search

hikerpig / gatsby-project-kb

Developing gatsby-theme-kb, a Gatsby theme for publishing Knowledge Base.
https://gatsby-project-kb.vercel.app/
MIT License
62 stars 15 forks source link

[Snyk] Fix for 1 vulnerabilities #65

Open snyk-bot opened 1 year ago

snyk-bot commented 1 year ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Uncaught Exception
SNYK-JS-YAML-5458867		 Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: gatsby-plugin-postcss The new version differs by 148 commits.
  • 0c6cd61 chore(release): Publish
  • 5e8e621 chore: Update main README (#36954)
  • 7130cd4 test(gatsby): Slices API integration tests (#36747)
  • 6496eed chore(release): Publish next
  • bc7ac84 chore: preserve previous webpack stats derived values, even if we restart webpack itself (#36980)
  • 2b5af32 fix: drop `__renderedByLocation` prop when calculating slice props hashes and don't expose it to slice component (#36979)
  • cc1ee9b chore(release): Publish next
  • 6a53861 chore(gatsby-link): Correct type export (#36968)
  • 0ad6314 fix(gatsby-graphiql-explorer): Use upstream exporter package (#36966)
  • 964265c chore(release): Publish next
  • b624442 chore: Update peerDeps (#36965)
  • b2ab092 chore(release): Publish next
  • e2a14bf feat(gatsby): Slices <> partial hydration interop (#36960)
  • 0083e62 fix(deps): update starters and examples gatsby packages to ^4.24.7 (#36957)
  • 68e9cab chore(changelogs): update changelogs (#36958)
  • b9eb8d2 chore(deps): update dependency autoprefixer to ^10.4.13 for gatsby-plugin-sass (#36934)
  • 58c37ea chore(deps): update dependency @ jridgewell/trace-mapping to ^0.3.17 for gatsby-legacy-polyfills (#36933)
  • a5e4c47 fix(deps): update dependency body-parser to ^1.20.1 for gatsby-source-drupal (#36940)
  • c86aa7e chore(docs): Add clarification for Pro Tip on Part 4 of tutorial (#36918)
  • d5c775a feat(gatsby): handle graphql-import-node bundling (#36951)
  • 59e2976 feat(gatsby-remark-embed-snippet): added csproj to language map so it will be recognized as xml (#36919)
  • c8a7dda chore(docs): Valhalla Content Hub Reference Guide (#36949)
  • 3044280 fix(gatsby): stitch slices if just page html was regenerating without any of used slices regenerating (#36950)
  • 10abdcb chore(release): Publish next
See the full diff
Package name: tailwindcss The new version differs by 250 commits.
  • bd03dec 3.1.5
  • 13c2ad0 update changelog
  • 1110d92 Update changelog
  • 62f0791 Add more explicit types for the default theme (#8780)
  • 6e75e6e Update esbuild to version 0.14.48
  • 5d04331 Update eslint-plugin-prettier to version 4.2.1
  • 10e1b39 Update jest to version 28.1.2
  • 6729524 Support font-weight in font-size utilities (#8763)
  • 1318cb6 Update changelog
  • 1029775 Add support for alpha values in safelist (#8774)
  • f135bfa chore: Set permissions for GitHub actions (#8550)
  • 8494f75 Don’t prefix selectors in arbitrary variants (#8773)
  • 5191ec1 Fix usage of special-character prefixes (#8772)
  • c8c4852 Update changelog
  • 445970d Fix usage of postcss.config.js in standalone CLI (#8769)
  • d4f1f15 Allows fallback values in plugin API helpers (#8762)
  • c47e666 Update postcss-load-config to version 4.0.1 (#8686)
  • 7b03ee9 Update cssnano to version 5.1.12
  • 60a0ae2 Update resolve to version 1.22.1
  • 340cca9 Update eslint to version 8.18.0
  • 1a30ca0 3.1.4
  • 9f479f2 update changelog
  • 9c9ce36 Update prettier to version 2.7.1
  • 35b070e Fix typo in changelog
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

gatsby-cloud[bot] commented 1 year ago

:x: gatsby-project-kb-master deploy preview failed

Your build failed. View the build logs.

gatsby-cloud[bot] commented 1 year ago

:x: gatsby-project-kb-master deploy preview failed

Your build failed. View the build logs.