Open snyk-bot opened 3 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
⚠️ Warning
``` Failed to update the package-lock.json, please update manually before merging. ```Vulnerabilities that will be fixed
With an upgrade:
Why? Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-NTHCHECK-1586032
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-PRISMJS-1585202
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby-remark-images
The new version differs by 250 commits.- e98cb62 chore(release): Publish
- 164f9a1 fix(gatsby-source-contentful): De-dupe type names (#30834) (#30850)
- 0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (#30801) (#30853)
- f561724 fix(gatsby): lower memory pressure in SSR (#30793) (#30851)
- 96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (#30764) (#30852)
- e40c83d chore(release): Publish next
- a5b5cf8 feat: upgrade to remark 13 (#29678)
- 172cf4d chore(docs): Add link to perf implications siteContext (#30778)
- 4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (#30761)
- 2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (#30751)
- 1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (#30754)
- e0df4cc chore(docs): Change "whitelist" to "allow list" (#30756)
- 81ec270 chore: Add backport script (#30732)
- 63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (#30745)
- eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (#30746)
- ecd823f perf(gatsby): cache babel config items (#28738)
- a60e92f chore(release): Publish next
- dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (#30736)
- a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (#30713)
- 0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (#30709)
- 6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (#30727)
- c6fa488 chore(docs): Update wording of tutorial part 8 (#30606)
- a777367 fix(gatsby-cli): Update docs links in error-map (#30493)
- c473abf chore(docs): include autoprefixer in tailwind install command (#30718)
See the full diffPackage name: gatsby-transformer-remark
The new version differs by 250 commits.- e98cb62 chore(release): Publish
- 164f9a1 fix(gatsby-source-contentful): De-dupe type names (#30834) (#30850)
- 0b99d00 fix(gatsby): webpack warnings are no longer in object format by default (#30801) (#30853)
- f561724 fix(gatsby): lower memory pressure in SSR (#30793) (#30851)
- 96805d5 fix(gatsby-source-wordpress): change `console.warning` to `console.warn` (#30764) (#30852)
- e40c83d chore(release): Publish next
- a5b5cf8 feat: upgrade to remark 13 (#29678)
- 172cf4d chore(docs): Add link to perf implications siteContext (#30778)
- 4336d04 fix(gatsby-plugin-gatsby-cloud): Add missing index.js (so the plugin can be resolved in workspaces) (#30761)
- 2bdd5a5 fix(gatsby-source-wordpress): only log out duplicate node if we have all the data we want to log (#30751)
- 1a9b830 fix(gatsby-plugin-image): Don't inherit all img styles (#30754)
- e0df4cc chore(docs): Change "whitelist" to "allow list" (#30756)
- 81ec270 chore: Add backport script (#30732)
- 63cc8fa fix(docs): Copy edits for debugging html doc + add React-specific example (#30745)
- eed1d43 fix(docs): Add link to how to enable DEV_SSR for fixing inconsistent css styles between dev/prod (#30746)
- ecd823f perf(gatsby): cache babel config items (#28738)
- a60e92f chore(release): Publish next
- dd9e95c docs(gatsby-plugin-image): Note on tracedSVG options name change (#30736)
- a5869e3 fix(gatsby-plugin-image): Use bare GATSBY___IMAGE global (#30713)
- 0f3fa4e fix(contentful): make gatsby-plugin-image a peer dependency (#30709)
- 6b2fd94 fix(gatsby-source-wordpress): pass missing property helpers to gql fetch util (#30727)
- c6fa488 chore(docs): Update wording of tutorial part 8 (#30606)
- a777367 fix(gatsby-cli): Update docs links in error-map (#30493)
- c473abf chore(docs): include autoprefixer in tailwind install command (#30718)
See the full diffPackage name: prismjs
The new version differs by 250 commits.- 99d94fa 1.25.0
- 6d8e547 Updated changelog (#3083)
- e008ea0 Added support for Kusto (#3068)
- 4433ccf Added support for ASP.NET Razor (#3064)
- 6a356d2 Added support for Wren (#3063)
- 4fbdd2f Added support for MAXScript (#3060)
- 746a4b1 Added AviSynth language definition (#3071)
- ffb2043 Twilight theme: Increase selector specificities of plugin overrides (#3081)
- 52e8cee Markup: Made most patterns greedy (#3065)
- c7b6a7f Previewers: Ensure popup is visible across themes (#3080)
- 0ff371b Markup: Fixed ReDoS (#3078)
- d216e60 Tests: Improved dection of empty patterns (#3058)
- a1b67ce Added support for Magma (CAS) (#3055)
- 23cd9b6 Added support for GAP (CAS) (#3054)
- 8d0b74b Clojure: Improved tokenization (#3056)
- 148c1ec Added support for Mermaid (#3050)
- 8df825e Added support for Systemd configuration files (#3053)
- 87e5a37 Added support for Apache Avro IDL (#3051)
- 247fd9a Highlight Keywords: More documentation (#3049)
- 35b88fc Shell-session: Fixed command false positives (#3048)
- 4f97b82 Added support for GN (#3062)
- 5de8947 C++: Fixed generic function false positive (#3043)
- 4e9338a ESLint: Added `regexp/no-super-linear-backtracking` rule (#3040)
- 44456b2 Added benchmark suite (#2153)
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic