search

haysclark / gatsby-starter-casper

The Casper theme v1.4 ported to GatsbyJS
https://haysclark.github.io/gatsby-starter-casper/
MIT License
198 stars 54 forks source link

[Snyk] Security upgrade gatsby from 2.0.85 to 3.0.0 #91

Open haysclark opened 1 year ago

haysclark commented 1 year ago

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - package.json
⚠️ Warning ``` Failed to update the package-lock.json, please update manually before merging. ```
#### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:------------------------- ![medium severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/m.png "medium severity") | **713/1000**
**Why?** Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4 | Prototype Pollution
[SNYK-JS-JSON5-3182856](https://snyk.io/vuln/SNYK-JS-JSON5-3182856) | Yes | Proof of Concept (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: gatsby The new version differs by 250 commits.
  • f1d3f7b chore(release): Publish
  • 6e6ea56 chore(release): Publish rc
  • df50ce7 fix(gatsby): Add dir=ltr to Fast Refresh overlay (#29900) (#29908)
  • 83adec5 chore(docs): update readme (#29837) (#29909)
  • b2628da will git stop being weird (#29897) (#29907)
  • c98c87f chore(release): Publish rc
  • c8bf571 fix(gatsby-source-wordpress): image fixes (#29813) (#29886)
  • 85bb8ea fix(gatsby-plugin-image): Update peerdeps (#29880) (#29888)
  • c266b83 fix(gatsby): Remove `react-hot-loader` deps & other unused deps (#29864) (#29876)
  • 222ca3f fix(gatsby): with some custom babel configs array spreading with Set is not safe (#29885) (#29889)
  • ea31900 chore(release): Publish rc
  • f070422 fix(gatsby): Fix various small DEV_SSR bugs exposed in development_runtime tests (#29720) (#29866)
  • cb3b1ca chore: update peerdeps to latest major versions (#29857) (#29867)
  • 8639f7b fix(create-gatsby): Use legacy peer deps (#29856) (#29862)
  • fdc1fe2 fix(gatsby): fix some css HMR edge cases (#29839) (#29865)
  • e8a7e3b fix(gatsby-plugin-preact): fix fast-refresh (#29831) (#29860)
  • e7453c3 fix(gatsby): Improve Fast Refresh overlay styles (#29855) (#29861)
  • 76f4f96 chore: upgrade postcss & plugins (#29793)
  • de6cba6 chore(release): Publish rc
  • aafe584 fix: query on demand loading indicator always active on preact. (#29829) (#29836)
  • 34f5b8c fix(hmr): accept hot updates for modules above page templates (#29752) (#29835)
  • b8d21f8 fix(gatsby): workaround graphql-compose issue (#29822) (#29834)
  • 32fee71 fix(gatsby): eslint linting (#29796) (#29814)
  • bca7951 fix(gatsby-source-wordpress): HTML image regex's (#29778) (#29816)
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project. ------------ **Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.* For more information: 🧐 [View latest project report](https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr) 🛠 [Adjust project settings](https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr/settings) 📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities) [//]: # (snyk:metadata:{"prId":"6cc0bebd-00f7-4f5b-ae68-ff54667426bf","prPublicId":"6cc0bebd-00f7-4f5b-ae68-ff54667426bf","dependencies":[{"name":"gatsby","from":"2.0.85","to":"3.0.0"}],"packageManager":"npm","projectPublicId":"84a46da2-929c-4011-a1c0-e2f10a98415b","projectUrl":"https://app.snyk.io/org/haysclark/project/84a46da2-929c-4011-a1c0-e2f10a98415b?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-JSON5-3182856"],"upgrade":["SNYK-JS-JSON5-3182856"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","pr-warning-shown","priorityScore"],"priorityScoreList":[713]}) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Prototype Pollution](https://learn.snyk.io/lessons/prototype-pollution/javascript/?loc=fix-pr)