haysclark / gatsby-starter-casper

The Casper theme v1.4 ported to GatsbyJS
https://haysclark.github.io/gatsby-starter-casper/
MIT License
198 stars 54 forks source link

[Snyk] Fix for 1 vulnerabilities #100

Open haysclark opened 11 months ago

haysclark commented 11 months ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json - package-lock.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![high severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png "high severity") | **661/1000**
**Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby The new version differs by 250 commits.
  • 7c43f38 chore(release): Publish
  • 9a087ec fix(gatsby): fix eperm when cache getting cleared (#35154) (#35197)
  • a56b652 fix(gatsby): PnP fixes (#35194) (#35199)
  • 0b6067a fix(gatsby): remove apis from ts,tsx (#35183) (#35198)
  • f080b46 chore(release): Publish
  • 0275fad fix(gatsby-plugin-preact): fix preact alias (#35156) (#35169)
  • 3ac159f fix(gatsby-plugin-utils): Add missing fs-extra dep (#35165) (#35168)
  • 0f2ec73 fix(gatsby-cli): Resolve babel preset ts explicitly (#35153) (#35167)
  • 24b9fde chore(release): Publish
  • f10eb58 chore: Update eslintignore
  • 4753cf9 chore(docs): Update migration guide to add more info about image resolvers (#35105)
  • cd0b80c chore(docs): update documentation for node-fetch to use CommonJS (#35129)
  • 9690c7c fix(gatsby-plugin-sharp): Handle diff duotone settings (#35075)
  • bf8392c chore(gatsby): add generic to GatsbyFunctionRequest (#35029)
  • c5b8bb9 fix(deps): update starters and examples - gatsby (#35085)
  • 56fbf8d feat(gatsby-core-utils,gatsby-cli): Allow write to gatsby-config.ts (#35074)
  • fb9c014 chore(plugins): Deprecate create client paths plugin (#35124)
  • 500d17a chore(docs): Update query-execution.md (#35115)
  • 6d01f21 docs(gh-pages): improve separate repository instructions (#35118)
  • c02d256 chore(docs): Fix typos (#35119)
  • a5cd72a fix(gatsby): use lmdb for resultHash cache so shared across workers (#34925)
  • c0f394d fix(create-gatsby): Update wordpress deps in schema (#35107)
  • 46e2902 fix(gatsby): null check for context (#35096)
  • 5852dc8 feat(gatsby): Capture number of compiled TS files in Telemetry (#35023)
See the full diff
Package name: gatsby-plugin-sharp The new version differs by 250 commits.
  • 0a455df chore(release): Publish
  • 91dc167 fix(gatsby): don't log FAST_DEV message for each worker (#32961) (#32967)
  • f936c93 fix(gatsby): set staticQueryResultHash to new hash on data change (#32949) (#32966)
  • ea161ce feat(gatsby-graphiql-explorer): upgrade to webpack 5 (#30642)
  • 944e381 chore(release): Publish next
  • d6326df fix(gatsby-core-utils): Switch `auth` option from got to username/password (#32665)
  • cf9c066 fix(gatsby): add this typings to actions (#32210)
  • 53aa88e chore: enable test parallelism (#32766)
  • b7deabc fix(deps): update starters and examples - gatsby (#32843)
  • 6025c84 chore(deps): update dependency katex to ^0.13.13 for gatsby-remark-katex (#32567)
  • d87c5cb chore: enable lmdb by default and update node for next major (#32695)
  • 818d6c1 feat(gatsby-plugin-gatsby-cloud): Add `disablePreviewUI` option (#32907)
  • f556a00 chore: update changelogs (#32924)
  • aba5eba feat(gatsby): enable webpack caching in development for everyone (#32922)
  • ac7bd4e feat(gatsby-source-wordpress): allow path to js file for beforeChangeNode option (#32901)
  • 1a87a8a docs(gatsby-source-wordpress): document content sync (#32768)
  • 417df15 chore: re-generate changelogs (#32886)
  • 1810874 fix(gatsby-source-wordpress): draft previews (#32915)
  • 7c72ab8 chore(gatsby): remove unused packages (#32903)
  • afb06d7 chore(docs): Add hint for MDX plugin in remark-plugin-tutorial (#32876)
  • 1303ecb chore(docs): Update wording for "using-web-fonts" (#32902)
  • 9589911 chore(docs): Fix code highlighting in part 6 (#32900)
  • 568d4ce feat(gatsby-source-drupal): Use the collection count from JSON:API extras to enable parallel API requests for cold builds (#32883)
  • 41f5337 fix(deps): update typescript to ^4.29.3 (#32614)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"bf91da51-83a7-4393-86c5-3914a03778fd","prPublicId":"bf91da51-83a7-4393-86c5-3914a03778fd","dependencies":[{"name":"gatsby","from":"2.0.85","to":"4.10.2"},{"name":"gatsby-plugin-sharp","from":"2.0.17","to":"3.13.0"}],"packageManager":"npm","projectPublicId":"84a46da2-929c-4011-a1c0-e2f10a98415b","projectUrl":"https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-INFLIGHT-6095116"],"upgrade":["SNYK-JS-INFLIGHT-6095116"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[661],"remediationStrategy":"vuln"}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)