-to-date now, so this is no longer needed.